Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
File:                     v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft (raw, json)
Hash identifier:          7arIP4wzNyi1PjlYJlTcEdJ54620FsUH5adTjRAmPX4=
Subject key identifier:   30:BD:16:FA:1D:C6:89:39:15:BB:B2:2F:B0:1D:D9:90:E7:30:59:93
Authority key identifier: BF:B4:DE:18:AF:D8:D3:F8:6F:34:6A:BF:BD:2E:32:37:81:99:66:87
Certificate issuer:       /CN=F3691764AF/serialNumber=BFB4DE18AFD8D3F86F346ABFBD2E323781996687
Certificate serial:       0413
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
Manifest number:          0412
Signing time:             Sun 05 May 2024 01:29:30 +0000
Manifest this update:     Sun 05 May 2024 01:29:29 +0000
Manifest next update:     Tue 07 May 2024 01:29:29 +0000
Files and hashes:         1: v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl (hash: aUfkBUiF9ZayZZefrn+VQXNyQFM/1MiPp0uVqoGBZuU=)
                          2: 16065094F04E11EBA478622BD8A014CE.roa (hash: 88ExgIY+S/UAWAoMUCLir9t7bb0eXzCQgaClRQv2X2k=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043 (0x413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691764AF/serialNumber=BFB4DE18AFD8D3F86F346ABFBD2E323781996687
        Validity
            Not Before: May  5 01:29:29 2024 GMT
            Not After : May  7 01:29:29 2024 GMT
        Subject: CN=6636e0fa-dfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:38:21:18:9a:2b:cd:6d:43:b6:f7:ae:9b:b6:
                    7d:d5:bb:2a:00:61:71:f9:66:b3:31:ea:16:04:7b:
                    58:d2:85:8c:2f:66:dc:35:0e:78:a9:4d:41:56:44:
                    e0:34:97:dd:bb:62:e1:f9:c0:62:bf:f2:56:dc:84:
                    32:5b:f2:b7:17:e1:e0:52:45:81:af:61:ba:26:e8:
                    75:a8:a5:73:7e:a5:6c:73:cb:a9:5a:7c:e6:b5:e2:
                    2c:7d:46:b6:39:99:63:9d:44:54:09:e3:69:00:76:
                    e3:f8:3a:94:3a:86:d5:22:8d:aa:9d:14:91:ba:73:
                    47:ad:d0:e0:34:ed:12:a0:87:b4:59:44:b8:fa:d1:
                    06:fe:f5:51:8e:0b:0c:6c:d4:50:2b:27:57:98:70:
                    ac:38:fc:e1:79:1e:ce:66:bd:63:67:3f:82:69:16:
                    6a:ed:c8:69:f8:9f:1c:01:42:76:47:76:00:dd:0e:
                    98:b6:5b:37:97:b4:31:bd:f2:0d:35:76:02:33:65:
                    7f:4d:d6:84:cb:82:7c:da:d4:5b:c6:8a:fe:c0:bc:
                    c3:f0:03:71:51:63:40:19:39:24:a6:9d:dc:a1:1f:
                    02:7b:94:27:e8:82:ba:a8:6c:14:48:31:87:ee:06:
                    9e:4b:7f:25:45:24:16:58:a6:09:b1:53:af:36:a7:
                    d7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BD:16:FA:1D:C6:89:39:15:BB:B2:2F:B0:1D:D9:90:E7:30:59:93
            X509v3 Authority Key Identifier:
                keyid:BF:B4:DE:18:AF:D8:D3:F8:6F:34:6A:BF:BD:2E:32:37:81:99:66:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691764/E60A9D42EF9811EBA4137114D8A014CE/v7TeGK_Y0_hvNGq_vS4yN4GZZoc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:36:fa:08:bb:b2:3d:a4:94:b4:d4:4d:13:f7:eb:26:96:e8:
         b2:b5:27:aa:e5:ac:fc:3b:82:58:e5:d5:9e:e0:85:c7:22:bb:
         d6:02:83:1e:68:b5:a1:92:16:78:50:b8:36:e4:20:a2:28:f2:
         20:e2:72:86:58:d7:67:5d:fb:69:33:68:9e:0b:b3:8b:74:e1:
         ce:74:4f:07:7a:6b:6a:cb:36:bd:06:2c:22:ac:7a:cb:59:03:
         e1:62:14:95:66:53:ed:20:fa:32:1f:29:63:e1:1c:f1:37:5a:
         a8:d7:a5:9a:fb:76:63:d9:ca:bc:4c:a1:d2:f8:c2:e4:ed:b6:
         31:b5:1d:3d:cc:de:43:28:a8:b6:58:de:8c:9f:8c:f4:a8:5b:
         08:b9:40:e8:98:96:69:03:de:07:28:1a:95:1d:7d:ce:c2:5f:
         40:99:63:52:c0:78:0e:30:dc:ad:ab:46:0b:d9:bf:d7:1f:58:
         f9:37:95:31:d6:39:2d:79:3e:97:7f:31:08:f0:f2:e6:83:40:
         22:78:ff:ae:b7:d2:f8:59:14:93:02:c0:90:bb:dc:11:0c:c8:
         be:2f:e7:16:b2:fb:06:34:97:8c:11:e5:29:ca:91:28:67:32:
         91:f7:45:06:7e:7f:64:78:75:bb:9a:cd:28:01:7f:bb:bc:e8:
         06:9b:ce:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:53 2024 by rpki-client on console-ams.rpki-client.org