Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File:                     hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier:          +fPRp+qhBupMHHfTOKZtbXe3ezUS+SIb62NkmNaZwiY=
Subject key identifier:   7F:C8:6F:CE:74:20:DC:C4:8D:91:84:13:46:53:89:7B:46:EA:2E:F6
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer:       /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial:       0354
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number:          034E
Signing time:             Thu 21 Nov 2024 01:58:08 +0000
Manifest this update:     Thu 21 Nov 2024 01:58:07 +0000
Manifest next update:     Sat 23 Nov 2024 01:58:07 +0000
Files and hashes:         1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: UpDliwQrk7rsb4LqaljqMq5noIioNqgAExjR5wyCJXE=)
                          2: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
                          3: 262E806A2D1D11ED9D41FE8EF1222468.roa (hash: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=)
                          4: C59A0A6C2D1C11EDB02E0A8EF1222468.roa (hash: Y1g+dPExFN1MrB2P2z+NSyvwa7SBT+wcu+TZRMMx4+8=)
                          5: C08D1C382D1E11ED81F11D93F1222468.roa (hash: lVr4qDLggHX3PLabm1ZYWRZMbT4vO1C7CbkdD5snQVw=)
                          6: 2986AA742D1F11ED80553694F1222468.roa (hash: k/pZPcK4mbEaTzMdMQoO2iiJYX2nlpbZfqRbx3IuK68=)
                          7: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
        Validity
            Not Before: Nov 21 01:58:07 2024 GMT
            Not After : Nov 23 01:58:07 2024 GMT
        Subject: CN=673e93b0-a025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:9c:51:9f:6a:a7:af:cb:e8:ee:3e:8f:2f:
                    1c:78:46:f8:7b:b9:52:7d:c8:3b:5e:9f:c4:f8:db:
                    49:32:2d:72:4b:b5:d5:d1:d9:60:31:8f:7a:6f:b7:
                    7c:4f:70:78:5f:23:44:b5:f8:4d:c8:3b:94:c9:6c:
                    79:d3:0b:c2:57:4a:36:0a:7e:e4:f2:91:aa:d8:b4:
                    70:44:48:13:8c:61:ed:b5:41:5d:65:0a:ef:00:1f:
                    04:c2:c7:6d:5b:75:8e:94:8f:9b:0f:ab:c4:04:07:
                    b1:78:89:ff:75:ec:34:f2:b6:2a:a9:cd:37:d4:9a:
                    8a:ca:f7:8b:c8:02:52:43:8a:84:6b:37:d8:3c:1d:
                    b1:f4:a8:08:8c:9c:52:e9:ab:82:f7:e6:5c:a7:cd:
                    e8:1c:36:76:f3:5f:e3:ef:66:ca:ee:86:20:98:11:
                    ed:37:8c:88:45:34:96:20:a7:f4:92:24:47:9d:a6:
                    28:c6:82:86:a9:09:94:ba:24:39:3d:9e:38:dd:69:
                    e3:ab:29:6a:8b:79:cc:14:0b:56:31:a7:c4:f4:6f:
                    a9:c1:85:60:93:f1:e4:7c:c9:5d:a5:7a:c0:24:e2:
                    aa:c2:3c:43:54:fb:e4:e0:9c:c3:43:da:91:28:8f:
                    b0:dd:03:a0:3e:7b:93:47:17:6e:92:f1:26:b3:01:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C8:6F:CE:74:20:DC:C4:8D:91:84:13:46:53:89:7B:46:EA:2E:F6
            X509v3 Authority Key Identifier:
                keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:46:f2:90:d2:86:b2:02:ee:83:51:4b:fb:09:a7:c7:1f:02:
         06:08:13:26:15:29:74:52:02:16:4f:1a:fc:a5:9a:ce:f5:a9:
         1e:be:ac:4f:cd:de:2d:9a:b9:68:83:35:af:d2:cb:94:3a:34:
         dd:05:84:5f:f1:e5:73:52:17:ae:91:ac:95:2f:64:a4:6a:03:
         05:62:6c:69:01:9c:1f:82:e6:59:e8:e3:3b:a5:fc:1c:39:53:
         b5:72:e9:64:b4:24:71:40:40:ed:f7:4c:31:f0:c5:25:39:56:
         49:a8:51:37:a2:ab:61:2a:9a:ce:e2:55:4e:42:b9:5e:6d:42:
         1b:44:4a:4f:27:e3:c5:b5:99:bb:a5:a7:63:96:e3:be:5e:bf:
         52:0f:ca:d1:d9:26:95:69:8e:a4:1a:88:ad:0e:cf:81:e9:ff:
         c1:d4:ab:1c:f2:0a:21:c3:e4:5e:ac:e2:e3:57:37:10:c6:90:
         e0:a6:29:de:8e:d6:41:63:44:d8:2a:2b:0b:4a:89:1d:6e:2e:
         97:94:69:f9:e4:3c:6b:f1:71:c2:46:55:e7:45:81:45:f2:b3:
         c7:41:22:4f:1d:15:dd:c1:b1:44:24:75:be:2a:f5:95:de:01:
         25:4d:bf:ec:71:74:88:e7:ac:82:2f:f9:4a:17:14:9c:3f:7a:
         bb:2c:cf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:18 2024 by rpki-client on console-ams.rpki-client.org