Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
File:                     TwSz--IMFQm6-aos_oN2Xy6WnK4.mft (raw, json)
Hash identifier:          kLthQ4jxD9zAVg6QFsEBaMEyhvyLyWPUhHGFLGRl5sA=
Subject key identifier:   82:81:EC:E0:39:46:06:9E:67:57:8F:2A:EB:F0:1F:E5:FA:E0:79:80
Authority key identifier: 4F:04:B3:FB:E2:0C:15:09:BA:F9:AA:2C:FE:83:76:5F:2E:96:9C:AE
Certificate issuer:       /CN=F368BE0BAF/serialNumber=4F04B3FBE20C1509BAF9AA2CFE83765F2E969CAE
Certificate serial:       28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
Manifest number:          27
Signing time:             Wed 23 Oct 2024 03:03:53 +0000
Manifest this update:     Wed 23 Oct 2024 03:03:53 +0000
Manifest next update:     Fri 25 Oct 2024 03:03:53 +0000
Files and hashes:         1: TwSz--IMFQm6-aos_oN2Xy6WnK4.crl (hash: XlNw4kdBJ/0PV+SGbUcdDmD4bObh6POVnleDuaqkMms=)
                          2: 60B3D914750111EFA5E0E087762E951A.roa (hash: UtfppmUEN5RqKXCtw1VeKzrsyq6Tj8yeIDmUGAHWijE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368BE0BAF/serialNumber=4F04B3FBE20C1509BAF9AA2CFE83765F2E969CAE
        Validity
            Not Before: Oct 23 03:03:53 2024 GMT
            Not After : Oct 25 03:03:53 2024 GMT
        Subject: CN=67186799-623d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f7:8d:6d:87:a8:48:f5:44:de:42:64:11:52:
                    c7:08:2b:36:f8:1d:04:92:af:f8:89:f9:71:a7:a9:
                    72:42:6d:26:31:d4:5b:9b:4d:65:ab:ad:2a:97:c8:
                    e1:14:e6:3d:fc:89:b7:82:db:8e:e6:bf:2a:8f:47:
                    88:90:c5:ed:b2:2e:7a:7b:c6:08:51:98:6b:98:fd:
                    c5:51:5b:61:0d:4d:90:57:3d:86:c6:d9:01:00:96:
                    05:c2:a7:a7:db:34:11:d1:49:7e:a9:bb:08:47:08:
                    17:42:0f:62:d8:5f:09:64:1f:3b:89:87:e3:4b:22:
                    ed:96:7b:7c:72:26:40:9e:e1:b8:3f:a8:be:ec:07:
                    8e:ba:e8:cc:f4:62:29:c1:9e:5f:a5:42:1d:73:b1:
                    66:70:fc:5e:8f:53:b8:e5:80:04:7f:fd:b9:72:e4:
                    99:c5:bf:9e:51:49:fb:c9:09:cb:b5:23:6b:a5:ca:
                    ce:97:eb:da:2b:e2:0d:13:8e:98:28:47:5c:83:7f:
                    cc:0d:19:ac:67:c1:43:aa:68:7e:cf:f6:1c:25:82:
                    90:9d:f4:a9:46:81:5d:93:e4:b2:34:64:f0:02:a9:
                    3d:94:d0:2d:5e:02:4a:66:75:0e:eb:48:10:6f:68:
                    99:20:3c:06:76:5d:76:77:6a:ff:a7:87:39:30:a6:
                    d6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:81:EC:E0:39:46:06:9E:67:57:8F:2A:EB:F0:1F:E5:FA:E0:79:80
            X509v3 Authority Key Identifier:
                keyid:4F:04:B3:FB:E2:0C:15:09:BA:F9:AA:2C:FE:83:76:5F:2E:96:9C:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TwSz--IMFQm6-aos_oN2Xy6WnK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BE0B/C1B00036750011EF8664A683762E951A/TwSz--IMFQm6-aos_oN2Xy6WnK4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:ea:ec:04:6b:cf:bc:bb:8b:3c:a3:71:71:1e:52:6a:7f:
         00:e8:de:a7:cd:35:7d:ec:83:3e:28:91:89:19:93:34:a8:2f:
         ee:ae:19:bb:44:f5:45:a5:22:46:e7:3e:17:64:4d:fb:f0:d8:
         51:81:14:50:0b:22:d2:10:b4:a1:32:e1:f5:c7:b2:42:8d:1a:
         d9:38:88:c6:96:9f:db:94:3a:eb:66:66:5c:1c:0a:6b:6b:f3:
         30:38:84:49:4d:c0:04:43:ac:a3:81:e8:44:5c:c3:53:ca:fa:
         12:81:6f:fa:ee:8d:9b:b5:4a:f6:1e:9c:8e:1c:fb:ae:68:d5:
         af:ab:1a:ec:99:96:80:d3:41:fe:3b:38:d3:b9:79:d2:37:f3:
         fe:2f:d4:4a:0a:c8:9f:fb:bb:bd:96:fc:3e:08:d9:bc:43:77:
         94:25:b2:bf:88:1b:82:05:a0:2d:1d:ec:32:ae:00:b5:91:5f:
         c9:3b:46:b4:c4:f3:b5:b7:ee:6c:5b:d2:0a:2a:81:04:2f:5a:
         d5:76:25:7b:f2:d5:8f:4d:4a:7b:e9:c8:b0:f3:fb:32:3d:ce:
         0b:25:95:17:d6:f5:18:e9:6e:bd:1d:8d:37:bb:ae:76:33:09:
         1a:37:52:ac:8b:f3:3e:8d:6a:e8:d5:ec:68:85:a0:7b:8a:0f:
         c0:c1:1f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:41:18 2024 by rpki-client on console-ams.rpki-client.org