Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
File:                     DiXC-NXlAp5pEJ686yVczjVJFv4.mft (raw, json)
Hash identifier:          jEmgJdZuYRvRvO22chOnTNQ7tI4+BRVOdpQWm0kyP7k=
Subject key identifier:   1C:34:84:83:48:7D:34:C9:DB:F5:9F:97:6F:42:D1:43:1B:6E:B9:F0
Authority key identifier: 0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
Certificate issuer:       /CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Certificate serial:       B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
Manifest number:          AF
Signing time:             Sun 19 May 2024 02:27:02 +0000
Manifest this update:     Sun 19 May 2024 02:27:02 +0000
Manifest next update:     Tue 21 May 2024 02:27:02 +0000
Files and hashes:         1: DiXC-NXlAp5pEJ686yVczjVJFv4.crl (hash: u5ZbWbvBvB5TdmIRoBbg6GTSc2GB3g44nxBj2tJwPVY=)
                          2: 8C7C1810938711EE9A4CB809D25BE465.roa (hash: WJPtWXyF4HbsBRlcRAZ4odD1u13hg/x2iKAvSH5H04k=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
        Validity
            Not Before: May 19 02:27:02 2024 GMT
            Not After : May 21 02:27:02 2024 GMT
        Subject: CN=66496376-e3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2a:19:aa:4a:68:98:ff:ff:27:31:f1:db:99:
                    29:0c:b6:25:d2:b4:4f:c5:e8:e4:c5:de:46:ff:91:
                    68:9f:f5:63:36:7d:8e:00:a5:06:26:d3:fb:3b:b6:
                    96:e7:1a:61:0c:f1:65:3b:e0:ed:70:aa:ec:ba:98:
                    1e:84:b1:ff:26:6a:ed:49:9a:16:9b:d0:ed:3b:65:
                    fc:74:e5:77:91:01:7d:af:92:30:ba:17:48:c4:e4:
                    d5:36:12:5f:18:cf:b4:c2:92:cc:b6:e5:4b:f5:ce:
                    48:34:8c:d8:16:f0:0b:2d:ad:14:cb:be:85:e1:ab:
                    a4:15:f6:40:42:18:2a:e1:14:28:fb:80:51:eb:ca:
                    59:62:4d:f8:53:07:c1:97:35:a7:21:31:ba:8b:6c:
                    f5:28:4d:18:7a:0f:30:93:77:2b:4a:c2:25:f2:fc:
                    9f:86:fa:5b:cd:fc:67:ee:22:43:50:d4:14:20:d3:
                    cc:30:48:4d:eb:a4:6f:32:9a:41:1b:45:b6:73:5f:
                    e6:41:51:a7:5b:3b:1e:4b:14:62:62:af:f8:48:b1:
                    7d:c6:43:e7:80:e6:75:88:0b:dd:4e:b1:8d:96:a3:
                    7f:60:1a:db:67:14:ea:61:9b:9b:1b:6e:38:46:3a:
                    26:e5:29:d4:52:6f:82:8c:2c:9a:33:d8:92:a4:85:
                    cb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:34:84:83:48:7D:34:C9:DB:F5:9F:97:6F:42:D1:43:1B:6E:B9:F0
            X509v3 Authority Key Identifier:
                keyid:0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ff:51:3d:7e:69:35:b8:d5:36:1e:8a:8c:f2:bf:79:54:5e:
         c6:c8:fa:27:0e:9d:8c:e4:30:23:03:66:76:68:e1:d7:76:b4:
         40:64:d1:aa:b8:da:8e:d9:2e:41:25:c1:7a:fa:32:1d:af:5d:
         06:5b:d2:d5:c1:3f:1f:16:50:e5:5c:8a:29:4d:3a:08:0a:80:
         25:4c:51:d2:99:4a:9b:97:a7:68:17:24:da:f4:1c:9f:46:b4:
         d1:88:ad:87:4e:1c:7a:84:92:72:54:0d:ac:c1:5e:fc:bb:ca:
         34:0f:62:89:e6:11:74:2b:c8:c4:ba:5f:37:f6:f7:44:22:6c:
         0d:34:a7:48:65:d6:74:fc:43:14:3b:46:be:93:95:04:7d:13:
         c1:89:97:50:a7:19:a2:07:bb:3b:bc:e1:90:d3:47:92:6b:51:
         7d:39:2d:40:e7:a0:01:f5:fa:6d:d7:c1:1b:fd:a3:e2:83:a0:
         91:fa:62:e5:0c:88:dc:50:5f:d7:01:a1:1b:a5:0a:b6:e7:a0:
         b4:e5:bd:c0:b7:89:87:09:3a:39:29:81:7a:f1:62:f3:2f:04:
         c9:86:ae:07:92:fe:a7:b8:60:df:39:44:bf:65:e9:8a:d8:39:
         2c:c9:f8:55:de:56:13:ba:0d:0d:ba:b1:aa:cd:94:d2:e1:e7:
         17:eb:fe:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:11 2024 by rpki-client on console-ams.rpki-client.org