Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          hZxg0ghU+eTDgA8Q01TPDQBvX9+qwiJeWShWshnOQZ8=
Subject key identifier:   8C:5D:69:CC:7B:AE:4B:47:28:C4:E4:4B:24:C2:76:42:B0:79:4C:B3
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       0292
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          0291
Signing time:             Thu 21 Nov 2024 02:09:24 +0000
Manifest this update:     Thu 21 Nov 2024 02:09:24 +0000
Manifest next update:     Sat 23 Nov 2024 02:09:24 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: cEK6q7PTQvUVhESfJpa2qH1PcEZ/4KEfsLViED2wxns=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Nov 21 02:09:24 2024 GMT
            Not After : Nov 23 02:09:24 2024 GMT
        Subject: CN=673e9654-1cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d4:23:61:6d:61:79:9d:e1:53:03:01:b7:fb:
                    96:8b:d9:82:db:73:b3:44:76:82:dc:bb:36:b7:9c:
                    31:31:92:59:7d:b6:82:dc:9a:10:7a:50:3c:cf:f5:
                    e4:39:ec:4b:30:4d:6a:76:d2:3b:de:17:d2:03:97:
                    fa:e6:d8:66:6a:63:20:7b:22:2c:7c:8c:95:a8:45:
                    22:c9:89:4c:a2:d1:eb:94:c6:00:d2:69:8b:88:46:
                    7a:5d:29:8a:41:9e:44:74:21:26:a3:75:be:f1:46:
                    19:86:8a:e1:f9:26:94:92:56:72:d2:c3:ec:26:e7:
                    30:4c:1e:fa:bb:60:07:d1:35:c2:f5:56:2e:90:a5:
                    4e:1b:8c:13:4c:53:04:39:53:a8:55:db:e3:7f:85:
                    4e:ca:6e:a0:1e:34:68:34:78:54:7d:a4:cb:4a:e4:
                    5d:93:d2:e3:75:06:21:bb:78:f3:f0:67:a8:f0:f0:
                    96:9e:f7:d3:04:c5:20:f4:1a:b7:d1:f0:1f:1a:34:
                    f9:29:f9:27:23:1b:01:04:3f:9b:13:56:a9:4d:b0:
                    65:1e:0b:2a:f2:13:e1:a3:40:54:1a:35:56:30:c2:
                    a9:0f:6a:91:4c:85:8d:ab:6c:91:b3:7f:75:4d:90:
                    b0:77:66:fa:07:14:84:74:84:79:00:25:6f:1e:10:
                    0d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5D:69:CC:7B:AE:4B:47:28:C4:E4:4B:24:C2:76:42:B0:79:4C:B3
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:16:3f:bf:fa:a8:4d:06:84:9f:74:4f:3e:7e:11:f1:85:d0:
         8c:1f:8a:42:c4:56:81:70:a0:92:73:f6:0d:3c:c1:16:66:e0:
         4e:51:43:d3:0c:b6:bd:3f:24:6a:61:bd:58:ec:8c:ff:97:ee:
         c4:bb:a4:09:3c:8b:70:7c:67:a4:37:86:3c:dc:6a:15:9b:9d:
         4f:c9:ca:f2:ea:83:0e:30:bc:ee:22:bd:5c:d8:85:19:ee:b3:
         5b:85:b5:09:39:43:97:2a:c9:49:d9:51:c5:4e:60:e0:e1:83:
         a8:8a:35:04:9a:db:44:c9:f1:c4:cf:b8:dd:24:a7:f2:cb:9e:
         e2:96:bd:0f:e1:db:0d:94:5d:a4:83:22:ad:27:cc:7c:dd:0e:
         d5:e9:16:0b:a9:79:81:5b:eb:5b:3a:1c:b4:75:01:c4:5a:30:
         27:af:00:f2:ab:5b:e5:43:4e:db:f2:43:ae:5c:0a:53:7b:8b:
         15:e7:21:9e:bc:05:a3:82:d8:58:2f:7f:40:e1:26:f9:ec:2c:
         2f:e8:bb:ea:a8:c0:ec:ef:7e:91:64:03:33:c8:f8:2c:57:59:
         e5:30:73:0b:5a:64:70:f9:86:cb:bf:91:60:93:41:e3:52:99:
         30:7e:72:12:2f:ba:29:44:16:df:e6:d0:56:34:c4:c0:e3:d7:
         59:e5:02:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:15 2024 by rpki-client on console-ams.rpki-client.org