Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
File:                     GsSe57FYhufc3nkyHoJCyZMkg8k.mft (raw, json)
Hash identifier:          jgz63ZDdIvUOJwJ+3boGpknEdgeQybQtEzxNENRxB9U=
Subject key identifier:   CB:9D:8D:A2:7A:AA:7D:C6:4C:5E:E3:7B:9B:A7:FD:F4:70:39:0B:BD
Authority key identifier: 1A:C4:9E:E7:B1:58:86:E7:DC:DE:79:32:1E:82:42:C9:93:24:83:C9
Certificate issuer:       /CN=F36A7FC6AF/serialNumber=1AC49EE7B15886E7DCDE79321E8242C9932483C9
Certificate serial:       0245
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GsSe57FYhufc3nkyHoJCyZMkg8k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
Manifest number:          0244
Signing time:             Thu 21 Nov 2024 02:14:57 +0000
Manifest this update:     Thu 21 Nov 2024 02:14:57 +0000
Manifest next update:     Sat 23 Nov 2024 02:14:57 +0000
Files and hashes:         1: GsSe57FYhufc3nkyHoJCyZMkg8k.crl (hash: Vn4XzoKS4rEwipLzHeBHqMRe9k4tiXTo4xRW7QYtDAo=)
                          2: BF20A39AEE3B11EDAF5A30714AD9E6FC.roa (hash: mI0iIhL2HBeib+WYLErZMM/gUVIPLMDd1pR4CFqFMDw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GsSe57FYhufc3nkyHoJCyZMkg8k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A7FC6AF/serialNumber=1AC49EE7B15886E7DCDE79321E8242C9932483C9
        Validity
            Not Before: Nov 21 02:14:57 2024 GMT
            Not After : Nov 23 02:14:57 2024 GMT
        Subject: CN=673e97a1-8b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:57:d1:25:35:1b:d6:71:d6:45:83:34:db:
                    79:82:bc:23:ec:eb:9e:2e:89:94:c1:f4:7c:a4:3d:
                    62:46:51:46:31:14:55:df:8e:99:41:f0:1b:43:df:
                    07:99:7a:2f:46:d2:34:53:01:2a:27:03:e6:06:d1:
                    3a:f1:82:11:3a:dd:9d:6b:7f:45:0e:61:56:97:22:
                    80:fd:56:98:4a:fe:d2:fa:57:ad:bb:ae:66:de:ce:
                    14:8e:c4:42:1c:79:8f:73:bf:ff:3a:2b:83:a5:9c:
                    b6:6f:91:a5:a3:c9:ad:ef:66:ee:77:b2:ee:3d:5f:
                    62:57:03:d0:0c:8a:e4:75:f7:35:e0:0c:76:f5:2b:
                    00:bc:08:41:58:23:47:2a:5c:0e:9d:1b:2a:a8:e0:
                    e0:a3:94:82:ab:10:06:f4:5a:95:85:eb:ba:b7:c9:
                    43:42:31:9a:cf:d7:d2:96:20:8e:c0:6d:3b:40:d6:
                    a8:5d:28:33:3d:34:96:2b:03:95:c2:17:92:d8:8d:
                    df:dc:1a:8e:89:6e:99:1a:53:1b:8f:9a:be:40:46:
                    76:a9:93:34:0a:46:05:3d:25:c5:b2:05:31:41:6f:
                    a1:a6:51:f2:01:40:07:08:d0:26:1e:b1:74:b0:33:
                    12:f7:82:22:d5:70:ef:fb:74:9d:4e:ce:2c:e8:68:
                    7d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9D:8D:A2:7A:AA:7D:C6:4C:5E:E3:7B:9B:A7:FD:F4:70:39:0B:BD
            X509v3 Authority Key Identifier:
                keyid:1A:C4:9E:E7:B1:58:86:E7:DC:DE:79:32:1E:82:42:C9:93:24:83:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GsSe57FYhufc3nkyHoJCyZMkg8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:2e:13:69:9e:c5:ce:93:77:41:d3:16:6e:52:ad:6d:9f:
         be:21:3a:99:02:56:17:7b:36:c7:11:04:b1:24:47:d2:67:43:
         e5:d8:69:ae:4d:77:84:00:ce:38:1f:39:a4:5f:18:d5:fc:3a:
         32:94:dd:df:8a:b3:2f:8c:db:ea:7f:77:92:33:d9:c2:cb:d0:
         cd:de:1d:b6:ba:67:b8:d0:f7:80:00:ef:ef:53:9b:f7:02:62:
         c9:f5:69:c7:72:ed:7c:bd:40:99:93:d3:97:70:f7:69:d7:ff:
         18:f4:10:37:a3:61:6b:52:11:2f:e5:2f:eb:59:7e:97:d8:95:
         a7:f5:4d:30:7e:9f:2f:76:2f:9a:23:43:66:b7:3a:11:13:40:
         70:9f:b3:1f:30:1f:e4:ef:db:09:87:9b:22:c5:15:6e:63:fb:
         66:a6:c3:93:43:7f:de:4f:8e:2a:eb:47:e8:ce:c2:26:76:9c:
         01:fc:8e:f5:2b:86:97:23:46:72:92:aa:c9:72:da:da:f4:db:
         1b:a5:d2:99:30:e3:ca:e4:14:dd:09:b0:7e:ea:e7:63:00:56:
         d1:f8:65:30:38:2e:84:c4:dd:d9:3c:56:72:60:cf:9b:78:2d:
         1d:21:2d:72:7d:61:77:22:9b:b9:6b:2b:1a:94:50:db:8e:26:
         70:1c:7b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:18 2024 by rpki-client on console-ams.rpki-client.org