Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
File:                     XyKMRr7ytMupTLKfEMNoDuKIPbM.mft (raw, json)
Hash identifier:          MuqL0pAM5/cVndqeLVlrxQliBTJYn+wr3cue3hR98OY=
Subject key identifier:   1B:1F:D2:5F:44:48:F3:21:31:3C:97:16:0F:60:52:F9:2A:9A:CD:EE
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Certificate issuer:       /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial:       0237
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
Manifest number:          022D
Signing time:             Fri 22 Nov 2024 02:18:12 +0000
Manifest this update:     Fri 22 Nov 2024 02:18:11 +0000
Manifest next update:     Sun 24 Nov 2024 02:18:11 +0000
Files and hashes:         1: XyKMRr7ytMupTLKfEMNoDuKIPbM.crl (hash: nGtIR1xToQxSlh3mMF1KRYGuHTvnaFOqLeE1HA4nA+w=)
                          2: C1CD793ADCA911EEA16851C1775412E6.roa (hash: kXp9RVNOYWnHm1NxTwD8L+mI7pYc0hf1M6fRaN+SwGo=)
                          3: 6ACEB450DCA911EEAA5099C0775412E6.roa (hash: lQoHfDG4SwKGUz+fTylurLuEm8PMYSt5yFZEEzPq1uU=)
                          4: 3EDE4EDCDCA911EE8D2A60C0775412E6.roa (hash: Ya8PIBHzrdD8mhWsEVPNP139XPPa9x52b97glOFNBCU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
        Validity
            Not Before: Nov 22 02:18:11 2024 GMT
            Not After : Nov 24 02:18:11 2024 GMT
        Subject: CN=673fe9e4-9546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0e:a2:8d:54:ad:16:4c:63:7a:d5:bd:29:f7:
                    2e:03:c4:90:db:dd:08:6e:58:ae:37:f6:82:41:a9:
                    02:d6:56:66:52:4b:91:7e:15:c1:6c:30:8d:b2:6a:
                    64:8a:93:30:e1:dc:93:52:f8:dc:15:f0:69:8f:08:
                    a8:2e:89:06:9a:8f:3c:35:4d:f1:46:46:24:3d:f2:
                    61:fc:3d:ce:9a:4e:90:57:85:39:ec:be:f0:93:79:
                    57:5c:35:75:04:eb:f3:c8:55:0d:91:ae:4c:7d:b1:
                    5a:4c:a8:15:2e:a8:c4:9f:1e:10:f9:37:1a:93:a0:
                    10:3b:2d:7d:cd:71:4a:1e:b8:ea:2e:4e:ec:8d:1b:
                    7f:43:cb:a2:ff:f6:02:52:60:c4:a6:a1:2c:29:de:
                    12:8c:63:20:88:00:27:98:35:5c:06:dd:34:04:3d:
                    7d:d1:c8:92:4b:b7:fe:c6:97:bb:2d:62:2c:25:2a:
                    b9:23:d2:b5:97:35:0f:de:6a:c5:66:11:3d:dd:46:
                    68:f9:c5:d8:da:b3:5c:70:6d:ae:f9:21:b0:f6:81:
                    6c:92:20:67:1e:63:95:74:bc:5d:9c:c7:6d:ea:68:
                    de:a8:09:48:1a:c5:a7:f5:70:e4:da:9c:27:4f:59:
                    a0:52:9c:ed:f5:34:43:f1:bf:82:e4:7f:bf:1a:53:
                    09:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1F:D2:5F:44:48:F3:21:31:3C:97:16:0F:60:52:F9:2A:9A:CD:EE
            X509v3 Authority Key Identifier:
                keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a6:a1:ba:dd:3c:ff:5a:bc:e4:d8:c4:63:ad:0b:74:89:c6:
         b7:1f:35:b9:bf:d6:61:2b:0d:51:d5:bb:e7:00:5d:94:26:a3:
         7f:d2:5a:66:70:e3:1e:2b:53:55:f4:43:fc:92:b6:43:eb:80:
         0f:f9:22:af:97:87:5c:bc:f5:b9:5e:57:84:95:4b:ac:42:48:
         00:64:29:57:96:b2:a4:91:d0:e5:46:18:b0:d6:16:0a:3a:3d:
         35:36:ec:da:42:52:cf:f7:47:4a:cb:66:39:7a:8a:ff:58:8e:
         c9:74:30:74:f2:84:89:4f:58:c4:ad:d0:27:6a:cb:3b:01:f5:
         d1:76:91:1c:be:eb:bd:9c:09:15:68:02:0e:d5:42:68:0a:0f:
         60:ce:54:bf:59:6a:f5:e6:76:bf:96:ec:a2:59:4a:02:40:f2:
         0e:9b:0f:88:de:51:f6:d0:b8:75:73:82:ab:66:56:eb:2a:93:
         d8:75:cc:da:ba:e0:50:28:7f:50:db:b1:5a:d0:3b:fe:60:d5:
         aa:33:a1:11:2f:90:5e:f1:b3:0c:06:bc:a6:b2:b1:7f:ed:14:
         df:15:05:02:79:04:1f:12:79:76:a6:6d:d3:3c:f1:d3:8b:b1:
         74:b9:d6:f2:e8:f6:1d:94:4c:d0:85:c5:b6:bb:3c:19:34:7f:
         4b:b3:21:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----