Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
File:                     U_eNgMrA6y6s13sBdd8xno91J5Y.mft (raw, json)
Hash identifier:          iZvOYHU0IYkJcJ2dRoPIe3ToBarbFy/9bu8/5v07G+U=
Subject key identifier:   ED:71:8A:63:DD:EB:83:C1:0D:CA:0E:B5:68:74:2E:DB:E9:8C:B8:67
Authority key identifier: 53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
Certificate issuer:       /CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Certificate serial:       0208
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
Manifest number:          01FA
Signing time:             Sun 24 Nov 2024 02:23:26 +0000
Manifest this update:     Sun 24 Nov 2024 02:23:26 +0000
Manifest next update:     Tue 26 Nov 2024 02:23:26 +0000
Files and hashes:         1: U_eNgMrA6y6s13sBdd8xno91J5Y.crl (hash: SaxLf6KeFkADeyM6sPrbgzLPMR8AvQL3LYKQKbQ/Ecs=)
                          2: A5829FB8FAFD11EEB4C6D20D017001B1.roa (hash: 1gu4Qu8rsgArGS1Y9Jq2u1pp9GqrVEYfqnEUTV3m1CI=)
                          3: 4281149CF7DF11EE80FF1021017001B1.roa (hash: cUFtSMR0TSwZ2UTIiyI0fv21ujQldFBY5Sypbj+4CnU=)
                          4: 60E7510AFAFD11EEB483D20C017001B1.roa (hash: M+guvwSynGfTHvTOyvTfqunoeJ7intrM84s+ebCzAj4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
                          rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
        Validity
            Not Before: Nov 24 02:23:26 2024 GMT
            Not After : Nov 26 02:23:26 2024 GMT
        Subject: CN=67428e1e-ad1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:81:cf:88:30:64:da:cd:a1:c2:30:b1:2f:
                    37:63:67:69:51:92:c7:37:3a:c8:65:62:46:73:0b:
                    0d:8a:59:84:f8:d9:7e:74:de:f9:c0:0e:02:d7:3d:
                    b4:59:fd:f0:64:7e:c0:0f:7f:79:67:e2:2d:4d:27:
                    ff:e3:c6:ec:30:cb:35:e4:47:df:46:11:82:b4:2f:
                    b9:6f:c3:83:3d:00:cb:74:92:0f:f3:63:78:b2:ce:
                    9c:7d:ce:cf:22:74:4d:36:14:45:e1:76:5c:48:57:
                    bf:c6:cf:45:05:e0:53:3e:84:2d:bb:b4:71:d5:25:
                    cc:62:d1:31:15:65:b1:3a:d1:92:c8:6d:ee:1c:4e:
                    9e:64:a2:a0:a0:be:6d:ca:e4:5d:f5:aa:79:12:51:
                    84:0f:c9:cb:27:71:f9:2c:4f:aa:81:e0:db:4a:c6:
                    d8:07:e5:80:9c:64:f6:4b:c9:e4:5d:d1:37:b2:f3:
                    02:3d:54:eb:c2:95:18:96:e2:2b:2b:26:f8:99:27:
                    84:c4:d3:dc:21:7d:e2:d7:61:2e:3e:ab:ff:cb:6e:
                    0c:a9:87:54:99:0a:84:6e:9f:99:8e:e7:1f:03:75:
                    5c:96:79:e7:a5:ca:78:14:08:84:2e:82:95:45:f1:
                    fe:12:b2:9f:c8:e4:7b:9b:22:ab:2b:83:f4:ac:7f:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:71:8A:63:DD:EB:83:C1:0D:CA:0E:B5:68:74:2E:DB:E9:8C:B8:67
            X509v3 Authority Key Identifier:
                keyid:53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:41:54:3e:ad:2a:b7:4d:fb:fa:86:54:c5:d6:6f:26:5d:4e:
         23:db:ec:5c:2b:d4:47:02:8c:a4:c1:37:85:dd:9a:e1:da:d6:
         cd:42:33:3b:10:35:ae:5c:2e:99:d9:53:b6:25:13:de:50:d8:
         5b:b1:a6:36:0b:15:23:c8:b1:6b:1f:24:34:76:ce:eb:f5:03:
         29:f6:b7:e0:2a:c2:75:48:59:10:03:64:3a:a8:ea:b8:d5:b2:
         2f:2a:ff:37:5a:73:ad:0c:d0:6f:d5:cc:88:05:5a:ad:7b:11:
         d6:3a:8e:ba:68:73:aa:e5:6c:ca:6a:51:15:1d:39:16:f5:a3:
         30:18:bb:e7:95:31:43:c0:cc:de:67:3c:ea:4a:df:a4:ed:1e:
         15:36:34:3d:ee:45:8f:c6:1f:a0:ac:df:24:0e:a7:f5:1d:92:
         fe:7b:03:8d:ed:ac:bf:58:4d:43:85:79:45:7b:f8:95:58:20:
         bc:5e:c9:bb:4d:8c:6d:6d:6b:7c:a5:5f:4d:e7:fe:5f:6b:21:
         b3:e6:d8:ef:e7:9b:d1:0e:68:2a:38:98:aa:a2:a1:af:69:82:
         ce:39:bf:1f:37:04:e1:70:47:97:89:d8:c7:98:85:ab:5e:a3:
         ef:d7:c2:b7:4d:5e:00:78:63:70:96:6a:0d:8d:2e:d5:c5:e8:
         f9:f1:d8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:39 2024 by rpki-client on console-fra.rpki-client.org