Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          OmRbuzc2XAqofiqCuYFegKxP34YhMqZI3Ojtq/ocnL8=
Subject key identifier:   72:C4:79:BB:34:C7:21:6B:CB:E9:F5:EE:EA:70:5B:3E:E2:A4:8C:7C
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       05FF
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          05FA
Signing time:             Fri 22 Nov 2024 01:20:24 +0000
Manifest this update:     Fri 22 Nov 2024 01:20:24 +0000
Manifest next update:     Sun 24 Nov 2024 01:20:24 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: Fql0FyMSEQPs4jhjvTG+Jp0YD1er5IWW4rM6Ep4XioM=)
                          2: 9EF8FBBA1BFB11EE8D767F5E4AD9E6FC.roa (hash: ic/Fv7vDPLdwq215X1uSW0oAemEyGKLMsbDQyRvHOkE=)
                          3: 8C5A2D9EA56811ED8D8B78EDF1222468.roa (hash: XrnwQycPKUqBh3tyU/CIOjBuLRqllBrRE2AbPedyk5E=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: Nov 22 01:20:24 2024 GMT
            Not After : Nov 24 01:20:24 2024 GMT
        Subject: CN=673fdc58-82e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:de:4a:c8:cc:45:32:d3:b2:08:5c:aa:c4:4b:
                    95:dd:c1:cf:6e:7d:93:a0:3a:56:75:aa:84:37:82:
                    47:11:1a:72:e6:5c:ac:df:fd:4b:76:d7:ca:dd:4b:
                    0d:e9:46:86:87:3e:df:0d:7a:e7:fe:29:82:1a:b0:
                    15:08:30:05:9c:b3:cd:85:e2:df:bd:56:3e:ca:9b:
                    bd:a8:b8:8a:d2:6b:7f:6a:0f:e9:4c:2c:9e:6b:26:
                    4b:73:76:ee:e6:bc:eb:d0:d0:a1:39:ea:64:42:60:
                    b2:23:e3:3c:82:32:91:84:d5:42:4e:46:9c:f4:a8:
                    68:00:19:99:72:7d:5f:b7:20:66:3c:0b:f6:23:e4:
                    5b:22:8c:91:91:49:fa:65:c5:08:08:c8:de:4a:c8:
                    8a:ab:50:d8:03:fd:8d:c2:5a:51:3f:b6:8c:a4:0f:
                    45:d2:6d:50:6f:e7:3b:73:fd:6b:f5:b9:2b:1e:93:
                    d7:d0:ce:7e:d5:11:24:a8:ee:fe:a3:58:e1:58:00:
                    d0:ca:44:d2:b9:6b:23:75:eb:cb:12:92:7d:50:f6:
                    81:d3:60:e2:b8:ad:23:ff:89:7c:51:f4:20:ca:07:
                    93:a9:3c:48:a6:5f:2d:8a:c3:d6:ab:de:5b:95:3a:
                    a0:73:43:0c:b5:97:87:2f:cb:56:b6:99:9e:bf:c3:
                    f4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C4:79:BB:34:C7:21:6B:CB:E9:F5:EE:EA:70:5B:3E:E2:A4:8C:7C
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:f8:d0:24:a2:30:cb:14:47:8c:60:6a:2c:98:41:cc:a4:79:
         0e:eb:0e:d1:db:5b:0d:7a:12:9f:4a:64:60:7e:f2:83:98:ff:
         4e:b9:61:f0:38:26:b4:f8:4d:65:8e:62:d9:d1:45:bc:01:db:
         3c:c5:86:f2:0f:ff:d9:14:4d:6d:ff:df:42:02:07:10:2d:9c:
         e7:3c:a3:8f:45:27:92:d3:be:81:c8:3a:58:19:d7:90:10:d6:
         17:4e:d4:a2:74:ee:5c:be:22:db:72:a2:7d:9d:1d:0e:12:e4:
         aa:ab:ce:c4:ea:b4:0b:6b:e8:2c:b5:59:d1:7d:bb:27:b7:70:
         00:22:03:a3:a8:62:2c:16:93:c3:3e:1c:c1:17:47:9e:64:a4:
         86:ff:9d:92:39:56:4d:2f:d5:ea:65:db:7a:47:fd:c5:22:7d:
         ef:1c:c5:10:c8:bc:b2:aa:16:70:cb:5c:c8:f4:74:df:e6:26:
         1f:d2:ae:14:95:c2:35:50:e1:5c:4a:46:96:8d:8a:bd:ed:c4:
         af:0a:34:24:f9:4c:f1:87:18:ec:92:22:1d:40:12:28:b8:d4:
         25:67:c9:52:70:79:f1:a1:ec:e6:a3:ad:02:18:cf:5d:66:79:
         a1:b5:73:38:ea:78:c6:9b:35:7c:05:73:d0:ef:89:d9:ce:b5:
         cb:3a:ec:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org