Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
File:                     TiZQ4qujZbOc_hWOyk20jWQs22U.mft (raw, json)
Hash identifier:          kr9IQdh+xVktEUXb+at0qqOawlHnXle8tnrEUCXX5EY=
Subject key identifier:   E7:D3:0A:F4:84:17:DA:30:AA:7B:84:6A:7F:4F:65:ED:61:B7:68:48
Authority key identifier: 4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65
Certificate issuer:       /CN=F369942EAF/serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
Certificate serial:       07DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
Manifest number:          07DC
Signing time:             Sat 27 Apr 2024 20:39:15 +0000
Manifest this update:     Sat 27 Apr 2024 20:39:15 +0000
Manifest next update:     Mon 29 Apr 2024 20:39:15 +0000
Files and hashes:         1: TiZQ4qujZbOc_hWOyk20jWQs22U.crl (hash: ge85YxhGTjDAqXxOsW6hYTA7Hn5MB2v3r7IB+1nDmFg=)
                          2: 234EC302FF0211E8A910092BF8AEA228.roa (hash: NOa5khrVmkhCUl9lhv8WYW52PgfD6O4eOvTJHt2DcIk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Apr 2024 20:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2013 (0x7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369942EAF/serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
        Validity
            Not Before: Apr 27 20:39:15 2024 GMT
            Not After : Apr 29 20:39:15 2024 GMT
        Subject: CN=662d6273-5ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a7:17:a8:9e:48:e9:59:55:84:b1:a8:e3:91:
                    c6:b6:49:cb:3a:f5:5d:b2:dc:35:d9:b2:d7:cb:68:
                    8c:e7:8a:81:df:c3:74:da:59:68:96:25:de:8b:07:
                    77:c2:07:9d:f2:28:b3:41:00:61:ab:ee:3b:c3:05:
                    a5:d7:3a:20:8a:e4:b3:ac:71:42:a3:ab:60:fe:f9:
                    66:a0:01:8a:e9:e9:91:5e:79:c0:19:3d:01:41:bc:
                    9a:fc:de:b1:ba:bd:f6:3e:31:27:88:e1:0d:da:cd:
                    85:86:ac:77:39:de:1d:fb:5c:3a:2e:cf:3a:f5:e8:
                    95:53:bf:5f:2c:53:2c:62:52:1d:e1:0a:67:c3:11:
                    4a:77:bb:70:b7:1a:ca:35:46:e2:75:a8:6a:43:47:
                    a3:41:8d:8e:bb:cb:5b:e0:e9:c5:83:a5:54:fb:d1:
                    8d:57:ed:81:e5:e0:30:fd:cd:d6:02:67:bb:75:b4:
                    85:75:57:13:39:f1:6c:4a:e4:98:fe:de:46:7a:1b:
                    e7:f5:74:72:ae:27:e5:45:4a:30:e8:bd:3e:11:94:
                    7b:15:40:4f:96:5b:b1:9c:ee:26:7d:ba:39:49:33:
                    ff:39:02:30:9a:0e:a1:4a:b9:31:fe:1e:08:ef:ce:
                    d0:51:f9:7f:4d:e0:82:43:25:28:4f:a3:de:39:1b:
                    70:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D3:0A:F4:84:17:DA:30:AA:7B:84:6A:7F:4F:65:ED:61:B7:68:48
            X509v3 Authority Key Identifier:
                keyid:4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8a:80:98:81:2a:14:69:07:d3:1f:1a:00:30:a8:f3:cd:af:
         10:22:b1:8f:a9:6f:d7:5e:7b:b0:15:65:2a:4f:47:81:19:9f:
         7c:be:1b:bd:f6:18:e0:fe:7d:45:7f:19:ae:a7:77:79:c5:a4:
         d1:52:70:d8:01:df:64:69:7b:c3:d6:ff:36:ee:02:45:2d:3b:
         e5:f7:d2:f1:18:80:88:3d:f1:5a:3a:09:0b:9d:c6:94:ed:42:
         77:96:08:65:77:73:b7:01:c4:3d:23:8f:e1:ed:11:1c:88:52:
         62:77:de:5d:92:e7:20:7b:1f:1c:70:24:64:46:ef:11:be:98:
         fb:ad:71:7e:d8:57:6f:57:9f:73:e7:f3:a9:10:e1:ab:72:5c:
         39:f0:be:f9:cc:60:ea:c5:73:8b:2f:4b:65:95:49:83:9e:22:
         43:5e:23:77:21:d7:34:02:bf:73:b5:26:b6:e1:c6:af:1a:a7:
         65:4b:75:d5:c2:ab:08:69:c8:14:13:25:58:8e:2a:01:2c:2a:
         55:0e:de:a9:75:32:8c:51:46:0c:0e:0a:2b:6e:b9:2f:25:66:
         aa:e4:09:51:b5:4e:9c:30:c6:25:68:94:70:4f:6f:30:e0:23:
         62:5c:85:97:ca:5b:7a:e9:c8:00:b4:6c:9d:4c:74:10:ad:e4:
         1e:14:f0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----