Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
File:                     xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft (raw, json)
Hash identifier:          VHQ1c8AkLFy8giUea4qsnY/hZErV2ImDDheRm80b/kk=
Subject key identifier:   CD:99:91:D4:5C:0E:A5:03:55:07:26:43:4F:CA:75:6C:B2:E1:F0:B5
Authority key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
Certificate issuer:       /CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Certificate serial:       07DF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
Manifest number:          07D5
Signing time:             Fri 20 Sep 2024 00:55:36 +0000
Manifest this update:     Fri 20 Sep 2024 00:55:35 +0000
Manifest next update:     Sun 22 Sep 2024 00:55:35 +0000
Files and hashes:         1: xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl (hash: 94fET9dyxImI7O3AYToWr/i+KARXWsAMhmoBcbDCVZ0=)
                          2: 6FD0F2A0720311EC9A9E06CD5A40D577.roa (hash: 0YOPAiQdI63WuPMZYazmFfDvbZMq2Za60mP0nK9Jjvk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                          rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 22 Sep 2024 00:16:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2015 (0x7df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
        Validity
            Not Before: Sep 20 00:55:35 2024 GMT
            Not After : Sep 22 00:55:35 2024 GMT
        Subject: CN=66ecc807-3fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:ff:f9:d3:92:3e:13:d7:42:dd:ef:4d:33:
                    82:db:d1:f9:b1:93:a8:16:2e:33:50:bc:c7:61:1a:
                    6b:3c:bd:ab:76:a5:04:1e:6a:9c:d8:b9:a0:09:29:
                    c0:ae:dd:a4:8a:79:21:6d:9d:a6:4f:b6:7c:e3:06:
                    ca:9e:87:80:43:e2:1e:3e:82:7d:7d:ac:1a:6a:98:
                    4d:33:f0:73:51:35:dd:64:89:6a:76:44:f5:67:4f:
                    19:4b:51:c3:aa:49:28:77:cf:f7:f0:b4:c5:ed:7d:
                    60:7d:66:5d:61:71:c8:00:2a:0b:a9:e1:d8:a0:46:
                    aa:29:86:ca:c1:a2:6d:b8:2e:db:7b:c4:3d:41:e7:
                    fa:6e:67:85:d9:98:91:05:d1:98:37:33:d4:e1:49:
                    a3:65:fe:d7:ab:e7:66:9f:ba:cf:d6:0d:72:40:8a:
                    ec:13:aa:c0:25:38:07:4b:d1:42:ae:2b:1b:8b:b2:
                    db:ed:28:8c:c0:31:20:c0:2a:dd:d4:d5:7d:f3:a4:
                    e3:1c:5e:5d:7a:6d:2d:f4:96:35:b6:e3:d9:f9:dd:
                    ac:c9:52:d1:66:b3:30:0c:10:32:32:e1:ed:04:d9:
                    b7:19:c1:43:e1:cb:b1:3f:d7:ab:14:19:58:58:48:
                    65:cf:ca:10:a3:f2:60:ac:52:6a:e7:b1:ae:8e:65:
                    85:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:99:91:D4:5C:0E:A5:03:55:07:26:43:4F:CA:75:6C:B2:E1:F0:B5
            X509v3 Authority Key Identifier:
                keyid:C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ad:d4:50:ad:fb:8b:e5:10:63:6c:c6:fc:91:2e:58:de:fb:
         f9:64:ea:19:6d:23:20:14:89:47:45:f5:00:64:d2:dd:1c:b5:
         97:e2:69:43:d6:bc:fa:53:70:65:1f:25:3a:7e:93:b2:62:7e:
         ad:b2:58:d3:a2:26:dc:02:97:f5:69:2e:b3:54:89:8c:96:bd:
         65:cf:dd:34:ed:61:d6:da:89:77:65:6b:dc:f7:cf:1a:c6:f2:
         32:e4:ef:08:86:bb:f2:3c:8c:c0:4e:06:f0:20:d1:7c:04:f7:
         ba:a7:be:13:da:67:c9:3c:3c:df:76:67:66:16:67:4c:0f:03:
         9b:cf:68:57:58:e9:a9:c5:22:42:8c:47:1e:da:bb:02:cf:75:
         c2:bb:9f:89:11:e9:99:a4:06:97:01:3e:a4:eb:92:ad:5a:91:
         21:a2:29:87:b1:be:e0:78:23:82:c0:a1:e2:7e:fe:09:8b:11:
         bd:7e:99:5e:4e:72:26:72:27:39:77:fd:28:6b:1e:90:ee:13:
         5a:30:ec:70:a5:77:1d:c7:dc:f2:d1:19:c3:4e:54:b8:30:cf:
         0e:b8:f8:5d:43:47:66:b1:f3:ad:f0:c4:fc:ee:66:9e:f5:af:
         96:e1:67:db:51:04:49:07:ba:e0:c1:5c:7f:41:7c:db:82:77:
         20:57:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 04:39:02 2024 by rpki-client on console-ams.rpki-client.org