Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
File:                     nHonja2J7WPpPiUhm0zaALEAYZM.mft (raw, json)
Hash identifier:          xlEtU6K6SSLHbEkrp3nEcJfmYV49vCBV32U8id1LtoI=
Subject key identifier:   78:FD:E0:70:BD:49:4F:E4:F4:65:84:F9:A7:95:E8:F5:B0:50:FA:0F
Authority key identifier: 9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
Certificate issuer:       /CN=F36974EEAF/serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Certificate serial:       03FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
Manifest number:          03FA
Signing time:             Sun 26 May 2024 01:31:44 +0000
Manifest this update:     Sun 26 May 2024 01:31:44 +0000
Manifest next update:     Tue 28 May 2024 01:31:44 +0000
Files and hashes:         1: nHonja2J7WPpPiUhm0zaALEAYZM.crl (hash: 5QadgQnx5XhGBEt/nhxjNwrtej+aENWDQZtsEVKJhvM=)
                          2: 0CDD5F3CB91711EEB1AAD090775412E6.roa (hash: fIeogtbVHebaWJFqwZgG7oLm/IxLe2gNCJE8qm7UqBY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 28 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36974EEAF/serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
        Validity
            Not Before: May 26 01:31:44 2024 GMT
            Not After : May 28 01:31:44 2024 GMT
        Subject: CN=66529100-2f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5e:2a:9a:de:17:9e:b4:4d:28:42:77:49:3f:
                    f6:96:f5:21:9b:34:18:ea:99:ba:9e:5c:b5:48:a9:
                    21:a1:6a:f2:35:59:b9:40:37:9b:3e:3c:d8:ff:ab:
                    9f:ae:60:b1:af:b3:4c:fb:f3:f8:61:03:26:70:b0:
                    7b:3a:b4:0f:66:ed:22:ca:62:0a:8d:b7:44:9a:2e:
                    b0:3f:61:09:23:5a:bb:3d:f9:a1:34:cc:e2:9e:6b:
                    27:8a:24:27:55:dc:c4:16:3c:aa:88:0b:05:0b:94:
                    4f:0c:18:bf:cf:79:83:47:f0:9e:10:14:95:8c:8f:
                    30:9d:cd:5c:29:9b:3f:eb:8d:f2:3c:97:f4:16:c9:
                    30:52:95:79:da:be:ea:cc:0a:ad:ac:d8:02:75:fd:
                    ce:14:10:88:60:8f:b4:d8:40:81:8f:36:91:44:bb:
                    cd:b3:b5:9d:b4:74:f0:d5:6d:cf:85:4a:ca:7c:c2:
                    b4:cb:bd:e3:cf:32:f6:2f:fe:70:2c:c4:41:e9:5e:
                    f8:f6:e2:38:56:68:86:95:2d:1c:da:8e:0d:a6:17:
                    30:f0:b0:e6:69:e8:27:ba:9a:73:69:f4:70:ff:52:
                    f1:10:7f:ca:81:a1:c9:05:32:e6:de:73:dd:d2:b1:
                    39:86:a5:99:f3:11:13:08:59:90:07:36:ba:7c:89:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FD:E0:70:BD:49:4F:E4:F4:65:84:F9:A7:95:E8:F5:B0:50:FA:0F
            X509v3 Authority Key Identifier:
                keyid:9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:86:c1:f7:0e:7b:a2:fc:5d:8e:2a:a7:92:2b:4f:20:7c:a3:
         f2:dd:3a:33:0b:de:60:6a:3f:93:8b:1c:92:18:67:2a:75:f1:
         b2:e9:60:af:a2:5a:d5:91:96:6f:47:1e:eb:94:4a:f2:e8:db:
         f1:67:71:37:81:78:04:e0:f8:af:69:15:e9:0b:bd:97:51:31:
         12:0b:f4:83:a4:c0:37:02:65:c3:c2:55:e7:51:f2:a7:e7:1b:
         b2:48:f8:6d:61:43:fb:96:f1:c4:aa:06:21:1d:e0:2b:03:e7:
         06:ae:a5:b8:4a:61:99:75:80:c4:03:6a:2d:94:25:2e:9e:5b:
         90:ce:cb:9c:8f:eb:a4:50:db:46:2f:ec:64:c1:fa:e0:9d:11:
         65:7c:af:d2:40:a1:5e:d7:3d:f3:ef:31:cf:77:29:35:61:da:
         d8:87:be:5d:e8:81:88:27:53:a8:b3:4f:e6:29:00:45:e2:90:
         8d:c9:7b:17:64:2e:da:5c:ea:56:58:ed:e1:f1:de:d4:6e:fc:
         12:4f:75:fb:97:74:c3:02:c7:5b:4f:48:4d:26:41:7f:66:aa:
         47:29:4e:2a:57:0f:34:78:d0:a6:a4:79:43:a2:8e:0f:ff:b4:
         35:11:35:a2:e4:e7:09:06:55:5a:9a:58:ba:a4:42:f7:16:b1:
         13:5a:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 03:27:23 2024 by rpki-client on console-ams.rpki-client.org