Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
File:                     PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft (raw, json)
Hash identifier:          EKfp/ILuvVR3eDkMszsvIsKsoZSyi29rdt+T7D8Oyro=
Subject key identifier:   DD:28:18:69:91:0C:B7:9B:20:41:D2:A6:35:09:D4:A4:5C:AA:4A:2A
Authority key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Certificate issuer:       /CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Certificate serial:       C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
Manifest number:          C2
Signing time:             Sun 19 May 2024 02:25:14 +0000
Manifest this update:     Sun 19 May 2024 02:25:13 +0000
Manifest next update:     Tue 21 May 2024 02:25:13 +0000
Files and hashes:         1: PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl (hash: kbva5PqvhjpLIxxoF5CJ853fXq3kwJvmmcCq4mM8whw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
        Validity
            Not Before: May 19 02:25:13 2024 GMT
            Not After : May 21 02:25:13 2024 GMT
        Subject: CN=6649630a-3eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:dc:c5:67:c5:f1:7c:36:a0:ef:de:fd:3f:29:
                    6f:91:64:b2:12:b5:2f:ea:5b:b6:a4:b9:db:06:c9:
                    6b:39:c5:04:a3:f8:c0:71:91:83:cf:5e:62:88:4b:
                    01:e7:b1:e4:05:8b:dd:77:75:f1:2e:48:10:10:2e:
                    a7:16:71:90:06:13:7c:3f:64:31:37:4d:8e:1f:af:
                    c4:07:ba:43:e1:1f:6a:71:f0:f3:15:d9:81:e2:10:
                    62:a7:dd:63:d2:dc:53:ab:b0:b0:37:8c:42:dc:54:
                    87:c1:ad:c6:f0:cd:b3:ac:11:5f:10:1b:38:4e:4c:
                    47:74:47:cd:59:a9:2f:e5:ee:6f:fd:a1:da:0b:f7:
                    d6:c0:25:57:de:a8:a1:bb:b1:ea:49:3f:96:b6:3f:
                    29:70:14:fe:17:42:da:a2:97:76:8f:4c:37:d8:17:
                    dd:fd:b4:6d:bf:5c:69:ca:10:2b:63:b1:b3:b4:36:
                    fb:f1:42:89:80:e4:2b:80:53:5d:c8:38:fb:78:32:
                    25:1d:4c:e5:09:64:87:28:ab:12:8a:ea:b5:c3:9d:
                    2d:50:35:7c:7a:c4:1f:39:8b:cb:0b:77:67:94:38:
                    77:92:91:9a:1f:87:ca:d3:25:31:2c:43:b0:b9:f8:
                    7e:2a:bb:86:fe:1f:11:65:b2:91:4f:e9:ce:65:01:
                    2b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:28:18:69:91:0C:B7:9B:20:41:D2:A6:35:09:D4:A4:5C:AA:4A:2A
            X509v3 Authority Key Identifier:
                keyid:3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:73:3c:5e:e8:51:30:7e:0e:b4:51:2a:71:99:24:2f:44:82:
         15:ff:24:34:34:a7:7a:0c:cb:5f:c6:23:8e:39:58:37:98:46:
         01:ae:7f:00:6b:7a:37:f3:f7:46:b4:07:32:2f:0a:6d:48:b6:
         96:44:6d:81:30:39:2c:8f:cd:42:57:d8:1d:d3:83:17:33:89:
         74:ec:f1:c9:b4:9f:9e:09:d3:2a:64:3e:f2:db:4f:fe:d4:e8:
         7b:4a:8e:a8:47:81:5e:93:65:5c:e8:86:bc:a9:42:18:5d:f3:
         4d:79:03:d4:64:94:47:19:5d:ee:b0:22:3d:67:0c:73:60:11:
         f3:24:c9:8b:22:32:fc:4a:6d:99:c0:a7:de:61:80:4c:87:b7:
         e4:0a:16:03:66:7e:37:86:b6:57:72:37:7b:c4:20:5e:55:eb:
         8d:61:ee:0d:4d:b6:d6:11:36:1d:f8:93:be:20:2c:59:32:32:
         98:31:8e:34:b0:74:a4:f4:9f:28:e6:dd:c5:cf:1f:00:e8:ec:
         07:ea:ec:e6:00:f8:19:53:99:b2:92:62:1a:c7:52:01:52:94:
         75:9c:b4:19:6d:2d:93:47:67:f3:5d:6d:c4:86:8c:a7:17:b5:
         81:0d:d7:8f:c6:01:b4:aa:35:34:9b:60:14:35:07:79:18:c8:
         29:11:fb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:47 2024 by rpki-client on console-fra.rpki-client.org