Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File:                     hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier:          BksFndp78ZuuRwXaliKWNmmddAWZIsRtsCvwdM5ciNo=
Subject key identifier:   3E:3E:E3:E6:E7:E8:65:6C:B0:EC:98:69:34:FD:76:0C:D9:BB:A5:3F
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer:       /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial:       0286
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number:          0282
Signing time:             Tue 07 May 2024 01:55:24 +0000
Manifest this update:     Tue 07 May 2024 01:55:23 +0000
Manifest next update:     Thu 09 May 2024 01:55:23 +0000
Files and hashes:         1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: uL434VrqnxkDsk9jx4nRJIiB3/1Ys01Rrg4wwBGdyDg=)
                          2: 262E806A2D1D11ED9D41FE8EF1222468.roa (hash: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=)
                          3: C59A0A6C2D1C11EDB02E0A8EF1222468.roa (hash: Y1g+dPExFN1MrB2P2z+NSyvwa7SBT+wcu+TZRMMx4+8=)
                          4: C08D1C382D1E11ED81F11D93F1222468.roa (hash: lVr4qDLggHX3PLabm1ZYWRZMbT4vO1C7CbkdD5snQVw=)
                          5: 2986AA742D1F11ED80553694F1222468.roa (hash: k/pZPcK4mbEaTzMdMQoO2iiJYX2nlpbZfqRbx3IuK68=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
        Validity
            Not Before: May  7 01:55:23 2024 GMT
            Not After : May  9 01:55:23 2024 GMT
        Subject: CN=66398a0b-504d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:73:51:a5:ed:1a:95:24:b1:f4:31:10:d7:
                    10:55:ea:2c:7f:93:73:83:b3:0d:5b:e8:a0:8b:ab:
                    29:bd:3c:9d:dc:dc:58:15:28:50:2a:4e:4f:ca:de:
                    5e:66:f4:e7:71:58:ac:21:95:7f:bb:f0:3d:ca:1f:
                    1b:9d:18:2a:c8:9f:06:74:1b:12:af:d1:09:82:b5:
                    54:61:68:b6:46:2b:d5:52:92:b1:87:65:3a:dc:54:
                    42:89:59:02:1c:c7:86:12:d9:8f:4c:9d:fa:4d:ef:
                    cf:6a:86:23:ed:d5:ff:16:96:32:6b:14:c3:4a:dd:
                    49:bc:51:09:fa:20:d6:c7:d8:bd:64:a9:59:0c:14:
                    57:33:79:36:bd:31:a0:cd:2c:e6:27:e0:6c:0b:e9:
                    df:14:ce:83:04:0a:c9:b3:0e:cd:c9:67:9c:03:c7:
                    39:17:85:29:87:19:78:75:f0:ba:d3:b8:e6:46:e5:
                    8b:ca:bc:a9:7c:59:fe:2f:44:bc:fa:37:24:6f:c3:
                    a8:a8:66:4d:2d:3b:56:a3:6c:35:9c:76:4c:35:25:
                    42:a1:29:2b:e7:43:1d:34:1f:87:fe:4b:63:70:f6:
                    7e:03:8c:83:75:60:52:11:1d:f5:3f:01:8c:4e:85:
                    5c:a1:82:ce:e3:de:14:dc:3f:cf:b5:98:c5:b0:8b:
                    08:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3E:E3:E6:E7:E8:65:6C:B0:EC:98:69:34:FD:76:0C:D9:BB:A5:3F
            X509v3 Authority Key Identifier:
                keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:88:72:57:0f:f4:8d:eb:15:86:72:3f:80:ac:e5:b4:4b:d7:
         95:89:9f:2f:00:48:97:05:fc:15:43:02:71:da:d3:79:c1:71:
         50:33:31:5f:99:a6:f6:98:9b:76:03:db:76:f4:f6:98:ea:d5:
         ec:4f:b3:8e:c8:bf:4c:73:4d:8e:af:d4:c2:7f:fe:23:04:16:
         33:db:63:ca:4e:71:61:01:61:a2:2a:e0:8f:3a:af:1c:18:1f:
         35:df:89:8e:5b:41:a6:54:93:4f:d7:87:59:3e:8c:74:ac:86:
         aa:3f:75:13:17:f3:ba:06:09:18:ad:b7:0e:c7:a6:33:a8:13:
         ce:77:91:61:ea:57:60:47:43:d3:5f:8c:f5:89:03:c3:2e:e2:
         94:83:36:b7:3c:72:0f:fc:71:11:27:3e:28:0a:ff:b5:cb:f8:
         36:32:e7:b5:dc:af:ff:38:a6:7f:af:7b:bc:35:ef:73:f8:99:
         b0:dd:b2:05:41:c2:d7:6c:a3:f6:73:5e:d3:04:eb:bb:41:4c:
         72:a3:e5:97:89:51:c0:1b:d6:4e:b2:03:e5:5b:12:f8:81:41:
         d8:7b:bc:c4:0d:2d:0c:4a:1c:9a:70:63:d2:35:b2:b6:0a:de:
         33:75:b1:6f:3c:5e:95:2d:0a:d2:f6:b4:4e:8b:a6:e6:8d:50:
         90:3c:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:12 2024 by rpki-client on console-fra.rpki-client.org