Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          2Z+FWziet3VyQGcRbQRU1xy1TWujOYJSL074AW6VwrI=
Subject key identifier:   87:0E:3A:12:69:76:33:CC:60:F7:29:22:F2:35:E7:6E:16:47:D5:59
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       0541
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          053C
Signing time:             Sun 19 May 2024 01:15:55 +0000
Manifest this update:     Sun 19 May 2024 01:15:55 +0000
Manifest next update:     Tue 21 May 2024 01:15:55 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: bjkxOtVLiVxFIRELtyrqEc27VJWP4HmpoW3ZylBgSfM=)
                          2: 9EF8FBBA1BFB11EE8D767F5E4AD9E6FC.roa (hash: ic/Fv7vDPLdwq215X1uSW0oAemEyGKLMsbDQyRvHOkE=)
                          3: 8C5A2D9EA56811ED8D8B78EDF1222468.roa (hash: XrnwQycPKUqBh3tyU/CIOjBuLRqllBrRE2AbPedyk5E=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345 (0x541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: May 19 01:15:55 2024 GMT
            Not After : May 21 01:15:55 2024 GMT
        Subject: CN=664952cb-3007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:fb:9e:31:8f:42:40:84:8e:95:79:fa:5b:
                    30:05:60:aa:05:5a:c4:25:0f:d3:af:48:b7:37:7e:
                    96:58:6c:cf:ad:29:15:bd:db:35:f1:65:20:48:dc:
                    cc:e0:db:67:5d:23:ce:03:c8:c7:8c:75:8b:4c:85:
                    3a:9b:2c:b1:62:04:f8:54:73:42:60:01:35:b9:c3:
                    b6:c5:73:2d:c6:7e:82:1c:6a:66:10:a2:82:d8:a6:
                    63:f6:75:05:96:c7:b0:8a:5f:10:a3:53:e6:a8:d2:
                    19:54:5e:14:2a:8e:62:44:75:61:7e:ea:9d:61:1d:
                    a4:fc:c9:29:ea:2a:3f:15:d5:68:79:ad:de:99:f7:
                    d4:9f:31:58:f2:ae:4f:bb:06:b9:e8:66:00:e0:76:
                    b8:71:5a:8f:d6:8b:c0:a0:04:2d:c6:48:c3:90:8e:
                    0a:56:c4:9f:de:b3:88:4e:4e:3b:ab:71:04:3d:a8:
                    7c:91:d8:a4:31:b2:c1:cf:39:a7:7f:b5:d7:00:88:
                    cb:86:25:a4:c9:94:80:c7:94:86:66:15:f5:4a:35:
                    bb:d7:ce:43:85:05:e8:49:76:35:8c:7b:8a:68:8e:
                    c3:cc:a9:b2:b8:3c:24:9d:c2:92:aa:fb:f3:ba:42:
                    bc:a0:81:84:7c:60:9b:bb:f4:7b:e8:d5:cd:f8:c1:
                    73:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0E:3A:12:69:76:33:CC:60:F7:29:22:F2:35:E7:6E:16:47:D5:59
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5b:d4:02:51:e9:f6:d8:7b:34:7f:a9:3e:62:cf:a5:d8:2f:
         5a:54:4a:57:6d:74:4f:12:07:24:78:2b:91:49:e7:aa:40:09:
         fe:2c:50:65:32:2e:a9:57:75:cb:9d:8a:c6:e3:7f:94:b2:ea:
         99:20:79:9a:a6:70:8c:bc:05:b1:40:fb:e4:94:7b:b5:a2:b1:
         c7:c8:d9:c7:f6:75:cf:a0:7c:fd:96:77:fa:4e:14:1d:f4:4d:
         7e:d8:8c:fc:26:9d:a0:85:2e:ba:94:df:af:f4:47:1e:fc:ed:
         21:28:a2:dd:55:1f:e2:fb:f1:23:9d:6e:ff:a0:d2:d0:5b:e5:
         22:f3:9b:80:7e:3c:cd:8b:42:a2:5b:81:b1:09:30:c7:7b:c8:
         e5:92:c4:4c:08:8c:31:a1:e9:29:7c:35:46:fd:89:f0:b9:65:
         07:aa:1e:d3:0f:46:88:70:cc:c5:97:7f:5a:24:36:61:97:ae:
         cd:ac:2c:ed:e4:b7:9e:cc:92:a7:4c:38:f1:49:b9:22:da:fe:
         d7:84:81:f8:68:23:67:e0:f2:de:28:fb:f1:89:16:0f:28:6c:
         31:45:c4:03:55:42:87:b6:0c:af:59:a9:d4:88:fa:f4:89:87:
         07:a8:a5:b6:18:16:a1:58:cf:44:b4:3b:b0:92:7b:d7:0a:51:
         1d:7d:b3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:59 2024 by rpki-client on console-ams.rpki-client.org