Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
File:                     Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft (raw, json)
Hash identifier:          8ccjuCXazRQIO+H8SPtzHprf95O+TJw2MH8cu1tFtZM=
Subject key identifier:   D4:0C:F2:66:C4:F8:3F:6D:10:92:14:37:D0:95:5D:43:B7:1B:6C:DB
Authority key identifier: 2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D
Certificate issuer:       /CN=F369C49AAF/serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
Certificate serial:       26
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
Manifest number:          25
Signing time:             Mon 27 May 2024 02:36:07 +0000
Manifest this update:     Mon 27 May 2024 02:36:07 +0000
Manifest next update:     Wed 29 May 2024 02:36:07 +0000
Files and hashes:         1: Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl (hash: aEOGnD+AJvNPi/zG2k3rZOFKF7sm7J6RKxO9+6T3fic=)
                          2: 3F101946015F11EFB16E3011017001B1.roa (hash: Xh6nt99XUHYlPadPzPRYk3ee0GvJbKhlgYL2g7hGR5Q=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 May 2024 00:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C49AAF/serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
        Validity
            Not Before: May 27 02:36:07 2024 GMT
            Not After : May 29 02:36:07 2024 GMT
        Subject: CN=6653f197-8fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:11:45:c2:2c:13:1f:7a:a1:c2:77:da:26:c8:
                    33:fd:69:79:67:9e:75:34:b4:07:dc:07:34:e6:94:
                    57:17:87:f2:f3:a2:c6:ac:45:ab:51:26:39:0a:7e:
                    13:fb:9b:fd:93:63:0f:c8:7e:36:9c:c5:37:fb:87:
                    35:b5:b3:0a:ed:8b:53:06:d4:99:99:61:79:ec:ba:
                    47:33:4f:f1:6f:9a:ad:ab:0a:ff:2a:1c:de:36:3f:
                    0c:9a:4d:36:2b:bf:ce:9c:b4:02:29:9e:6a:af:ce:
                    61:08:96:4c:4b:b9:28:73:08:12:e4:78:e6:80:82:
                    04:90:51:c2:2a:69:09:6b:61:41:be:7f:1c:93:51:
                    75:de:70:3d:45:29:2a:e0:45:f6:ee:b4:34:b0:fd:
                    d6:a6:f6:2d:f3:2f:f4:bf:12:25:e0:00:f4:49:17:
                    81:22:03:85:c2:db:a6:13:54:0a:d1:f5:bf:a2:6d:
                    67:b6:d2:54:65:87:7f:e2:1c:e2:d6:1a:c5:65:4f:
                    b1:5d:18:f9:05:95:79:38:26:51:02:37:c5:4d:ae:
                    b1:2e:ae:ea:e8:d5:11:7f:01:a6:79:41:7f:c8:29:
                    30:7e:99:b0:ef:36:92:ff:24:29:03:ac:e8:24:b4:
                    8e:9d:e5:a7:e2:fe:66:92:33:83:02:82:8a:f6:6d:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0C:F2:66:C4:F8:3F:6D:10:92:14:37:D0:95:5D:43:B7:1B:6C:DB
            X509v3 Authority Key Identifier:
                keyid:2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:49:2b:d4:48:bc:b4:af:cf:c8:85:ab:cb:c4:7d:38:40:88:
         da:30:d4:8b:d5:2b:8c:24:3e:24:fc:93:64:4e:a5:bc:6c:14:
         fc:74:b5:b8:34:16:a5:9c:05:f4:32:8d:f8:ce:0c:0b:50:3a:
         2b:78:31:25:48:85:c6:01:0d:90:97:e9:a0:5b:49:f2:db:9e:
         74:41:bb:82:da:b3:0c:2f:39:1f:66:88:98:99:50:be:11:52:
         f2:80:91:36:7c:53:0a:ae:58:2c:19:46:df:46:5d:bf:a7:a3:
         2a:19:63:b0:a2:a4:8b:4f:a0:9e:55:2b:bd:35:9f:d1:36:fe:
         be:33:07:5f:15:36:5d:6a:03:8e:e0:10:36:b1:54:be:cf:40:
         ac:61:2d:d4:b7:eb:ea:1a:02:06:3d:eb:6d:44:3f:c3:98:0a:
         3d:02:df:73:50:c0:af:6c:6c:a3:d9:18:e8:2d:9c:5c:9d:c1:
         3e:fa:39:00:91:8a:f9:1c:90:1f:02:f6:82:a5:f2:9a:51:05:
         05:09:e9:58:66:64:e0:93:5f:a5:df:2f:31:9a:e4:93:5a:38:
         d0:b8:2d:26:42:51:73:72:e4:b2:4c:de:2b:8a:fe:1b:39:59:
         51:d6:ed:fa:fb:06:95:b9:00:7e:66:54:05:33:cd:0b:01:3b:
         0c:14:7f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 04:53:34 2024 by rpki-client on console-fra.rpki-client.org