Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
File:                     5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft (raw, json)
Hash identifier:          H5eSSPun4MHdvq9DuL1P0fCT0u+BZQBqFFoUfwv+Tlk=
Subject key identifier:   65:C1:62:88:EE:E1:F7:37:21:D7:E9:49:C9:C6:6D:4E:7A:7D:E2:DE
Authority key identifier: E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D
Certificate issuer:       /CN=F3691854AF/serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
Certificate serial:       DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
Manifest number:          DA
Signing time:             Sun 19 May 2024 02:23:17 +0000
Manifest this update:     Sun 19 May 2024 02:23:16 +0000
Manifest next update:     Tue 21 May 2024 02:23:16 +0000
Files and hashes:         1: 5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl (hash: gEODbU3J/y8ommyWV3jPrBVzYIU0/9wwtkd5K3ikbbA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AF/serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
        Validity
            Not Before: May 19 02:23:16 2024 GMT
            Not After : May 21 02:23:16 2024 GMT
        Subject: CN=66496295-f514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d1:bf:aa:6f:18:2c:13:31:55:82:a3:41:8f:
                    e6:1a:03:de:47:bb:18:e3:fd:eb:f4:9a:fd:b1:73:
                    72:73:47:a9:e4:e0:bf:3b:fd:8f:35:d4:cf:f1:53:
                    a7:f6:ca:9a:22:4f:3e:6f:05:18:e7:95:e7:a0:80:
                    ea:29:af:ab:ee:c1:b0:f1:91:fc:cd:98:79:24:7e:
                    0d:d8:8f:b9:cb:c7:dc:22:3a:2c:6e:ed:67:88:66:
                    10:c9:97:c5:0d:9b:ad:5b:fb:6b:1a:2d:cd:12:7b:
                    af:18:c3:c4:20:4f:4c:6b:4a:70:92:a9:fc:78:bf:
                    4d:00:a2:c9:3b:58:4c:57:94:9c:14:4d:53:b9:c0:
                    1c:c2:ee:6b:d2:34:95:93:8f:d8:40:dd:9a:e4:64:
                    0a:fd:11:ff:7a:52:12:e5:66:0d:b1:dd:30:e3:4d:
                    84:eb:f8:66:35:73:5f:03:0f:15:14:10:81:94:f9:
                    dc:4f:96:5f:b1:b3:e6:a2:97:7c:65:29:e5:31:d7:
                    53:5e:8e:6e:19:4b:40:22:b2:7e:5a:fc:a0:ce:e7:
                    38:70:08:9f:79:bb:d5:38:5b:f3:5e:85:5f:aa:fb:
                    35:07:66:6d:79:23:46:e1:bd:db:e3:3c:6b:37:91:
                    27:95:8e:f2:bd:ad:ea:67:b5:64:dc:31:3d:bc:54:
                    0c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C1:62:88:EE:E1:F7:37:21:D7:E9:49:C9:C6:6D:4E:7A:7D:E2:DE
            X509v3 Authority Key Identifier:
                keyid:E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:ed:b5:c7:3a:97:7e:fe:0b:71:b7:e5:88:c8:ed:5f:00:
         14:a1:ee:15:5c:a1:59:8a:da:c8:fe:be:6d:82:9a:2a:33:ca:
         f3:b8:47:68:d5:1d:c8:bd:73:93:a9:92:62:69:7c:ef:04:e3:
         fb:c4:02:d5:38:23:7c:c1:87:c0:8a:d6:3e:93:00:2e:0e:b3:
         90:12:1b:1f:92:33:2b:bb:93:45:59:b5:79:cc:0a:d8:0d:f2:
         87:58:46:a8:18:f0:3f:da:7a:24:14:78:90:cd:00:5b:e1:d1:
         ef:04:b0:39:1a:d3:55:d4:22:17:a2:ad:f0:8a:51:16:1c:4a:
         7e:42:73:63:d6:f5:bc:c4:39:ed:5b:bb:f9:95:0c:71:ed:ef:
         0a:74:c0:90:e1:11:bb:b4:52:81:bf:d2:6b:0d:e2:bb:f8:d7:
         09:f3:d2:66:0a:3e:3f:fa:43:fd:58:a9:1b:a3:cc:fe:ef:da:
         f8:31:b0:ee:0a:ae:61:02:56:cf:c7:35:b1:0d:54:ad:f5:9b:
         46:1c:07:4b:e1:12:35:da:3c:56:75:f9:1c:91:fb:9e:b3:1b:
         79:ab:cf:ce:34:82:f0:3b:89:ee:40:ad:96:c5:94:96:1e:af:
         48:f0:d0:28:e5:9c:e1:dd:67:49:7f:dc:22:98:03:a1:3e:3a:
         b5:75:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:57 2024 by rpki-client on console-ams.rpki-client.org