Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft
File:                     Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft (raw, json)
Hash identifier:          5qpXkj0QQeLPNRSgUyUimeJYjtBA1oZZyINV3iuiZXY=
Subject key identifier:   B8:67:BD:D2:87:53:60:A5:4E:9A:AC:BB:E8:67:B2:1A:25:CA:E6:6B
Authority key identifier: 3F:2D:44:F5:03:5B:D7:69:16:93:56:71:26:3D:1F:1F:E2:2D:3F:D1
Certificate issuer:       /CN=F368CC63AF/serialNumber=3F2D44F5035BD76916935671263D1F1FE22D3FD1
Certificate serial:       48
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Py1E9QNb12kWk1ZxJj0fH-ItP9E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft
Manifest number:          46
Signing time:             Wed 05 Feb 2025 03:21:40 +0000
Manifest this update:     Wed 05 Feb 2025 03:21:40 +0000
Manifest next update:     Fri 07 Feb 2025 03:21:39 +0000
Files and hashes:         1: Py1E9QNb12kWk1ZxJj0fH-ItP9E.crl (hash: JN1aRPqWFYP6xh0y3dvRiLZkq9mRwp9X8T2V2IKrtkM=)
                          2: A860D670B24D11EF9178D468762E951A.roa (hash: CZNA+65qRaZByZrXC7MwxwGK34lyEikm+CF4MxQgD/4=)
                          3: CE647098B24D11EFBF39E46A762E951A.roa (hash: Tr+Uq3brNImHW7wN7GMiqLrOGB3PYGFFy8E/vBXE1gM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Py1E9QNb12kWk1ZxJj0fH-ItP9E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Feb 2025 03:21:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368CC63AF
        Validity
            Not Before: Feb  5 03:21:40 2025 GMT
            Not After : Feb  7 03:21:39 2025 GMT
        Subject: CN=67a2d944-36eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:b3:e4:70:27:73:de:96:4e:cb:f6:72:6f:
                    8b:60:3c:43:87:30:65:fd:9f:ec:15:20:65:cb:7c:
                    a6:88:f0:37:20:3c:c7:e0:a0:0a:36:2d:9d:6c:3c:
                    16:31:31:9e:7a:32:f0:a6:3b:9d:69:f6:2d:38:eb:
                    80:89:e3:1c:74:ff:2a:25:ca:96:4e:98:a6:6c:bd:
                    e6:ad:20:8c:be:74:55:70:2b:32:9a:a1:af:90:9d:
                    e8:1b:77:3c:17:2d:0b:70:e8:c0:3e:49:b5:60:71:
                    4f:2f:fe:50:ae:43:09:31:39:3e:a3:d2:64:8d:5d:
                    99:1f:78:f8:0f:82:bd:76:42:2e:ae:b0:af:18:e4:
                    ef:71:99:9f:53:54:8c:dd:27:c1:72:5b:88:2c:f6:
                    9b:d2:9f:28:4b:08:ac:f1:c4:56:85:fa:d3:7f:93:
                    1e:a6:a4:36:8d:c1:6a:87:72:62:f0:c2:36:ba:80:
                    e2:42:f0:92:f7:5a:e0:62:2f:80:7f:7e:e0:f5:49:
                    a3:a9:8f:92:0c:29:77:f8:d2:55:bd:99:dd:46:12:
                    c7:58:7c:c7:85:16:51:f9:0f:f5:b7:70:e4:a6:df:
                    cb:60:8f:f6:9c:40:ee:56:1f:f5:d4:3d:ed:f6:bc:
                    56:fc:60:ea:dd:97:3d:dc:49:9f:3e:d9:2a:70:b5:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:67:BD:D2:87:53:60:A5:4E:9A:AC:BB:E8:67:B2:1A:25:CA:E6:6B
            X509v3 Authority Key Identifier:
                keyid:3F:2D:44:F5:03:5B:D7:69:16:93:56:71:26:3D:1F:1F:E2:2D:3F:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py1E9QNb12kWk1ZxJj0fH-ItP9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CC63/0F97EDE8B24D11EFBDE38866762E951A/Py1E9QNb12kWk1ZxJj0fH-ItP9E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:70:6b:d4:c1:95:72:4e:17:3e:53:19:c5:c8:19:d7:f3:48:
         bd:6e:f7:3b:c3:58:56:e1:96:cf:a7:1a:2f:a9:f6:2b:66:6f:
         b7:14:86:ee:67:80:19:ed:f0:07:af:2a:89:7c:ab:f6:83:3e:
         16:95:74:bb:26:d6:05:1f:d4:fe:b7:e8:3f:fc:93:23:e6:f9:
         b9:54:e9:8f:a4:cc:c5:64:12:25:fe:94:be:77:1f:da:94:a1:
         73:8d:cb:16:9d:c9:eb:fa:88:42:ac:61:ea:07:a2:b6:b6:80:
         a2:bd:f9:a1:fc:85:3b:dd:64:71:2a:22:b9:7d:63:f4:5f:be:
         86:23:07:7f:87:4f:bc:c9:57:49:74:39:f0:86:dc:46:fb:d3:
         08:ec:1f:c9:8f:ec:5c:95:ca:de:51:50:93:f4:dc:e3:0b:96:
         f0:0c:de:43:01:b5:d8:e8:85:45:26:cc:42:78:ec:1b:2f:ec:
         49:b4:ad:fe:63:c2:aa:6d:1e:e9:e4:44:2d:9f:f3:8d:2a:8e:
         30:b5:aa:0e:bf:0c:e0:72:13:56:fb:26:eb:3c:df:cb:d3:4e:
         a8:41:26:f5:f5:20:7b:5c:95:14:77:3a:5a:ac:88:60:10:e6:
         c4:5d:fe:53:b1:ff:d9:8a:ea:54:1d:77:4b:01:fd:f3:e9:41:
         c4:6b:a8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:51:03 2025 by rpki-client