Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
File:                     mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft (raw, json)
Hash identifier:          v2tmxpAmpXZz3nQovyDIgyhS+xtRK1nend/neTNIHgQ=
Subject key identifier:   D3:58:00:2F:66:5D:97:80:FC:7F:7D:BB:45:D7:46:81:7A:0C:A5:75
Authority key identifier: 98:74:6F:FB:30:5C:23:33:43:30:8A:38:95:CB:70:82:66:18:FC:48
Certificate issuer:       /CN=F36B2802AF/serialNumber=98746FFB305C233343308A3895CB70826618FC48
Certificate serial:       074C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
Manifest number:          074C
Signing time:             Thu 21 Nov 2024 01:10:14 +0000
Manifest this update:     Thu 21 Nov 2024 01:10:13 +0000
Manifest next update:     Sat 23 Nov 2024 01:10:13 +0000
Files and hashes:         1: mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl (hash: 4m9C10b0SLAwVtqToU5jfpqaHUc1Ek5CSVUxT6z33rk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1868 (0x74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2802AF/serialNumber=98746FFB305C233343308A3895CB70826618FC48
        Validity
            Not Before: Nov 21 01:10:13 2024 GMT
            Not After : Nov 23 01:10:13 2024 GMT
        Subject: CN=673e8876-a0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:14:e0:7a:2a:22:f9:ff:ed:18:a9:93:af:a1:
                    8a:5e:86:32:01:4e:3f:28:91:35:70:40:c4:89:ee:
                    69:77:eb:bb:10:b7:97:5f:28:32:65:6f:71:f3:21:
                    52:3d:10:fa:54:77:2b:0e:35:7e:71:df:59:ef:30:
                    cd:06:8a:11:b3:e3:76:57:f0:a8:b5:3a:91:8d:d6:
                    3c:30:90:60:58:63:e0:e4:be:c0:b7:9c:ac:97:11:
                    12:4d:ee:0b:3c:a7:ce:1b:a1:21:40:00:aa:49:f3:
                    81:c0:e5:00:a7:6b:39:bc:80:d3:00:f9:cd:4e:22:
                    89:18:81:ec:e7:5c:cf:15:26:7e:1b:8c:94:3a:d2:
                    ad:2b:55:76:32:c0:1e:52:b4:ad:f5:18:20:5c:61:
                    02:c5:e5:37:06:c9:54:4c:f6:f3:57:dd:68:b1:11:
                    33:d5:70:0b:21:6f:3a:e6:b9:aa:45:89:d8:bf:da:
                    cf:37:d5:a6:8f:9a:51:16:58:f0:9a:d0:d7:bb:9e:
                    98:ae:14:e5:6c:ff:64:bd:62:75:36:5d:2d:65:a8:
                    d1:12:54:57:21:a2:2b:f0:65:31:d9:d9:49:b4:d2:
                    fe:63:43:bc:3a:2c:74:91:30:66:8e:f4:65:69:90:
                    d3:93:5c:8f:ab:3c:ed:a4:08:32:72:7f:ef:13:5a:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:58:00:2F:66:5D:97:80:FC:7F:7D:BB:45:D7:46:81:7A:0C:A5:75
            X509v3 Authority Key Identifier:
                keyid:98:74:6F:FB:30:5C:23:33:43:30:8A:38:95:CB:70:82:66:18:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mHRv-zBcIzNDMIo4lctwgmYY_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/871341FC0F8B11EA8FF19662F8AEA228/mHRv-zBcIzNDMIo4lctwgmYY_Eg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0a:61:88:b7:12:db:8e:c2:80:89:7a:03:68:87:26:0b:a6:
         2a:db:0f:75:f7:d1:43:3c:8f:9d:b6:cf:2b:b1:e4:66:1f:ea:
         a7:47:9b:e8:1c:d9:8f:da:4d:26:3a:8d:bb:0d:b1:a8:88:16:
         48:23:76:82:86:22:e8:4c:91:34:6b:43:ff:c3:83:88:d4:51:
         02:eb:a8:39:4c:18:40:65:93:0e:a8:4b:89:86:0c:c1:55:2c:
         82:c6:32:93:79:51:02:d2:c3:6b:da:f8:19:b8:b9:bc:bd:93:
         8c:6d:aa:12:a0:d0:e6:13:f9:d0:3f:b3:80:30:c1:c0:45:5e:
         d4:dc:c1:4c:6e:dc:51:96:a1:76:97:9d:fd:d6:1b:21:d1:f4:
         29:da:ca:a6:ea:ef:ca:83:53:fa:5a:ca:8d:97:17:22:5f:08:
         a3:c7:ea:5e:82:f3:5a:b4:d3:4a:dc:04:e8:7f:cf:a0:29:e0:
         a5:0f:83:d2:28:d8:ac:04:3e:75:55:1d:18:35:58:f5:dd:d9:
         62:30:5f:c9:da:f1:35:5c:d3:d3:f1:e8:60:fc:88:5f:ed:99:
         b2:e2:58:82:76:67:6f:1f:f5:07:2f:5d:43:51:7e:ec:c1:9d:
         f7:40:1b:6b:13:e5:ef:8c:b3:90:ef:fb:e8:92:a7:42:ea:1b:
         e5:18:d2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:39 2024 by rpki-client on console-fra.rpki-client.org