Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
File:                     1wfkSz_UKAnv_gwP4_VABn04PVY.mft (raw, json)
Hash identifier:          sTmNllARRVVz77HycUFvn7wsUkAjmO7tWKGWCcIHlEk=
Subject key identifier:   EC:14:7E:40:22:B4:91:B6:27:AE:6D:B1:F2:4F:36:48:22:92:D0:CF
Authority key identifier: D7:07:E4:4B:3F:D4:28:09:EF:FE:0C:0F:E3:F5:40:06:7D:38:3D:56
Certificate issuer:       /CN=F3690C75AF/serialNumber=D707E44B3FD42809EFFE0C0FE3F540067D383D56
Certificate serial:       4F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1wfkSz_UKAnv_gwP4_VABn04PVY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
Manifest number:          4F
Signing time:             Wed 23 Oct 2024 02:56:21 +0000
Manifest this update:     Wed 23 Oct 2024 02:56:20 +0000
Manifest next update:     Fri 25 Oct 2024 02:56:20 +0000
Files and hashes:         1: 1wfkSz_UKAnv_gwP4_VABn04PVY.crl (hash: MLbLpuQtisA1E/v9BQbTlw4+aBvnPB6reI8sWTZL/U8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1wfkSz_UKAnv_gwP4_VABn04PVY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690C75AF/serialNumber=D707E44B3FD42809EFFE0C0FE3F540067D383D56
        Validity
            Not Before: Oct 23 02:56:20 2024 GMT
            Not After : Oct 25 02:56:20 2024 GMT
        Subject: CN=671865d4-ae56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:af:32:9f:c5:17:19:1d:d7:be:e1:52:ff:0a:
                    91:f0:69:28:df:46:59:47:4d:e5:8b:b2:0a:4d:90:
                    e6:8e:2e:1d:45:00:b9:80:cd:ef:8d:49:83:ac:63:
                    c9:5f:92:21:bf:7e:4b:78:bb:98:59:d0:6f:18:f7:
                    c2:f4:b4:5f:2e:e5:2f:f0:d4:ff:41:77:0b:f9:2e:
                    e2:d5:5c:bc:10:3e:4d:a1:48:f4:e3:d0:2c:68:84:
                    0a:d3:20:a5:87:77:91:85:20:ff:94:d6:23:42:a5:
                    c7:98:e1:18:fd:a7:58:32:bc:39:85:3b:74:e7:dc:
                    93:84:88:68:4c:7c:a5:b7:eb:84:9c:6e:cf:e9:a5:
                    c1:8f:a6:87:2f:8c:53:a7:ae:a4:2d:81:e5:93:37:
                    0c:eb:7a:d6:f4:65:6d:f0:b8:2c:98:e8:cb:1f:5e:
                    5e:35:58:0d:e7:77:96:fa:b0:f7:0d:11:b8:38:dd:
                    70:36:21:2f:c4:78:6d:52:fb:27:97:c7:72:e2:8f:
                    1b:5e:fe:56:05:1f:20:25:f5:10:b3:28:8d:71:dd:
                    61:a6:f5:9a:44:86:7e:ad:1b:03:66:45:dd:e9:0d:
                    0e:b6:60:16:1c:fd:cd:52:15:17:7a:c9:33:99:07:
                    59:67:ae:e6:57:47:82:85:bd:35:6d:0d:fe:95:b9:
                    74:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:14:7E:40:22:B4:91:B6:27:AE:6D:B1:F2:4F:36:48:22:92:D0:CF
            X509v3 Authority Key Identifier:
                keyid:D7:07:E4:4B:3F:D4:28:09:EF:FE:0C:0F:E3:F5:40:06:7D:38:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1wfkSz_UKAnv_gwP4_VABn04PVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5e:7b:d3:8c:af:d3:0c:34:76:40:66:fc:93:53:34:6c:6e:
         fc:15:4b:c8:7c:73:60:61:de:5b:a4:d2:e3:27:82:d5:c2:21:
         c5:10:e7:65:61:94:d1:79:b4:4c:28:31:8a:3d:eb:7f:21:a8:
         d0:8d:77:61:c6:af:56:21:79:cd:c2:36:83:02:0c:29:a8:d2:
         ab:06:de:b5:64:79:7f:34:24:14:3f:54:ed:40:54:6e:91:6b:
         52:9c:e4:d4:fc:9c:e3:a7:09:a2:1a:91:85:12:05:75:20:6b:
         11:ba:09:3f:b0:eb:36:72:59:f1:93:97:37:9f:20:3d:ac:0e:
         da:bb:66:e6:d5:86:41:13:f0:2e:4a:ab:d0:1c:0e:cd:f6:e2:
         ad:42:5d:1a:ee:1b:8b:d6:0f:39:e4:82:0f:cd:82:28:0f:2a:
         97:ce:60:10:8c:2b:aa:ed:67:b9:4c:d6:84:d4:61:84:a7:79:
         f2:ed:0f:7d:a8:56:47:c9:4d:5f:1c:3e:71:ff:73:65:09:4e:
         81:c9:0d:9e:1c:48:33:f9:47:12:d0:42:9a:1e:79:5d:85:b5:
         07:dc:c0:7b:d2:7f:96:1c:f2:39:99:9b:37:e7:37:41:96:3b:
         dc:cc:bf:79:89:83:a2:33:86:3f:c4:40:49:bf:71:e0:96:1b:
         a4:ba:1c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:00:58 2024 by rpki-client on console-fra.rpki-client.org