Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
File:                     ih_PKB86N6VQ5kE32QhVCuiQIzo.mft (raw, json)
Hash identifier:          PCfOV5tioHYxuqMr/3rgn7KBD1l0JS2P0t6Y99RSFHI=
Subject key identifier:   A2:15:A8:0F:22:E5:92:9E:5C:09:A7:A0:C8:35:D5:5A:9B:E9:92:8B
Authority key identifier: 8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
Certificate issuer:       /CN=F36A3983AF/serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
Certificate serial:       15
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
Manifest number:          14
Signing time:             Fri 22 Nov 2024 02:59:49 +0000
Manifest this update:     Fri 22 Nov 2024 02:59:48 +0000
Manifest next update:     Sun 24 Nov 2024 02:59:48 +0000
Files and hashes:         1: ih_PKB86N6VQ5kE32QhVCuiQIzo.crl (hash: NFkaMFyrfkSuNfFjHKWk4J/vAm3mW1eYZPTZJlKKjw0=)
                          2: 06EE82A89B9E11EFA256DA5A762E951A.roa (hash: 2jh2P8eMrHu4GkQNFQFJgeOA87Bp3duiKWGcRIfCjWE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3983AF/serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
        Validity
            Not Before: Nov 22 02:59:48 2024 GMT
            Not After : Nov 24 02:59:48 2024 GMT
        Subject: CN=673ff3a5-1b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ac:c0:c7:43:be:be:de:1d:ee:b9:1e:88:64:
                    5d:82:2e:7f:3a:c1:48:46:57:29:21:ff:2c:64:0a:
                    69:ad:5e:35:97:0f:c7:da:48:40:4f:16:4b:6b:3d:
                    55:a9:4a:90:69:50:ad:99:e5:ab:40:8e:db:b3:22:
                    93:5a:7c:0e:5a:e2:9b:7e:05:9f:11:cb:5b:1d:cd:
                    61:22:f0:6e:47:f6:c3:37:02:b4:46:a4:5b:9c:7b:
                    4e:2c:b0:87:de:7d:4f:a8:63:b9:83:8a:71:3d:85:
                    d0:72:56:78:df:4a:87:a7:89:10:0f:f6:dc:ad:41:
                    b2:1c:af:c1:6d:a4:44:7d:dd:04:98:43:fc:32:a1:
                    63:36:34:17:24:17:6f:90:f5:50:10:17:d6:4a:5f:
                    6e:22:00:a5:d7:80:ca:c0:bc:6f:07:7a:82:a5:0e:
                    62:bf:02:1e:b8:98:6b:ea:07:94:17:19:b1:9f:14:
                    26:14:3f:7e:3d:6b:7c:44:04:22:de:31:89:e0:e0:
                    74:0e:3a:c5:c9:bc:28:7e:4e:06:2e:d8:7d:01:ff:
                    40:3a:61:e7:50:8d:4c:cc:4e:02:cd:d8:dd:df:cb:
                    bb:f1:b1:bd:b2:3a:69:72:2f:ad:dc:ff:54:67:a7:
                    1d:1d:88:d4:d8:87:a0:fb:65:0c:5b:6f:ff:c6:16:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:15:A8:0F:22:E5:92:9E:5C:09:A7:A0:C8:35:D5:5A:9B:E9:92:8B
            X509v3 Authority Key Identifier:
                keyid:8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:34:e4:fa:75:cf:90:d8:9c:31:1e:5d:42:10:ed:fd:da:7d:
         03:07:6d:74:76:7d:a1:99:b0:77:9f:07:2c:5b:64:2d:3f:00:
         ac:77:b0:e8:80:9a:60:9d:9d:7c:5e:f0:33:9a:f8:b4:98:57:
         ca:36:e6:b8:46:c2:62:03:21:6c:60:f3:2a:45:5a:c0:82:98:
         ed:47:23:db:67:3f:ee:eb:ed:17:06:de:eb:d2:eb:02:5b:6d:
         e2:6e:52:36:70:de:03:42:15:ee:03:8c:a8:05:2e:ad:a6:09:
         47:a4:d3:e4:76:8a:6f:e9:f2:0f:56:fd:5f:d2:8d:e5:19:62:
         8d:82:5c:5d:cd:f3:d1:8a:8e:7e:52:ae:b2:47:1b:c6:c5:68:
         03:0d:fd:9b:9d:7d:79:35:a5:06:9c:b2:54:e7:84:5f:39:fb:
         f3:75:7f:37:c9:b4:64:23:18:65:fd:50:75:8b:7d:8d:02:e6:
         1f:55:42:e5:cd:f9:b2:6d:2b:44:3f:da:b8:d2:33:2c:bb:fb:
         9c:3c:ce:da:6e:d3:19:df:7b:ac:1c:71:d3:78:25:32:7f:a9:
         f0:b0:2d:52:68:a7:d6:3d:7e:8f:8f:c6:04:83:2c:67:3b:cb:
         91:e9:07:ab:30:f6:6d:37:55:5d:49:fe:79:b6:d4:89:91:5f:
         c4:7d:eb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org