Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
File:                     _lkJnrBGBmU3CfmlmpxGdQcb7L0.mft (raw, json)
Hash identifier:          iCX7jMZWyDTcHcdmSU7/Nuv1P3HY/ib5BQmvhf4KiBg=
Subject key identifier:   AA:23:D3:B9:9C:CA:D7:0B:82:DA:24:03:4E:5E:55:42:CF:54:AC:9A
Authority key identifier: FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD
Certificate issuer:       /CN=F36A141DAF/serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
Certificate serial:       011C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
Manifest number:          011B
Signing time:             Sun 19 May 2024 02:19:51 +0000
Manifest this update:     Sun 19 May 2024 02:19:50 +0000
Manifest next update:     Tue 21 May 2024 02:19:50 +0000
Files and hashes:         1: _lkJnrBGBmU3CfmlmpxGdQcb7L0.crl (hash: ZxLocEsud76M48SidNEVXCw56/rQnXuB9E9XSOC6CMo=)
                          2: A6CB045440CD11EEA84BD2644AD9E6FC.roa (hash: k2NQBaUwb1pqhxKitutyFUj84i7cH4npO1gBOUjSKLM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A141DAF/serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
        Validity
            Not Before: May 19 02:19:50 2024 GMT
            Not After : May 21 02:19:50 2024 GMT
        Subject: CN=664961c6-1534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:1a:cd:ec:f3:39:45:0c:23:72:31:b0:eb:
                    ef:9f:15:3d:82:5c:5a:ce:5f:b0:02:b4:ed:b0:4c:
                    ce:d0:73:3a:3c:0b:3e:a3:71:86:48:62:b7:70:0c:
                    3a:4a:96:a6:f4:17:b6:a1:4c:49:42:2e:8b:bb:e1:
                    05:c1:47:6a:15:df:23:76:46:45:d6:98:09:ab:de:
                    c8:64:d7:99:2a:89:38:aa:a3:a1:04:f4:f7:41:90:
                    65:d1:2b:a8:f7:0d:9f:e7:17:51:58:8e:32:3a:b3:
                    16:59:2a:77:93:26:e2:bb:7e:c6:d6:d3:5b:72:8c:
                    88:28:18:a6:41:17:ab:11:62:dc:fa:bd:a9:36:34:
                    f5:6d:a7:ae:d3:4a:b2:8d:f5:b4:ab:74:24:19:67:
                    0e:6c:fb:93:e7:86:7e:1a:d4:0e:f2:c5:a5:52:7e:
                    93:4c:93:3c:c2:09:14:13:9c:7f:2f:68:71:7b:83:
                    98:ea:15:c5:f8:6c:a9:91:42:a9:66:0d:1c:56:09:
                    07:c7:40:ae:d4:54:c8:83:39:dd:d3:f2:c8:39:c2:
                    aa:18:ec:cd:f5:31:c6:44:51:a6:19:e4:b4:65:da:
                    a8:d9:6b:7b:be:2d:4a:4d:85:52:4c:20:9b:8c:c0:
                    97:cf:bc:3d:d7:a5:d6:02:cb:85:b2:bd:3f:b6:44:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:23:D3:B9:9C:CA:D7:0B:82:DA:24:03:4E:5E:55:42:CF:54:AC:9A
            X509v3 Authority Key Identifier:
                keyid:FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:34:fd:af:14:e3:39:e0:d4:35:99:95:f9:fc:c5:4b:c1:aa:
         a9:c7:97:66:40:b5:58:7f:68:7b:04:41:d1:c3:17:c4:2f:8f:
         f1:15:b1:14:d4:41:e4:99:2b:40:26:fc:db:3e:e3:50:b9:d6:
         27:58:a3:1b:0c:28:37:c3:bb:eb:1b:78:d0:f0:b1:c8:07:71:
         79:65:65:5d:52:9c:b3:48:b2:90:51:0e:e4:a0:76:a1:7c:56:
         23:68:a6:43:46:4a:4f:a1:64:97:2b:4d:26:a8:13:e8:42:77:
         48:4b:b8:6e:10:9e:75:e8:ec:de:7a:8f:c0:cf:70:e8:d4:7c:
         7b:fc:36:b3:77:67:d3:d1:a2:5b:42:ae:6e:19:d0:dd:43:67:
         bb:1a:0a:c3:68:c2:f2:77:a6:25:b1:15:44:b1:50:c7:83:76:
         10:f7:4c:40:37:50:0c:37:82:4c:64:a3:3f:37:e1:cd:57:c6:
         ef:cb:62:aa:70:7e:a2:83:9d:fb:1c:4c:84:f9:10:01:fb:19:
         99:e6:8f:a9:e8:97:4c:97:83:fa:b7:bc:04:61:f7:14:c5:4b:
         0b:3a:40:00:19:b0:dc:58:a5:91:35:c1:ee:3d:02:61:40:ce:
         6b:24:2e:72:ab:bc:0c:75:5f:a2:44:e7:ba:6c:7f:07:aa:d3:
         7f:c7:b2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:59 2024 by rpki-client on console-ams.rpki-client.org