Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
File:                     vbHIMkQqFwa_d_xOxDcYGbo_waY.mft (raw, json)
Hash identifier:          Px4rKjPRJlG6cDAlsibyH7YgCV5XZu7AiRUDyQDlNLg=
Subject key identifier:   D4:3E:15:F8:B9:FF:BA:89:63:78:F4:26:47:12:65:A6:FA:41:18:AE
Authority key identifier: BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6
Certificate issuer:       /CN=F36A8AA3AF/serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
Certificate serial:       A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
Manifest number:          A0
Signing time:             Sun 19 May 2024 02:28:06 +0000
Manifest this update:     Sun 19 May 2024 02:28:05 +0000
Manifest next update:     Tue 21 May 2024 02:28:05 +0000
Files and hashes:         1: vbHIMkQqFwa_d_xOxDcYGbo_waY.crl (hash: Sjq7gyMJc00V87h5f/NaHREycIm4Z4aA/iplghXWl68=)
                          2: E2C1EE3A9E5311EEAAC0551CD25BE465.roa (hash: a/6txB+MVfLWSEULkMJVclmn38cp7SIU8WSE2UEIKek=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A8AA3AF/serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
        Validity
            Not Before: May 19 02:28:05 2024 GMT
            Not After : May 21 02:28:05 2024 GMT
        Subject: CN=664963b6-6953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:cc:a5:04:48:66:fd:ff:8f:af:67:8e:58:
                    90:e2:81:6f:7a:b3:b8:2e:50:a8:c2:4d:3d:24:24:
                    26:f8:54:cc:66:e4:13:3f:41:fa:c4:21:bf:02:88:
                    41:7e:dc:91:e2:68:41:02:38:f6:8e:f4:cf:af:ba:
                    b6:b4:f5:02:12:cf:9b:6e:41:75:fd:27:a1:3e:33:
                    64:99:8a:2c:b9:e6:39:36:52:ba:8b:37:9b:12:15:
                    e6:3f:fb:f3:f5:01:94:81:07:92:be:ad:88:c4:5f:
                    36:9e:60:85:b1:4c:ea:cb:d6:7e:c8:19:df:0a:f1:
                    e0:95:ed:fb:e0:cc:0d:ce:bc:7f:73:a0:dc:78:13:
                    48:0e:b0:af:2e:9e:6c:d8:c2:c0:89:78:e1:3b:6f:
                    9f:4b:9b:f2:6f:21:6e:9c:82:c5:e8:09:83:d4:11:
                    7d:e5:e8:d1:22:04:4f:f0:04:a6:7f:82:03:a7:fa:
                    a5:60:79:30:47:2d:9c:22:35:95:1a:17:26:ff:ac:
                    61:84:1c:c1:c2:c7:34:cd:5e:43:4b:d8:00:3a:40:
                    28:a3:8a:d3:49:38:45:03:9a:8a:b9:9f:b7:4c:ec:
                    36:f6:8a:bc:f2:3f:70:58:9e:7d:66:6d:04:31:d1:
                    a9:2a:2e:3f:41:26:34:67:59:ca:00:96:0d:3d:15:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3E:15:F8:B9:FF:BA:89:63:78:F4:26:47:12:65:A6:FA:41:18:AE
            X509v3 Authority Key Identifier:
                keyid:BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:82:1a:68:18:3f:5f:12:53:ed:7d:91:d3:b1:92:1d:53:80:
         c5:4a:73:25:df:91:c0:8e:f6:00:63:e4:4a:8f:a0:cf:6a:3a:
         e4:ac:88:5a:42:ec:1a:fe:a4:ac:8d:2c:d1:ff:a9:c3:5c:13:
         3d:02:de:f9:39:3e:ab:f8:9b:de:ce:99:a5:95:4d:52:22:7f:
         3b:5c:21:29:25:57:2d:b0:dd:10:df:d2:57:b3:9f:30:04:e2:
         53:b4:b6:48:e6:18:a8:b4:a0:42:2a:d2:34:2f:28:d7:95:d4:
         6f:6d:c6:71:db:cf:8f:90:76:49:46:36:b5:82:cf:17:3e:40:
         21:81:de:4c:9e:80:33:77:48:29:97:9d:d9:0c:1d:95:a8:fd:
         f5:fa:9d:00:68:e6:43:98:6b:8c:a7:3d:b9:df:96:22:6c:12:
         a9:4f:e2:4a:e4:df:de:d4:89:96:08:13:47:1f:53:98:54:5e:
         ff:cc:69:66:d5:2d:12:69:bc:7a:83:13:c2:00:de:7a:68:3f:
         18:2b:03:fa:67:da:07:bb:7d:3b:1e:6a:58:31:52:8c:26:ec:
         0f:8f:2d:bd:97:2b:c3:8c:57:a6:f1:e2:7a:f9:b2:13:8f:76:
         ab:4f:4b:42:e2:80:96:38:9b:39:8d:e9:41:ac:38:78:de:f4:
         c7:11:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:47 2024 by rpki-client on console-fra.rpki-client.org