Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
File:                     M9k2dXxyMpyzVJDsNDXRPytwToI.mft (raw, json)
Hash identifier:          mBv6YaF/XF0MMVoP2XsAVhhQKufRLSKdx4n31IDpv6w=
Subject key identifier:   DC:68:3A:83:C9:5B:12:87:8F:63:71:E8:DE:78:87:25:78:65:D5:9B
Authority key identifier: 33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
Certificate issuer:       /CN=F3690C51AF/serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Certificate serial:       04
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
Manifest number:          04
Signing time:             Fri 22 Nov 2024 03:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:24 +0000
Files and hashes:         1: M9k2dXxyMpyzVJDsNDXRPytwToI.crl (hash: PIcjLYc68+WD1HtT3xn6rQNOZhlrlNP42+LjxkrcHTE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690C51AF/serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
        Validity
            Not Before: Nov 22 03:00:24 2024 GMT
            Not After : Nov 24 03:00:24 2024 GMT
        Subject: CN=673ff3c8-feea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:0b:0d:39:94:93:dd:54:9d:ac:a5:31:00:
                    1d:eb:f7:8d:4f:96:20:4e:df:f6:63:1c:2c:61:98:
                    c4:b5:85:b9:a7:77:e6:a1:92:1b:89:a2:76:ad:39:
                    7c:9f:5d:23:ec:db:3c:5b:55:5f:b7:8d:36:5c:9e:
                    86:1a:d6:ff:ad:6f:ff:dd:f2:e1:c8:69:1d:ce:84:
                    81:89:1e:23:90:62:42:c4:09:58:80:9d:ad:f5:b0:
                    2f:67:a7:4a:36:1d:ae:a6:61:b1:a6:78:57:d8:c6:
                    4c:a2:62:6c:ca:fb:5d:3e:dc:70:11:47:72:bf:c8:
                    f9:7d:8d:a1:38:bc:04:e3:d7:19:d0:ed:56:85:27:
                    2a:26:f3:21:89:f8:1c:db:6d:9f:9f:70:fb:9a:40:
                    b2:79:52:a2:26:54:e3:a7:4e:36:c7:d2:7e:c4:57:
                    d3:8f:4c:3a:5c:ac:a7:49:7a:da:8b:7e:42:98:8d:
                    57:f2:b7:08:a7:b8:a5:67:cf:65:b8:dd:60:71:4f:
                    24:49:86:f0:60:fc:d5:2f:9f:df:6f:f2:42:60:f4:
                    66:ed:bf:9e:17:90:a7:d0:b4:17:91:36:75:cf:7c:
                    84:78:13:23:a2:31:50:e1:b2:63:96:eb:6c:59:9f:
                    68:4b:49:64:af:fb:18:d1:2e:fb:a1:07:01:59:7e:
                    21:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:68:3A:83:C9:5B:12:87:8F:63:71:E8:DE:78:87:25:78:65:D5:9B
            X509v3 Authority Key Identifier:
                keyid:33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:cf:8f:1c:e0:3f:fb:f4:3d:25:30:69:26:da:3f:57:da:b0:
         43:84:b4:23:4c:33:d5:e4:48:97:3a:e0:94:50:f8:a4:4b:b7:
         d8:0f:e7:02:13:17:e8:2d:3f:75:2e:fa:bf:ac:4e:7b:ee:bc:
         fa:da:b7:d8:1a:59:2c:61:13:bf:23:9e:9d:00:0a:a8:68:8e:
         d7:17:9e:10:f0:55:40:11:f0:0b:cd:e4:db:92:a1:88:95:86:
         89:6a:02:48:d6:fe:36:5f:39:fd:f8:00:f8:7b:7b:24:b6:b9:
         8b:72:d2:cc:cc:c9:e2:1a:49:ca:6a:51:9f:db:93:49:67:48:
         3b:79:8c:bd:ee:12:0f:27:59:7b:d6:67:f8:f5:63:a0:5d:b2:
         39:9e:9d:8f:e8:55:69:c2:ad:5e:3a:c2:e5:d5:89:98:11:73:
         56:20:56:14:14:d8:84:8d:72:2e:3a:df:fe:c7:28:cc:72:05:
         7b:f8:ab:17:12:cc:bc:49:28:f1:b0:41:ea:c2:aa:e1:6b:53:
         40:af:89:91:8c:0e:5f:1f:4c:d7:c5:c0:fb:5d:2a:3c:40:14:
         d8:fc:d1:bc:db:e9:0d:09:81:c5:37:7c:94:e4:06:10:1e:5e:
         3a:a7:fc:76:cd:40:c8:8e:d0:1b:97:5b:da:06:c1:05:03:f3:
         f1:5e:2a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----