Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
File:                     41870XBX5RmmOBSWl-AwgOrYdys.mft (raw, json)
Hash identifier:          7W/Vsgu+eu8wl24BmM013pd7Jh1Xp9vDinTY9VQPwIU=
Subject key identifier:   24:2D:BF:51:13:BF:85:9A:34:5B:BD:FC:32:97:FA:C2:B8:64:00:3C
Authority key identifier: E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
Certificate issuer:       /CN=F36ABB63AF/serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
Certificate serial:       0CF0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
Manifest number:          0CEE
Signing time:             Fri 03 May 2024 00:36:00 +0000
Manifest this update:     Fri 03 May 2024 00:36:00 +0000
Manifest next update:     Sun 05 May 2024 00:36:00 +0000
Files and hashes:         1: 41870XBX5RmmOBSWl-AwgOrYdys.crl (hash: 19LH3TqrBl85/LQ8d85KLrhqS1xdSopsi//IgMM3Wh8=)
                          2: 752DB50C461511E99A25B144F8AEA228.roa (hash: k0Rhsuh/b99q9kDn1FoP+OO8bsw50UMZoPySxuOGhI8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3312 (0xcf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ABB63AF/serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
        Validity
            Not Before: May  3 00:36:00 2024 GMT
            Not After : May  5 00:36:00 2024 GMT
        Subject: CN=66343170-c108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:3f:83:a0:3c:d3:08:9b:e9:63:ab:da:a8:
                    c9:7a:a8:14:c8:12:1f:d7:78:03:14:e6:4d:32:5a:
                    e2:12:5c:42:c8:0d:9c:47:b2:1c:2e:64:9a:b7:49:
                    c3:62:35:d8:a4:77:49:3d:28:cf:d3:99:63:b0:f3:
                    04:07:59:21:02:f7:84:28:36:f6:2c:f1:bb:bb:37:
                    22:bf:1f:24:51:a5:62:4c:81:a6:f7:30:4a:8e:f0:
                    f1:4f:ca:a8:e3:8e:76:d0:00:06:6c:a3:2c:b6:56:
                    90:c4:9c:ef:9d:7b:a8:bf:62:a4:bd:94:8e:ae:01:
                    ac:5a:63:95:c9:92:b4:bb:4e:61:4d:7a:25:91:5a:
                    e3:8c:5d:bd:7c:f9:54:57:2c:a9:55:b2:f3:c0:48:
                    c1:0c:bd:e3:88:89:07:c1:ae:20:d4:05:7e:49:9a:
                    88:8b:b2:28:1d:40:41:ec:96:ff:32:59:a6:f6:ea:
                    8f:84:7f:4b:e3:e0:45:d1:da:42:38:48:83:d5:b2:
                    e3:63:08:5f:0f:0a:30:45:15:00:dc:53:af:b7:23:
                    b2:28:69:3a:ae:cb:3d:de:7f:35:51:02:65:9d:41:
                    fa:bd:74:82:c5:fe:71:bd:db:0c:e8:ca:7a:47:ae:
                    3a:fc:fe:2f:03:51:10:77:0c:d6:fb:03:83:92:a0:
                    81:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2D:BF:51:13:BF:85:9A:34:5B:BD:FC:32:97:FA:C2:B8:64:00:3C
            X509v3 Authority Key Identifier:
                keyid:E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:24:dd:08:42:c6:d6:3e:84:2b:df:3f:16:0d:ac:68:5e:ff:
         ea:aa:27:2f:f9:0b:ea:96:c3:54:f4:2e:ee:87:a6:74:21:b9:
         e2:b9:58:9a:8e:2c:bf:96:da:69:34:bd:cb:c6:d4:e4:1a:80:
         cf:7a:7a:18:02:a8:9d:04:43:c4:a6:fd:71:4d:24:ed:3b:9f:
         64:47:9b:df:62:1e:f5:4e:0a:fd:d5:0c:80:f7:b7:b7:46:c7:
         c2:98:80:7e:17:71:19:cb:a4:a3:81:e7:12:3b:86:4f:2c:79:
         1e:22:01:ff:89:0a:5a:35:0c:df:3f:0d:36:6e:12:28:6e:72:
         ae:b6:7e:b6:d9:9d:ac:34:b9:90:c9:12:db:75:21:d8:a9:36:
         18:98:6a:62:0a:de:77:72:fb:cc:2a:a9:03:81:92:9b:ae:0d:
         e8:db:45:02:15:48:77:6f:bd:8b:a4:a2:e3:98:3d:4f:7e:57:
         cd:cc:31:7e:3a:d5:9e:37:f3:8c:4e:c2:6b:82:82:e1:01:13:
         f3:d8:8f:5e:01:f8:22:c6:81:d9:e9:cb:08:0e:16:41:36:9a:
         f6:4c:0a:e9:da:a2:b4:af:51:17:7f:32:e1:bf:88:a7:93:8e:
         ed:82:79:2e:78:f3:fa:e7:9b:e7:6d:92:b2:d5:0e:d7:c3:9c:
         07:4d:0f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:40 2024 by rpki-client on console-ams.rpki-client.org