Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
File:                     l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft (raw, json)
Hash identifier:          M/LXr/IeCYDSCL9eiGOIK3ad4++wGDAfXJEdprNLTSM=
Subject key identifier:   8F:D3:9E:BE:BB:41:95:F4:9D:AF:94:C1:58:6A:84:3D:BA:44:21:24
Authority key identifier: 97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63
Certificate issuer:       /CN=F36B1EE5AF/serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
Certificate serial:       7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
Manifest number:          7B
Signing time:             Fri 22 Nov 2024 02:50:34 +0000
Manifest this update:     Fri 22 Nov 2024 02:50:33 +0000
Manifest next update:     Sun 24 Nov 2024 02:50:33 +0000
Files and hashes:         1: l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl (hash: 3Ojxd3xjfb2hEnQnqJJH4tkW4xSTlPdkQlrmnRNmud0=)
                          2: 15FF8A604F2E11EFBF7DAA5D762E951A.roa (hash: Ji+PkrLYVd8mg+kmjzLysu+cTidIjguKCtckW26wTJg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1EE5AF/serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
        Validity
            Not Before: Nov 22 02:50:33 2024 GMT
            Not After : Nov 24 02:50:33 2024 GMT
        Subject: CN=673ff179-9dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:e4:b7:94:a1:0f:56:32:e4:1b:91:44:46:
                    46:5c:b7:5c:4d:db:4e:dc:1b:98:19:5b:7c:d0:0d:
                    11:2c:7c:f7:2b:a2:3a:c7:11:81:47:24:1d:f2:ce:
                    3b:be:fc:b5:b4:cd:a6:b7:94:18:40:d5:0b:bc:59:
                    ff:2d:68:ab:f3:3d:83:36:50:15:9f:78:95:a3:87:
                    b1:00:1d:c8:d7:89:64:72:8c:5a:b8:17:67:52:f3:
                    f5:d7:2a:c3:71:1f:40:2c:a0:69:b9:fd:6d:0b:21:
                    4b:fd:33:0c:76:8f:3b:17:53:c7:ce:d5:99:2f:37:
                    a5:ff:e5:bb:98:41:2e:95:8c:15:8d:a2:60:1d:2a:
                    3a:c3:1b:88:54:3d:32:10:45:d5:35:8f:a1:53:23:
                    dd:ae:1e:4b:ff:4e:f2:cb:22:f6:53:38:cf:bd:18:
                    74:24:b7:0e:f0:94:bc:2f:e2:6e:7b:3e:0f:ee:af:
                    34:2e:bc:8f:b7:ba:b2:22:65:27:f9:4a:88:0f:6e:
                    d5:75:8f:47:0c:63:70:59:e6:e9:e0:8f:74:68:58:
                    c9:1f:bf:9e:17:7e:23:5a:f7:7e:d9:b9:10:e5:dc:
                    4f:13:ac:80:a5:52:0f:b0:2b:20:94:72:dd:71:07:
                    ed:e1:12:c3:5b:8e:77:ad:e8:7c:3f:6c:ce:5a:32:
                    fe:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D3:9E:BE:BB:41:95:F4:9D:AF:94:C1:58:6A:84:3D:BA:44:21:24
            X509v3 Authority Key Identifier:
                keyid:97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b4:cb:64:22:8b:9a:74:3e:0e:3a:b6:ab:18:ab:27:b2:2e:
         51:b1:c4:5e:0e:74:7b:71:cd:69:ae:a1:ee:05:8f:ed:f5:50:
         92:b6:31:a4:7c:b9:56:e8:ca:3b:be:89:af:c6:59:28:2b:ae:
         1e:64:bf:7c:d9:28:b2:20:ca:2c:85:28:fc:0c:36:f6:7c:b1:
         6a:4d:21:89:51:08:5e:64:3c:19:0b:e6:51:3f:ee:7f:da:8b:
         6b:7a:d3:01:64:5b:bc:7f:57:7c:c6:e0:89:c0:f6:dd:4e:ad:
         b3:41:81:08:56:ce:eb:b0:26:df:ae:7b:26:77:09:7a:e9:73:
         9d:60:ba:5f:a3:3d:8f:b8:2e:a6:54:44:27:50:5a:95:34:98:
         09:9b:fb:d7:98:29:8a:ab:a3:db:be:7e:8e:2c:61:89:40:f2:
         45:f5:c6:40:cc:cb:7e:f8:05:86:21:73:bb:72:09:07:47:11:
         5b:68:40:c9:87:71:2a:39:93:eb:18:33:a7:0f:01:5d:b5:05:
         47:c1:ea:44:c1:b0:66:00:da:ba:3a:e4:08:06:ae:94:32:13:
         ac:c1:67:89:46:b0:5d:70:32:64:ea:10:35:64:ee:4f:01:97:
         28:a1:86:c0:6d:09:d6:19:18:6e:46:7d:3b:87:d0:93:f2:88:
         43:ed:e6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----