Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
File:                     Zc12cqY4S1k4r9xciu-vQzS6KcA.mft (raw, json)
Hash identifier:          EzN8bhuwBh5RzbHNm2LdxHks12VirIphE3x34fnf9kY=
Subject key identifier:   6A:0D:15:31:D0:0C:89:A8:40:C5:81:89:83:A3:11:98:E6:BB:4C:C9
Authority key identifier: 65:CD:76:72:A6:38:4B:59:38:AF:DC:5C:8A:EF:AF:43:34:BA:29:C0
Certificate issuer:       /CN=F3695A2AAF/serialNumber=65CD7672A6384B5938AFDC5C8AEFAF4334BA29C0
Certificate serial:       012C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Zc12cqY4S1k4r9xciu-vQzS6KcA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
Manifest number:          012B
Signing time:             Thu 21 Nov 2024 02:35:23 +0000
Manifest this update:     Thu 21 Nov 2024 02:35:23 +0000
Manifest next update:     Sat 23 Nov 2024 02:35:23 +0000
Files and hashes:         1: Zc12cqY4S1k4r9xciu-vQzS6KcA.crl (hash: cUySVL7NB26dEMlkBn3ZQzANqnG+4QozmGFUnjxj50w=)
                          2: FABF9778404F11EF82E76870762E951A.roa (hash: LBsqO52AIum2DnzkQ0UyfHJJgoQtKMXAuqtuxKPonQw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Zc12cqY4S1k4r9xciu-vQzS6KcA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695A2AAF/serialNumber=65CD7672A6384B5938AFDC5C8AEFAF4334BA29C0
        Validity
            Not Before: Nov 21 02:35:23 2024 GMT
            Not After : Nov 23 02:35:23 2024 GMT
        Subject: CN=673e9c6b-634a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:60:54:b9:6f:cc:b8:6d:1f:55:15:8e:c0:
                    9e:62:47:b6:12:bf:69:c5:83:dc:86:64:4f:00:9b:
                    d8:17:86:61:ff:07:7b:54:f1:73:5d:37:c4:c7:d0:
                    15:15:03:54:7e:75:f0:4e:3b:be:fa:e7:bf:be:da:
                    b5:a3:84:41:68:06:37:e9:f5:92:bf:55:2d:c8:e5:
                    11:4d:55:07:70:07:91:d8:68:3c:01:65:cc:85:3c:
                    3e:83:cc:dc:d2:a9:42:6a:19:07:fe:cb:1c:bb:39:
                    16:0c:5f:83:db:6c:c3:7f:81:ec:42:13:e7:f9:83:
                    16:9f:50:fd:1a:02:ea:d2:c2:30:c1:c8:c4:a4:c0:
                    de:69:33:57:15:94:61:a6:59:e1:21:74:ad:b7:2c:
                    53:3c:5c:15:5d:a1:e7:77:8e:10:fb:e7:52:34:6f:
                    3d:d9:1e:8d:79:5c:dd:cd:1e:a9:5b:3f:da:26:58:
                    db:b7:f8:8c:8d:89:b7:17:ea:63:2d:f0:79:6c:8e:
                    4f:64:b7:5d:12:de:32:a7:35:f3:0d:6a:95:d7:6f:
                    fd:d9:da:22:c4:29:e5:86:0b:2f:86:28:fe:ce:a4:
                    15:2a:b6:a0:32:17:0b:5f:1d:6e:4e:55:dc:2d:16:
                    c7:60:9c:69:8d:c3:5d:41:f6:76:23:f6:6b:24:c9:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0D:15:31:D0:0C:89:A8:40:C5:81:89:83:A3:11:98:E6:BB:4C:C9
            X509v3 Authority Key Identifier:
                keyid:65:CD:76:72:A6:38:4B:59:38:AF:DC:5C:8A:EF:AF:43:34:BA:29:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Zc12cqY4S1k4r9xciu-vQzS6KcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/7AA69C3CC42E11EEB649DA4F775412E6/Zc12cqY4S1k4r9xciu-vQzS6KcA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:dc:69:5b:62:e0:38:b9:3c:a0:04:ca:50:91:e8:15:6a:f4:
         a5:a7:07:77:82:7e:42:20:2e:d1:34:a6:c7:62:99:82:64:5a:
         db:51:53:93:8b:13:f1:f6:0a:13:c5:3d:62:f0:1b:91:45:53:
         5e:05:ce:aa:8a:00:a2:2b:5b:9f:fb:c4:71:e4:3e:27:af:ac:
         a0:ff:73:fb:f0:6e:ed:d6:67:ae:49:23:04:7b:8c:62:43:ee:
         5b:31:6e:1f:8f:72:12:1f:e1:01:4f:48:01:4a:2c:37:23:96:
         59:9c:52:a7:f4:c8:ad:41:4c:2b:81:f1:22:5d:d7:51:38:9d:
         23:bd:27:84:9e:05:26:30:02:2a:0a:ec:0f:01:71:1b:f2:0e:
         c3:e9:7e:2d:8e:50:1f:f0:45:7c:ce:39:d6:50:4f:d6:c7:93:
         73:75:72:a5:2f:f2:bc:d2:c8:cf:a4:17:33:77:32:e7:ec:f6:
         a0:24:61:7f:7b:61:42:d1:86:99:1a:ad:c5:3f:8e:43:30:04:
         f9:5f:66:b9:8d:3c:6f:20:4a:2d:de:77:91:91:a0:3d:90:23:
         3a:2d:43:3f:bd:ef:5c:da:9c:cd:9b:6c:19:93:b3:2c:69:db:
         1c:d4:51:8b:ef:4c:b0:c5:66:15:29:dd:f2:5a:b4:df:4a:2f:
         73:80:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:36:59 2024 by rpki-client on console-ams.rpki-client.org