Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
File:                     IPoazDHazMuDL9LUtfzXWC-kIsk.mft (raw, json)
Hash identifier:          zbEuzezNL5laLOHZE+tAHhtDK1BcyM4nc5MCdXVz4nk=
Subject key identifier:   44:FD:7B:44:3B:3B:30:1B:9D:E5:2E:80:7C:B2:2E:F0:76:A0:5C:A9
Authority key identifier: 20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
Certificate issuer:       /CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Certificate serial:       0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
Manifest number:          09
Signing time:             Thu 21 Nov 2024 02:57:42 +0000
Manifest this update:     Thu 21 Nov 2024 02:57:41 +0000
Manifest next update:     Sat 23 Nov 2024 02:57:41 +0000
Files and hashes:         1: IPoazDHazMuDL9LUtfzXWC-kIsk.crl (hash: /WnnI5AOMzGFp+o7URI5HXFDy6XEaxvt+W3HoEq9/2U=)
                          2: 8327C434A35411EF974E14A1762E951A.roa (hash: TgV6J8OnLK9ODPkaOzrwonQ7ArSo3b7jgatmRvGo6BI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
        Validity
            Not Before: Nov 21 02:57:41 2024 GMT
            Not After : Nov 23 02:57:41 2024 GMT
        Subject: CN=673ea1a6-f7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0c:42:f8:9a:1d:1c:8f:d5:d5:99:b1:11:ec:
                    87:db:1f:63:72:31:6b:a3:d3:bd:22:82:53:1d:3c:
                    ed:6c:97:60:d8:db:26:f4:fb:40:be:a8:79:a7:40:
                    86:a6:6b:49:d7:84:a7:31:f9:e1:80:15:65:5a:c4:
                    91:b2:70:ca:0f:11:0c:35:62:cc:13:78:5b:b6:df:
                    97:95:34:52:3c:8c:8b:72:fb:8d:e3:9d:da:a9:10:
                    0b:c2:71:b2:7f:4d:ff:61:ee:6b:45:d4:34:e5:a8:
                    bb:1d:d5:82:ac:20:09:d9:f4:5a:c9:ea:4e:d7:df:
                    be:ea:45:87:cb:bd:d6:af:85:87:19:77:13:b2:22:
                    78:7e:8e:37:28:4d:0c:67:68:02:99:d8:f2:56:fe:
                    e4:61:12:30:96:2b:8b:01:19:f7:3a:e7:d1:ab:29:
                    4b:b1:7f:fe:d6:cb:aa:a7:21:b3:b3:61:83:3e:2a:
                    76:f1:28:b8:57:b1:ad:73:d5:8f:ff:71:5d:e2:15:
                    e0:4c:98:c7:aa:23:d2:b2:43:ab:37:53:ec:d6:df:
                    ed:30:e3:da:a8:e2:51:a0:a0:e4:23:10:62:fa:66:
                    55:97:1c:62:e6:74:01:03:56:72:b8:8a:30:06:27:
                    33:7f:ef:52:f2:97:02:11:ba:9e:55:4c:a3:07:45:
                    b3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FD:7B:44:3B:3B:30:1B:9D:E5:2E:80:7C:B2:2E:F0:76:A0:5C:A9
            X509v3 Authority Key Identifier:
                keyid:20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:f5:4a:a8:f6:a3:67:88:8f:63:76:03:fe:3f:37:cd:da:32:
         47:80:48:09:a0:0d:f5:8e:07:79:eb:fe:7e:96:5a:55:3f:27:
         2d:04:bc:d4:79:63:ed:ea:ad:a8:d1:aa:17:04:26:56:ba:18:
         11:87:56:2f:cc:f3:de:fb:0a:b7:f5:b8:77:2e:56:75:88:ee:
         61:0f:36:b6:30:af:db:02:da:ba:bc:0d:b7:0c:44:3f:71:eb:
         8e:5e:f6:d5:18:eb:f3:2c:a8:d5:42:37:42:55:a8:43:7e:38:
         7b:c8:52:ff:46:9d:94:bd:44:e7:6f:ca:31:90:45:32:88:2d:
         b9:a2:e6:c7:dc:57:c6:85:8b:4f:8d:11:f5:23:96:e7:44:eb:
         b9:a9:5d:61:be:45:95:bb:27:4d:7e:ae:75:a8:97:54:cd:ba:
         13:4f:89:19:ba:37:76:b7:ec:1c:ee:d6:03:71:ff:2f:54:ff:
         ae:43:60:8d:1b:a6:e6:fa:e8:42:e1:96:db:f4:c2:8c:90:c4:
         56:e6:cd:99:3f:97:89:55:e8:75:ab:71:ba:1e:36:d5:2e:7f:
         8b:b8:3b:ae:30:6c:60:14:cb:ca:69:69:29:0e:62:0e:e0:d6:
         35:88:b3:76:e3:0b:51:33:2a:6c:c5:15:1b:3e:9e:a5:73:be:
         92:4c:d1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:36:59 2024 by rpki-client on console-ams.rpki-client.org