Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
File:                     g9HRV2Bl4FAfLXR0TVFF001qcqo.mft (raw, json)
Hash identifier:          FOAW4SuHKOeuvqAmynV21DhdzKq/QvX3hToTWnYitmA=
Subject key identifier:   80:64:5E:19:E4:46:F3:D4:04:AC:26:80:C8:13:1E:AF:11:77:05:04
Authority key identifier: 83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA
Certificate issuer:       /CN=F3690D01AF/serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA
Certificate serial:       EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
Manifest number:          EE
Signing time:             Sun 19 May 2024 02:21:58 +0000
Manifest this update:     Sun 19 May 2024 02:21:58 +0000
Manifest next update:     Tue 21 May 2024 02:21:58 +0000
Files and hashes:         1: g9HRV2Bl4FAfLXR0TVFF001qcqo.crl (hash: KvjbDDDSdNvrN/8KweU/1YdMy0/hbXdpD2IlOdLpZw8=)
                          2: B5BAB51C637E11EEBB2D437E4AD9E6FC.roa (hash: lTgo88jgYIBRxqWVkQ/cnQHAMBRJfU2wE+z/YeI8Onc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690D01AF/serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA
        Validity
            Not Before: May 19 02:21:58 2024 GMT
            Not After : May 21 02:21:58 2024 GMT
        Subject: CN=66496246-758c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:e2:44:a7:dc:e6:26:bd:41:41:60:90:53:
                    be:41:3d:a7:db:53:20:56:bf:18:07:06:14:e3:c2:
                    fb:6b:4d:63:2d:6e:7e:e8:cf:cc:99:d2:29:3b:04:
                    1d:4b:f7:38:aa:ef:58:70:ce:8d:2c:b7:6e:80:09:
                    d8:7d:ae:bf:62:9d:04:ee:d6:e8:48:5e:16:d2:72:
                    29:d5:13:d8:4f:9c:c1:b0:5e:9f:12:12:68:14:6e:
                    67:61:67:33:20:ff:3b:2c:cb:87:9d:cd:d0:eb:3d:
                    34:55:90:dc:91:07:ba:e4:3f:d7:ea:ad:e6:c8:1d:
                    cb:a4:dd:ee:04:98:d1:7e:fc:3f:15:3d:dc:ee:49:
                    ec:a4:70:ea:16:0d:e3:dd:d4:dd:54:a2:e3:ae:99:
                    0a:71:6b:2e:64:19:a5:3b:1b:d2:60:ea:5d:f1:6d:
                    bb:a9:be:e5:60:13:c6:20:df:8a:40:94:c5:f9:8b:
                    44:95:11:cb:45:71:79:84:70:0c:fd:f3:e5:7a:69:
                    00:d0:e0:f3:5c:76:bf:8a:57:a4:52:1f:51:55:d0:
                    80:bd:11:da:54:14:31:8f:7e:26:18:10:57:06:9f:
                    d1:fe:1e:6f:d3:1a:09:7e:88:6d:eb:fe:fb:6c:a1:
                    75:7c:35:2e:e5:c3:fc:3c:e7:8b:14:24:c6:df:5d:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:64:5E:19:E4:46:F3:D4:04:AC:26:80:C8:13:1E:AF:11:77:05:04
            X509v3 Authority Key Identifier:
                keyid:83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:48:56:a7:a9:32:e6:f1:01:76:41:83:b3:d9:1b:d9:44:da:
         06:a9:c7:d2:72:ac:46:3e:e6:02:8b:37:1a:67:9e:39:3f:cf:
         f3:e4:a3:f9:de:e5:52:b3:9b:95:b7:08:3c:48:cc:7b:58:9e:
         4c:84:cf:f4:53:28:a2:d1:1c:05:b5:0d:75:32:f8:c5:03:a7:
         37:d0:e2:09:8b:28:ce:db:57:24:90:af:c1:66:55:72:f7:55:
         df:35:0f:34:d7:01:21:09:99:ea:21:b3:c3:3c:00:b1:17:91:
         da:df:e5:6d:59:f6:ce:4a:63:59:b9:d0:62:db:7e:52:49:79:
         09:dc:7b:63:78:2a:fa:1c:5c:7f:cb:e0:04:05:d0:27:1f:13:
         52:e3:8e:31:b5:e1:0f:2a:26:d6:97:27:35:c4:01:35:18:3b:
         57:2a:72:81:11:ac:de:49:5d:13:92:93:71:d4:3b:ac:67:7c:
         68:8b:bc:f8:93:18:05:da:92:dc:8e:55:68:30:43:bd:db:08:
         79:2a:0b:8e:31:d2:8a:96:ca:6e:97:4b:c8:1d:d0:09:ae:9b:
         c2:69:c5:fa:90:34:df:63:f5:4b:00:02:52:9e:09:f4:ea:f8:
         42:a1:26:37:88:58:0f:29:ad:d4:9b:40:55:71:53:f3:ef:4d:
         77:52:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:47 2024 by rpki-client on console-fra.rpki-client.org