Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
File:                     A_5dcm806TzhqV2UUY4SI3rD4sY.mft (raw, json)
Hash identifier:          HlLqikC4DtPjiT9bl9Tc0hzWM1jwmctFgi/apRKGGuU=
Subject key identifier:   72:43:55:3D:8A:C5:FE:04:F8:69:E1:55:BB:A0:71:B7:27:B9:CC:53
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Certificate issuer:       /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial:       03F5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
Manifest number:          03E8
Signing time:             Tue 07 May 2024 01:37:38 +0000
Manifest this update:     Tue 07 May 2024 01:37:38 +0000
Manifest next update:     Thu 09 May 2024 01:37:38 +0000
Files and hashes:         1: A_5dcm806TzhqV2UUY4SI3rD4sY.crl (hash: GMsqdUQnawY8y//W6jwMdPusmjVJzAIGSB/kI9DKGlA=)
                          2: BA7D286C89FA11EE8ADEA4244AD9E6FC.roa (hash: e6u4Mpqs1Ulf+sUBuDTfOdO8viIVszZ90vSZAQIFzIQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Validity
            Not Before: May  7 01:37:38 2024 GMT
            Not After : May  9 01:37:38 2024 GMT
        Subject: CN=663985e2-bc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:e9:49:f7:d3:ad:36:36:12:ea:17:69:c6:
                    78:f9:fa:5e:3c:e4:ee:b6:c6:fc:e3:05:da:d4:03:
                    9e:e6:05:8d:62:db:e5:2d:84:be:d6:08:48:46:ef:
                    4d:bf:4a:d5:08:12:b8:f5:96:0a:d9:95:e6:92:0f:
                    ab:63:4a:a7:69:97:8c:ab:88:9f:a1:91:c2:bb:c9:
                    9a:1b:41:b8:40:d0:40:29:70:de:70:be:73:7c:43:
                    0a:db:40:20:3b:0c:2d:32:d9:4c:0b:6d:90:02:d2:
                    08:71:02:b2:db:61:0b:2f:04:0d:44:be:c2:94:9f:
                    77:37:c0:33:1b:77:f7:6e:20:63:87:f2:41:c2:08:
                    ad:6e:58:da:9f:b3:bf:f7:db:5c:da:dd:6f:ca:2a:
                    16:3c:95:b1:3f:13:f9:e1:1a:e9:cd:7f:64:f6:ae:
                    ad:bd:39:98:79:df:bf:f0:18:1b:eb:8a:70:25:d3:
                    ec:14:c2:f4:75:33:57:8f:d8:62:7b:1d:cd:e9:a5:
                    e6:ee:e6:86:a2:5f:33:73:9a:a5:8f:42:41:09:fa:
                    1e:9b:a8:c0:65:1d:90:90:97:87:f1:73:2a:6b:29:
                    77:a8:ec:f2:e3:dd:62:ff:fb:4f:85:61:b4:c4:bb:
                    41:44:6c:ce:e4:fa:9f:b5:95:f7:a8:16:6d:fa:ce:
                    31:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:43:55:3D:8A:C5:FE:04:F8:69:E1:55:BB:A0:71:B7:27:B9:CC:53
            X509v3 Authority Key Identifier:
                keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:96:ee:ef:ab:b3:7a:1d:d9:cb:7f:77:03:c4:45:a8:04:8a:
         4a:d7:83:4c:f6:50:6b:ee:5a:0e:ca:24:2c:52:4a:e9:d0:a2:
         e3:75:13:7d:a9:0d:97:24:20:dd:0d:82:31:37:f6:20:29:03:
         80:d5:8e:b4:19:ff:c3:37:b3:52:10:28:54:ba:82:d9:3c:db:
         89:92:26:bc:49:f3:08:78:f3:4f:91:92:fb:12:c4:6d:63:e1:
         0b:22:03:4c:31:97:50:0f:c9:b8:ae:d8:e8:28:7a:e7:13:4e:
         17:53:28:a3:4f:8e:04:fd:89:7f:7d:f8:4c:50:a7:00:e7:70:
         eb:04:fe:37:e4:f3:ce:d5:f0:b9:ce:2d:65:ae:40:a4:76:cd:
         44:5a:bb:3f:c3:b6:50:1c:2c:65:cb:74:e8:47:e2:4a:01:69:
         f0:0b:03:66:9e:8d:a9:47:e0:6b:5b:e7:6e:82:5d:05:53:52:
         fd:5f:ec:e1:9a:d8:c9:8f:8a:e2:e2:5b:61:4b:5e:84:ba:29:
         e7:33:7a:dd:2d:d3:e0:dc:8f:2a:25:d9:0c:a1:0d:04:74:3a:
         4b:22:1a:49:2b:0f:03:0e:f8:94:01:50:58:b1:0e:a4:cc:58:
         06:21:be:c4:ce:6a:3a:28:c1:bf:cb:f3:e0:d0:0e:98:88:f8:
         d3:25:07:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:13 2024 by rpki-client on console-fra.rpki-client.org