Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
File:                     jdcjjwE3sVj1PHvg_w0uWBnz638.mft (raw, json)
Hash identifier:          OnJiAn/KU0+ChbqWOUgu/dGMZiW93b2XSj/QHrWtmhc=
Subject key identifier:   E7:A0:D7:1C:87:B5:99:8B:74:6D:87:42:73:A9:42:9D:DE:96:1C:89
Authority key identifier: 8D:D7:23:8F:01:37:B1:58:F5:3C:7B:E0:FF:0D:2E:58:19:F3:EB:7F
Certificate issuer:       /CN=F36A15D5AF/serialNumber=8DD7238F0137B158F53C7BE0FF0D2E5819F3EB7F
Certificate serial:       06E5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
Manifest number:          06E3
Signing time:             Sun 28 Apr 2024 01:02:31 +0000
Manifest this update:     Sun 28 Apr 2024 01:02:30 +0000
Manifest next update:     Tue 30 Apr 2024 01:02:30 +0000
Files and hashes:         1: jdcjjwE3sVj1PHvg_w0uWBnz638.crl (hash: 8u+1ue5ASetr7U38E3ZNWo053k6oxiJkUVivyvDs4WM=)
                          2: 93BEE2E806AE11EA96835D44F8AEA228.roa (hash: ympYrU6cVzeM/Zo6Ql2gUr5WY/OKcA1alTUO/oYBqs8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Apr 2024 00:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1765 (0x6e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A15D5AF/serialNumber=8DD7238F0137B158F53C7BE0FF0D2E5819F3EB7F
        Validity
            Not Before: Apr 28 01:02:30 2024 GMT
            Not After : Apr 30 01:02:30 2024 GMT
        Subject: CN=662da026-4983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:f7:4d:f2:17:2a:b9:1c:a2:31:14:a3:01:
                    6e:f7:47:95:dd:97:d1:92:42:e2:37:15:60:de:8e:
                    81:65:20:34:d2:ee:6e:50:40:58:83:51:19:6b:5c:
                    5e:1e:65:85:bd:06:ab:fd:6f:89:d9:2d:9a:a0:b8:
                    db:b5:70:1e:59:39:78:66:08:c7:70:46:22:73:19:
                    b1:3b:45:50:46:da:3a:82:fe:2e:c9:ac:3f:f4:bb:
                    1b:15:fa:1b:dc:54:40:4d:6c:10:6e:5a:9b:91:a1:
                    25:1c:8e:4f:ac:b5:c4:26:c4:1b:24:e7:3c:d4:32:
                    68:e0:a6:c6:d8:6e:95:26:de:dc:01:b9:16:96:1b:
                    8a:fa:45:7d:eb:da:b7:25:a3:71:fe:3e:78:c2:12:
                    20:cc:0e:c8:18:97:1c:ea:7c:7d:b1:d7:8a:85:5c:
                    3c:c2:c6:7e:56:75:bd:b8:28:43:85:8b:8d:45:c3:
                    4c:3c:ae:72:32:e5:db:28:24:25:6c:36:59:95:f5:
                    ec:ca:70:22:8f:0c:d9:75:88:83:db:2a:e0:9f:14:
                    9c:cf:50:98:f9:2e:5e:b8:df:3a:f6:83:e0:bd:86:
                    f1:77:ab:a4:cd:51:6c:a7:11:8f:d8:e6:94:52:23:
                    bd:1d:23:13:97:2f:25:78:f3:20:fc:ca:85:1c:80:
                    cf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A0:D7:1C:87:B5:99:8B:74:6D:87:42:73:A9:42:9D:DE:96:1C:89
            X509v3 Authority Key Identifier:
                keyid:8D:D7:23:8F:01:37:B1:58:F5:3C:7B:E0:FF:0D:2E:58:19:F3:EB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:81:16:07:dd:09:4e:92:b5:a2:ba:67:39:9b:96:82:63:b9:
         51:6e:bc:f3:37:70:87:82:05:ae:4a:45:a1:6e:e2:c4:c8:df:
         46:97:fc:32:d2:2f:01:37:90:bc:7e:31:73:ae:a7:d7:c6:06:
         d5:cb:7d:16:6c:85:4a:d4:40:78:b0:37:50:48:68:76:03:c9:
         81:6e:a3:d1:84:32:81:60:ba:43:f7:03:cc:64:e3:fe:89:26:
         dd:ea:9c:87:dc:6d:a4:3c:51:83:1b:10:dd:fd:f5:97:fe:38:
         4f:f9:b9:2d:07:b5:79:08:7f:66:06:2d:5c:ed:ec:fc:90:86:
         dc:66:5d:2a:39:79:85:0b:9e:42:e4:1e:35:36:79:e9:42:28:
         d7:03:52:52:70:d0:48:d8:f8:73:0f:0c:f7:fc:d0:d6:98:84:
         b1:e6:e5:7e:86:45:b2:b6:a8:59:4f:a1:84:26:41:e6:e7:14:
         f6:66:89:f5:d6:0d:96:a3:73:0b:9f:bb:15:bc:6b:56:7f:37:
         f8:10:f2:04:f9:38:62:35:70:ac:0a:e5:62:ec:38:8d:ec:05:
         74:c3:1c:d6:21:64:fa:0b:31:b2:fe:70:f0:6e:84:7f:e5:a0:
         23:d7:2c:ed:3f:0d:04:98:3b:7b:2e:40:3f:2c:78:a3:72:42:
         fc:aa:c4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:10 2024 by rpki-client on console-ams.rpki-client.org