Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
File:                     jho3RHX7X1BwyGbGDdVeiurPcXM.mft (raw, json)
Hash identifier:          fzQ3Fh53YTccY8aVQQjPQ7bBlTNdvkgK5r+6u4bLvxE=
Subject key identifier:   00:64:96:FE:DA:02:60:64:7E:83:06:75:C8:E8:D2:25:4E:77:B0:96
Authority key identifier: 8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73
Certificate issuer:       /CN=F36A31C5AR/serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
Certificate serial:       22
Authority info access:    rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
Manifest number:          21
Signing time:             Thu 26 Dec 2024 03:01:39 +0000
Manifest this update:     Thu 26 Dec 2024 03:01:38 +0000
Manifest next update:     Sat 28 Dec 2024 03:01:38 +0000
Files and hashes:         1: jho3RHX7X1BwyGbGDdVeiurPcXM.crl (hash: oosH+0BpbEeTCzewNs29y18Y4QcKsvB6X8Oi21A4MNU=)
                          2: 77A53CFAAD8011EF8D542C9E762E951A.roa (hash: w9cTIDCHrbI8wxVcQWpv1wqBRl6yaH60seRon5+S8UE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                          rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Dec 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A31C5AR/serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
        Validity
            Not Before: Dec 26 03:01:38 2024 GMT
            Not After : Dec 28 03:01:38 2024 GMT
        Subject: CN=676cc712-61a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:2d:d4:6a:57:e2:70:9c:57:7d:2e:9d:5f:
                    49:db:47:23:eb:8c:7b:dc:aa:34:8e:f2:9a:f3:b1:
                    6a:4a:3d:c3:00:01:e2:ee:7c:a9:c6:98:07:5e:5a:
                    e0:3b:e8:fb:87:5a:ef:c5:41:bf:48:74:ba:9e:29:
                    fd:d1:f1:35:99:1a:3b:c2:d7:d0:8a:ed:10:e6:6c:
                    b6:b1:05:af:4f:da:fa:f2:2f:5f:80:07:05:47:4e:
                    34:39:73:4a:d7:e8:9d:14:1b:f4:91:c4:7e:00:ec:
                    6f:bf:50:11:f8:b9:50:a3:40:c0:be:bb:30:ab:ea:
                    c6:b1:80:1a:7a:a3:55:c1:56:9d:dc:a6:06:8b:34:
                    3a:ae:47:7e:a9:64:6e:7d:85:19:33:f2:ae:1e:37:
                    88:67:38:36:11:30:3c:a4:e6:14:71:10:dc:cc:f4:
                    c2:34:3b:d2:e6:f2:7a:31:eb:ef:a9:3b:6e:c0:7d:
                    a3:86:6f:91:13:0b:1e:d6:71:20:21:0c:e8:57:df:
                    8b:b2:92:53:21:54:9a:6d:f3:7d:41:dc:54:d3:e7:
                    e1:e5:89:3e:7d:9e:ed:b9:1a:2c:ee:85:34:c5:54:
                    d8:33:1e:4e:dd:61:76:fe:d1:c2:d9:5e:ed:94:96:
                    ec:17:10:c9:f3:45:2d:3b:bd:66:6c:a8:c1:94:00:
                    73:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:64:96:FE:DA:02:60:64:7E:83:06:75:C8:E8:D2:25:4E:77:B0:96
            X509v3 Authority Key Identifier:
                keyid:8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:22:d3:1c:e3:fd:37:3d:84:b2:55:ad:75:fb:cd:48:c1:fb:
         bf:ca:d4:78:89:07:45:38:ea:d1:de:02:ff:1b:04:5f:8d:1e:
         18:1a:b2:50:23:26:e4:96:c8:f1:19:f7:35:93:92:7d:6b:0a:
         83:84:d5:28:08:e7:d4:6b:89:aa:bc:e5:4d:8e:4c:41:0a:06:
         e3:89:70:a7:68:2b:f4:b7:7b:3f:34:7b:a0:6a:56:17:bc:92:
         06:8f:2e:54:4b:3f:06:16:ee:37:ac:93:f4:03:91:d5:68:2d:
         74:35:08:22:b9:61:5d:7e:cb:35:8b:1e:dc:80:ca:cd:7b:1b:
         d4:df:b3:45:db:8e:db:0c:16:ff:bc:37:72:3d:dc:97:c9:ac:
         96:d3:e8:43:0b:09:67:fb:db:6f:4d:78:09:78:85:25:4b:73:
         1b:78:98:8e:6d:a1:84:11:cd:58:05:09:9c:f4:ea:0f:ee:9a:
         06:68:74:8a:7c:c7:ce:93:5f:18:8b:71:54:08:31:5d:75:91:
         29:e7:91:cd:c7:7c:90:7c:7c:30:91:99:a6:27:21:55:ff:0f:
         f3:da:b8:58:02:d3:2e:b2:5f:e9:36:0b:23:e7:54:e7:ae:78:
         25:0b:b4:d1:74:d5:f1:26:30:c2:a0:0e:4a:25:27:ae:6c:84:
         97:ee:0f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 04:34:21 2024 by rpki-client on console-fra.rpki-client.org