Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
File:                     -YeB5n2eqWryWAashtEAb4IfqjY.mft (raw, json)
Hash identifier:          y44782TnIOC5tXNhRqFmdjOC/ED5aDG5TeHBz62w3KE=
Subject key identifier:   7A:6A:A8:C8:C4:3A:D9:F7:21:53:A3:72:F8:8A:FF:79:32:DF:46:DE
Authority key identifier: F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
Certificate issuer:       /CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
Certificate serial:       C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
Manifest number:          C2
Signing time:             Tue 28 May 2024 02:33:54 +0000
Manifest this update:     Tue 28 May 2024 02:33:54 +0000
Manifest next update:     Thu 30 May 2024 02:33:54 +0000
Files and hashes:         1: -YeB5n2eqWryWAashtEAb4IfqjY.crl (hash: NP8w2cNnwvah+r7QlxKvAnVkttVRSpAMlBpw5VlajAw=)
                          2: F3D28466A49B11EE881B3A7CD25BE465.roa (hash: 8ql7+vusURAXXO1QjIU3wb4N2LTfHKWe3IzCBlZgxWQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 May 2024 00:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
        Validity
            Not Before: May 28 02:33:54 2024 GMT
            Not After : May 30 02:33:54 2024 GMT
        Subject: CN=66554292-7950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:9f:8f:73:28:fe:2e:a6:c1:5c:bd:9c:8d:
                    57:ca:e9:98:6e:86:7c:dc:cf:7d:40:d6:e2:2f:bd:
                    41:b5:41:2c:0f:9b:f7:30:fa:a4:01:84:99:6a:40:
                    f9:20:ce:92:e6:7d:65:09:d3:81:af:c9:de:56:09:
                    e9:30:8e:96:61:62:5b:03:e3:ea:9f:56:2c:0a:4d:
                    d3:15:43:95:ec:00:3f:5e:5f:5c:de:2c:ee:80:5f:
                    59:cc:2d:8e:11:ed:3f:fe:4f:bf:84:5f:a3:93:8f:
                    2c:91:d6:1f:3f:6c:25:80:cc:4a:ea:5b:a1:87:cf:
                    5a:57:8a:5a:1a:1a:e1:b9:95:5f:5b:42:19:1a:40:
                    2f:3d:a9:41:fe:65:c7:a4:9b:3a:1d:2a:bf:32:13:
                    8c:b5:85:e2:c3:57:c8:d4:86:33:4c:f6:7d:5b:a2:
                    3e:16:7b:58:22:b3:64:e2:9d:22:bc:56:63:f3:b0:
                    06:e6:1b:a3:e2:8d:f7:6f:9f:1a:1d:1e:89:1d:fa:
                    be:cc:bf:3c:9f:83:f8:4c:50:d3:c7:37:70:89:31:
                    8c:2e:db:96:76:4b:f3:04:99:b2:a7:60:31:ae:b2:
                    c5:a7:22:20:a9:25:75:fd:af:d5:1f:d4:3d:50:24:
                    fc:89:6a:d3:eb:73:7e:c7:0f:7e:de:be:07:28:b2:
                    83:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6A:A8:C8:C4:3A:D9:F7:21:53:A3:72:F8:8A:FF:79:32:DF:46:DE
            X509v3 Authority Key Identifier:
                keyid:F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ea:ae:36:95:97:a6:6a:0a:9a:bf:98:79:fe:28:be:04:61:
         95:4b:ed:d7:7f:00:24:3e:26:6c:71:ca:89:32:bd:f0:2f:27:
         08:69:a7:94:28:9c:f3:ae:fa:27:b4:77:06:14:a9:15:f3:1d:
         9e:24:af:96:62:a1:f4:b5:9c:62:34:5f:f6:bc:05:b2:07:73:
         1e:97:a3:d8:5e:6e:26:f4:90:c8:df:d4:3d:e9:4e:5d:9d:de:
         f1:59:3e:36:77:ef:c2:5f:ab:fe:4d:28:e7:0c:f1:33:a0:8b:
         06:b9:d4:0f:46:19:ea:57:17:94:9f:33:0a:e1:5e:c9:91:dd:
         0a:b3:ed:fc:f6:fd:20:6a:50:fa:a9:b8:24:a2:3c:1b:15:9c:
         f5:da:c6:8e:a4:73:9d:5e:25:98:9d:5e:8d:94:27:ea:ef:c0:
         9a:c3:3a:0e:82:52:13:cf:71:ee:25:10:45:48:15:e5:8e:12:
         73:fa:d5:98:4c:91:a5:fa:b9:86:6c:71:29:1a:d2:8b:44:f6:
         ce:b5:43:c2:d4:e3:2c:d9:94:fa:ff:0f:29:e4:35:d3:28:8d:
         4f:18:fd:11:3c:cc:ba:b6:cf:ab:10:78:9e:fa:ee:ef:eb:f3:
         7c:c5:5c:e6:54:6c:b3:ab:c2:24:a9:cb:70:d1:ae:bb:42:9a:
         cf:b5:d9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 04:28:57 2024 by rpki-client on console-ams.rpki-client.org