Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
File:                     x2kBfEr3fF65-LyEaI2IawFQMjo.mft (raw, json)
Hash identifier:          Vy5sf42a2BaOJBZ9hQCwwzDrQibbOn59p9uf7TyA7w0=
Subject key identifier:   53:F2:69:24:81:5F:56:65:AE:84:6D:3A:FD:00:B8:F5:B6:1D:F6:DE
Authority key identifier: C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A
Certificate issuer:       /CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
Certificate serial:       0227
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
Manifest number:          0225
Signing time:             Sun 19 May 2024 01:59:54 +0000
Manifest this update:     Sun 19 May 2024 01:59:54 +0000
Manifest next update:     Tue 21 May 2024 01:59:54 +0000
Files and hashes:         1: x2kBfEr3fF65-LyEaI2IawFQMjo.crl (hash: 0+C/R+JL2yiREAJRLRf0y3nck34D0PRxxWp4tKiYZGE=)
                          2: B6F83C207D4111ED99A5A8DEF1222468.roa (hash: Z4JFecH0Pxw3ortmqmh93AEMH7ET0Xm0pVB1yg4vYI0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E4C8AF/serialNumber=C769017C4AF77C5EB9F8BC84688D886B0150323A
        Validity
            Not Before: May 19 01:59:54 2024 GMT
            Not After : May 21 01:59:54 2024 GMT
        Subject: CN=66495d1a-2a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f3:a0:b1:18:75:cb:e0:e1:6b:74:aa:9b:f6:
                    43:8b:17:f5:46:8c:0c:af:97:ed:f2:73:12:e2:fa:
                    14:d8:75:2c:dc:48:c9:db:e9:12:c7:c6:8c:2a:cb:
                    81:57:7a:83:09:ad:21:3e:fb:0c:3a:23:33:c1:1b:
                    34:70:9b:80:08:37:f0:38:45:0e:a8:e1:9a:ee:b0:
                    9b:35:6a:4a:2f:d4:f0:e4:1f:ab:e7:d6:c9:c9:93:
                    40:6d:f1:fd:b2:5a:b1:b8:48:75:2d:0a:14:69:5b:
                    5c:3b:0c:58:19:7c:81:46:75:a6:de:7b:1c:2d:56:
                    c3:eb:94:24:be:75:e9:d1:f2:d0:ac:c7:b0:bc:8a:
                    5f:ad:23:86:47:6c:de:69:7d:30:bb:08:dd:2f:fa:
                    20:f0:54:bd:36:61:f8:f7:ed:43:b2:4a:c3:58:73:
                    d6:b7:be:00:56:62:8f:4b:31:a9:d2:12:90:d0:c3:
                    31:0d:86:4d:ef:e2:c2:3a:eb:4a:ac:9c:3a:89:99:
                    ac:21:9d:79:61:e5:cc:ef:87:a5:0b:1f:64:7c:b2:
                    7e:4c:bf:ba:fa:e7:e7:7c:72:a1:2c:e2:e0:5c:dd:
                    9c:f6:52:39:88:c1:d2:32:3b:72:2b:0f:9a:ad:99:
                    06:f3:c7:44:6c:c3:2b:4d:e7:00:96:ac:af:09:65:
                    b0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F2:69:24:81:5F:56:65:AE:84:6D:3A:FD:00:B8:F5:B6:1D:F6:DE
            X509v3 Authority Key Identifier:
                keyid:C7:69:01:7C:4A:F7:7C:5E:B9:F8:BC:84:68:8D:88:6B:01:50:32:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x2kBfEr3fF65-LyEaI2IawFQMjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E4C8/BDF05D7C7D3811ED8C9D06C7F1222468/x2kBfEr3fF65-LyEaI2IawFQMjo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:81:8d:d3:f0:75:30:64:62:5a:c6:f6:6a:63:a3:00:2a:85:
         3c:48:e3:98:6a:00:ae:4f:b1:48:2c:4e:cf:83:fd:01:31:b2:
         ae:f8:ce:47:a7:b3:f1:6d:15:c1:dd:64:68:aa:c6:95:06:ce:
         36:15:8d:f7:b9:83:82:79:5f:19:e4:66:3e:23:58:73:c5:d4:
         aa:ba:ab:7a:f7:d9:13:e5:e0:7e:34:69:17:38:70:63:2d:40:
         f5:2c:20:dc:66:27:dc:bc:8f:36:70:85:b0:24:ab:e5:16:5e:
         bf:5d:f5:b2:8b:9d:23:ef:59:5f:cb:7c:6e:75:97:6e:26:50:
         b2:9c:cb:1b:fa:8b:39:a7:52:e2:0b:73:cf:c2:36:03:68:73:
         5d:80:53:dd:e1:29:dc:58:97:a2:49:f9:b9:46:88:c2:ce:5e:
         09:61:03:8e:5d:7f:d1:b2:1a:83:63:73:72:d4:72:32:2a:78:
         e5:c3:63:a6:c0:30:1f:43:38:c2:0e:9d:95:3b:fb:39:f0:4a:
         25:eb:19:49:e2:1d:02:85:52:3b:3d:4e:c5:a2:e8:cd:ab:85:
         9c:77:59:93:18:ba:0d:ea:99:b6:cc:48:a9:88:a6:49:63:b7:
         46:0a:5c:4b:22:6f:c0:73:29:7d:dd:93:ac:3b:f9:b3:58:ea:
         8a:5f:8d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:32 2024 by rpki-client on console-fra.rpki-client.org