Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
File:                     E3S5w_RfdBg91PcrFhAlKt-xJiA.mft (raw, json)
Hash identifier:          Cx6aG2Z9KhxriTtQRlWpyUuHIS3HmB3lKOc3fvG1+N8=
Subject key identifier:   C5:17:BF:04:82:82:7B:FE:C7:93:CA:E8:9E:2F:80:E5:D0:0E:5D:17
Authority key identifier: 13:74:B9:C3:F4:5F:74:18:3D:D4:F7:2B:16:10:25:2A:DF:B1:26:20
Certificate issuer:       /CN=F36B2802AR/serialNumber=1374B9C3F45F74183DD4F72B1610252ADFB12620
Certificate serial:       0696
Authority info access:    rsync://rpki.afrinic.net/repository/arin/E3S5w_RfdBg91PcrFhAlKt-xJiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
Manifest number:          0695
Signing time:             Sat 25 May 2024 01:06:37 +0000
Manifest this update:     Sat 25 May 2024 01:06:36 +0000
Manifest next update:     Mon 27 May 2024 01:06:36 +0000
Files and hashes:         1: E3S5w_RfdBg91PcrFhAlKt-xJiA.crl (hash: 8hkrpvYJVhBtqm0Z1098YYFsg1sgTczkaGK8+NtDWqI=)
                          2: 0339DB7E0F8C11EAB91E1463F8AEA228.roa (hash: VEE0Ckp6I2VcUJ5B3ZZaJwDqeoS1pgqeABgMWtZnTH8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
                          rsync://rpki.afrinic.net/repository/arin/E3S5w_RfdBg91PcrFhAlKt-xJiA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 27 May 2024 00:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1686 (0x696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2802AR/serialNumber=1374B9C3F45F74183DD4F72B1610252ADFB12620
        Validity
            Not Before: May 25 01:06:36 2024 GMT
            Not After : May 27 01:06:36 2024 GMT
        Subject: CN=6651399d-7eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:dd:a5:07:84:a0:89:a6:42:ca:1d:4c:e6:
                    2b:00:55:d5:b0:b8:be:d6:b8:73:8c:1e:ce:f2:4d:
                    45:c3:57:61:4a:e8:84:cd:3e:b7:88:15:74:0a:a7:
                    f0:62:dc:fc:99:92:54:09:a8:15:1e:0f:44:08:64:
                    f7:47:13:76:1b:0b:09:f9:6b:05:29:38:70:0a:a0:
                    95:ac:57:59:52:b8:29:52:cf:34:c0:44:34:e3:68:
                    a7:a7:f3:f1:4a:04:de:2f:ed:f4:ee:92:c8:80:ab:
                    38:26:cd:da:90:05:c3:01:f3:2e:7a:e8:2e:7f:a4:
                    87:e6:89:4c:85:c7:ca:ec:f4:4a:c7:72:e3:3c:01:
                    95:8a:f9:3a:08:ec:78:b7:f4:ba:aa:fd:79:27:3f:
                    42:77:ed:da:f2:83:ad:7b:b7:ee:fe:dd:e2:1a:9e:
                    b2:f7:36:41:9c:9c:0f:54:37:04:27:7e:25:47:12:
                    18:9a:85:09:f0:51:68:9d:55:3e:c5:0e:38:42:0a:
                    ca:64:a5:e9:01:ae:0e:41:7a:e2:9e:ee:9e:a5:ab:
                    ce:af:d8:ab:e3:f5:2d:81:f2:f0:a9:e7:64:a4:e4:
                    52:84:cc:92:4d:a6:e8:34:b2:eb:53:29:a9:65:b4:
                    34:aa:5e:44:86:e0:49:0c:a2:e7:c6:36:f4:d4:a6:
                    61:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:17:BF:04:82:82:7B:FE:C7:93:CA:E8:9E:2F:80:E5:D0:0E:5D:17
            X509v3 Authority Key Identifier:
                keyid:13:74:B9:C3:F4:5F:74:18:3D:D4:F7:2B:16:10:25:2A:DF:B1:26:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/E3S5w_RfdBg91PcrFhAlKt-xJiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a9:e5:33:90:7c:6e:94:46:f2:6b:5d:09:0a:70:0d:c5:50:
         07:8a:70:bb:f2:81:75:17:48:1d:ac:27:fe:58:3d:56:7b:6a:
         e9:05:9c:1f:d2:be:6e:1d:7e:ca:5a:1f:39:01:73:01:b0:a8:
         ce:07:d3:49:40:c1:58:cf:7c:b7:f4:38:12:0f:1a:b3:e3:45:
         b7:e3:b8:d2:85:38:d4:24:ff:44:f5:9e:34:9d:39:be:4d:6f:
         44:3b:72:bd:32:92:c4:dd:de:9a:8a:72:73:41:1b:8b:5d:f1:
         32:44:20:01:bb:97:d6:3d:bc:4b:85:23:8a:56:a1:ac:21:a6:
         ac:0a:cd:4e:0b:27:a5:fd:7d:d8:2e:54:e6:96:5f:33:b3:57:
         8d:db:84:4a:c4:de:fd:cc:b1:c0:1d:51:d5:80:36:8b:44:34:
         49:66:7b:1b:46:c1:27:7c:f1:15:ce:ba:ef:fc:2d:46:28:48:
         26:60:8f:c4:0a:87:1f:66:78:5b:e7:cd:e8:d5:f8:05:5d:0c:
         c8:6a:b9:0a:c6:53:52:60:94:bb:56:9b:3a:49:0a:f9:97:ff:
         72:1d:fb:22:2b:b8:57:ed:e0:45:a5:34:3b:19:e4:ed:60:40:
         f3:42:ba:51:51:11:67:c5:f7:38:3d:b2:73:cb:b8:d8:3a:3d:
         60:65:ec:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 02:22:30 2024 by rpki-client on console-fra.rpki-client.org