Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
File:                     a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft (raw, json)
Hash identifier:          437cAJYHxppIGSXWckuv0B7HjVpVoCOlWGv0Jnk64c4=
Subject key identifier:   E0:E1:15:C5:15:14:21:DE:EC:63:59:34:A5:56:8A:9E:F4:9E:52:BA
Authority key identifier: 6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48
Certificate issuer:       /CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
Certificate serial:       0645
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
Manifest number:          063F
Signing time:             Fri 22 Nov 2024 01:19:04 +0000
Manifest this update:     Fri 22 Nov 2024 01:19:04 +0000
Manifest next update:     Sun 24 Nov 2024 01:19:04 +0000
Files and hashes:         1: a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl (hash: /0NI81BGRLqFEi31wpQgYGkBEewsqayklS+40r6jpKY=)
                          2: E24D05EEE25311EA92AD155EF8AEA228.roa (hash: NhNBSTEDSsS8nv1gPk35pYlSA/j54gCUeglNVOfp5Jk=)
                          3: 8B23E96CE25411EAABDED95EF8AEA228.roa (hash: G1N7VCX3quzWOxjZ6v2ZRD1s53UOL4I3nt3IbyrQuyg=)
                          4: 10D082ECE25411EAB7E7505EF8AEA228.roa (hash: HCeS+ur8bLRwVYC7j4CEZcmf2zW7Wq0HlwhQZaJebjk=)
                          5: 8DA134B6E25311EA83A9A55DF8AEA228.roa (hash: FZLhMJ//MfWJptrE3zcXjMsUeDRso3qHvO1+H5qU2Z0=)
                          6: B193AAD8E25411EAACEFFA5EF8AEA228.roa (hash: 6msQDGgz9SoLw2neOnUxuPHAYOAC1PdRzeLr4+FvrcI=)
                          7: 57CB6630E25411EA8C85A55EF8AEA228.roa (hash: zokPSNjx8r4IpsyxRDDLa5MvDTlpaKfogK8lEwUhKrg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1605 (0x645)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
        Validity
            Not Before: Nov 22 01:19:04 2024 GMT
            Not After : Nov 24 01:19:04 2024 GMT
        Subject: CN=673fdc08-ebf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:87:76:58:75:28:1b:52:20:ad:02:9e:c3:
                    f0:65:14:1c:7f:f7:e0:d0:42:f0:89:de:a3:64:d7:
                    72:a1:e7:60:78:95:b9:f4:29:f1:17:cb:63:af:9d:
                    18:d8:5d:cd:ae:d8:d0:58:54:b7:8d:51:e6:b9:12:
                    01:06:59:94:f5:7d:99:34:4f:cb:3b:3d:f0:2e:c5:
                    a7:9e:4e:47:55:0a:d0:cc:b0:02:ee:61:00:a1:28:
                    d2:b3:b0:9d:fe:2a:3f:2f:47:cf:a6:a7:a4:f9:22:
                    75:6c:bb:48:ff:2b:d6:7c:67:cd:c9:8b:d7:a0:70:
                    20:a5:5f:6a:00:a4:f2:ad:fa:e1:d8:2f:31:33:45:
                    d1:3c:c6:21:99:9f:4a:45:99:bc:d1:ab:85:a0:31:
                    3f:d1:61:d4:58:36:59:7e:3e:93:8a:94:1e:fb:40:
                    bc:81:9e:68:7d:09:a3:70:44:32:49:4e:d7:90:b4:
                    67:a3:ce:eb:1c:85:c4:65:99:52:e0:d0:30:2e:a1:
                    12:b0:4e:ac:2d:ab:20:b7:23:79:e1:66:27:58:01:
                    7b:c4:a8:02:79:94:9c:60:62:cd:84:7b:cc:79:9c:
                    c5:27:b8:65:7b:0c:25:93:49:4f:fa:7f:6d:34:06:
                    4e:76:fc:24:a9:dc:e0:ad:1e:82:9c:92:5a:21:1c:
                    42:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E1:15:C5:15:14:21:DE:EC:63:59:34:A5:56:8A:9E:F4:9E:52:BA
            X509v3 Authority Key Identifier:
                keyid:6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b9:fd:8f:88:7b:38:93:99:86:e9:7e:bf:8a:f6:42:96:ad:
         91:ac:0e:f5:af:0d:df:ef:c2:3d:7b:c0:7d:71:9e:1e:29:9b:
         d3:ee:f2:cc:1a:5c:d1:25:a2:50:7a:c7:8e:4e:12:f8:86:3d:
         1a:64:91:2c:cc:0d:c0:a5:62:2a:c4:18:cf:1f:30:84:da:57:
         87:ca:c7:d0:6b:55:66:59:36:bb:ab:5e:42:d7:10:7a:f7:ed:
         89:df:47:a7:d1:55:be:be:93:c8:c7:2e:48:a4:17:6a:ae:fc:
         50:f8:a5:f0:5e:53:ed:94:4e:9d:6b:cb:a9:91:12:8b:28:90:
         22:94:cc:06:1d:ac:ed:5a:11:e0:52:0a:78:38:aa:f9:94:bf:
         ab:19:f7:f7:99:81:72:ae:dd:16:3f:84:ce:fd:f2:81:03:2e:
         50:ba:66:37:b6:2a:8b:06:31:2a:1a:e7:98:f1:5e:3a:fb:01:
         fe:92:46:8b:9b:f4:4d:08:6c:b8:93:cc:9f:c1:3f:82:f0:e1:
         27:d0:57:92:41:69:43:93:4c:89:9a:17:f6:0c:87:61:99:88:
         fa:71:95:13:81:cf:27:d8:f1:7c:bf:c5:3b:de:10:ce:25:08:
         21:c4:4a:8a:b0:98:61:71:54:0e:16:c5:bb:e7:ba:6b:2b:86:
         28:50:6d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:13 2024 by rpki-client on console-fra.rpki-client.org