Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
File:                     9zORrduc3mc6pJF07KjUMLSfGcM.mft (raw, json)
Hash identifier:          u0S15pdvJfsTu8ZUTRiVofyRo+SBkktTJms93UpN3ds=
Subject key identifier:   CC:5F:7C:B3:78:2C:27:5A:53:68:9C:4D:3A:7C:E8:A9:D9:63:41:C4
Authority key identifier: F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3
Certificate issuer:       /CN=F36914A7AR/serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
Certificate serial:       069C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
Manifest number:          069B
Signing time:             Sat 04 May 2024 01:06:37 +0000
Manifest this update:     Sat 04 May 2024 01:06:37 +0000
Manifest next update:     Mon 06 May 2024 01:06:37 +0000
Files and hashes:         1: 9zORrduc3mc6pJF07KjUMLSfGcM.crl (hash: CLAMBp+/MkUDLNBnq0xo9l5R6CjUf3mIkpSMnm4kt8Y=)
                          2: FBB32E86FC8111E9BB7F292CF8AEA228.roa (hash: HuM3BwkpOIpwBJ+xYmwrtHtu6kY28m4Q/SLVfLjrjjs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                          rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1692 (0x69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AR/serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
        Validity
            Not Before: May  4 01:06:37 2024 GMT
            Not After : May  6 01:06:37 2024 GMT
        Subject: CN=66358a1d-a24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bb:6b:ab:6e:4d:13:d9:e0:a0:bc:41:78:d3:
                    a0:32:ed:aa:15:fc:68:44:82:ca:86:7e:bc:b2:63:
                    ea:4a:82:4a:b9:28:05:a7:17:2c:84:34:11:db:84:
                    e8:d8:d6:5f:d8:eb:38:a7:43:8e:48:30:52:42:e7:
                    fa:84:9c:26:de:f0:f2:56:37:b4:aa:07:e1:d6:75:
                    8c:42:57:75:a6:2a:52:db:5f:3c:18:39:16:3e:c7:
                    b5:88:bd:68:d6:9a:15:fa:a0:58:67:c1:5c:83:8b:
                    ab:92:77:ed:64:95:22:ab:35:53:21:5b:1f:1e:d9:
                    d8:38:af:d0:6f:90:66:2d:3d:5e:e3:c2:37:f7:9f:
                    95:f2:0d:a9:40:2b:bc:77:e0:f9:cc:d9:ca:13:1f:
                    f9:43:31:db:1b:e2:08:f0:7f:47:b6:b5:c3:2c:f4:
                    92:e0:a4:92:87:67:70:2c:8f:79:23:57:d4:85:d7:
                    ae:66:55:87:c6:b1:4d:55:75:df:65:4d:d8:c9:02:
                    21:44:2c:5a:43:17:5f:c8:e5:a1:bf:14:ce:31:d9:
                    94:c0:96:b6:f1:da:84:be:46:7e:d1:f5:b8:b9:ac:
                    aa:64:96:25:b6:0c:53:37:1f:9a:c3:8c:bd:0b:b2:
                    fe:be:45:d5:47:64:6f:da:a6:66:d2:d7:e5:0c:be:
                    e9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5F:7C:B3:78:2C:27:5A:53:68:9C:4D:3A:7C:E8:A9:D9:63:41:C4
            X509v3 Authority Key Identifier:
                keyid:F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:51:8d:96:0b:95:e4:3f:65:ec:d8:b2:69:80:7e:81:bf:
         95:ee:7d:f9:6c:95:93:e2:e6:10:38:dc:63:fe:cd:c1:00:29:
         02:bd:68:65:be:5f:e3:b8:a5:c3:c6:8a:94:43:a6:a3:26:7d:
         47:5b:55:ce:7a:78:da:7a:3a:77:95:44:d8:d1:06:18:58:56:
         90:88:cf:ee:db:06:86:f2:ef:60:14:1d:e9:a7:58:3e:f4:5e:
         bd:a5:e9:37:22:27:da:3a:f1:46:77:a4:3f:77:45:93:7a:75:
         15:4c:6c:ef:de:ef:2f:e8:1f:7b:86:0d:9e:b9:93:a3:30:41:
         fd:71:14:10:89:cc:51:ce:e5:63:b5:bd:e9:ed:1c:7d:f2:3a:
         6c:f3:16:59:24:1f:04:b2:4b:38:03:f4:d9:75:a5:2f:df:03:
         36:72:b5:75:6e:30:df:4e:18:14:6c:ab:52:de:b3:ca:9f:2d:
         17:c6:b3:bd:1d:aa:4e:94:2f:51:0a:88:b1:bf:bf:52:cb:62:
         23:92:09:6c:6c:df:27:76:9a:a6:17:51:c7:0a:ff:4f:ef:31:
         5a:ff:3d:70:30:92:84:1a:e9:a5:dc:34:39:7d:6e:c7:62:b8:
         05:74:7a:b4:70:4c:bd:4a:9a:e8:9c:aa:2a:c3:06:45:54:7f:
         28:14:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:53:09 2024 by rpki-client on console-ams.rpki-client.org