Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
File:                     A_5dcm806TzhqV2UUY4SI3rD4sY.mft (raw, json)
Hash identifier:          jJAqKSn07Om5X3+0pwHRPkRlXgALAXEr0DJRWgBn1Co=
Subject key identifier:   63:7F:4A:18:7C:23:62:09:37:2F:F2:2A:AE:22:22:75:5A:13:B3:D7
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Certificate issuer:       /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial:       04EE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
Manifest number:          04D4
Signing time:             Sun 24 Nov 2024 01:39:12 +0000
Manifest this update:     Sun 24 Nov 2024 01:39:11 +0000
Manifest next update:     Tue 26 Nov 2024 01:39:11 +0000
Files and hashes:         1: A_5dcm806TzhqV2UUY4SI3rD4sY.crl (hash: 2Q5VQEaKJmIS5GZc0mJzDjCWy67lWC2AeKZvPE8+4mg=)
                          2: D987B66863CB11EFA0F75972762E951A.roa (hash: OjFWCVbF9MzWB5rSe76yP7YBjLAYfw9QCT5/RpHfRRk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1262 (0x4ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Validity
            Not Before: Nov 24 01:39:11 2024 GMT
            Not After : Nov 26 01:39:11 2024 GMT
        Subject: CN=674283c0-0695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bc:28:af:bb:bd:43:98:5e:3f:ac:66:b6:f3:
                    bb:02:11:69:cb:d9:2d:6d:26:35:82:c0:d0:73:87:
                    96:44:c7:ab:34:78:72:ef:99:4a:db:f9:63:8a:f4:
                    25:e7:60:40:1c:c7:5f:6b:c1:1a:29:2c:b7:e8:05:
                    76:f2:0b:6b:32:03:03:ec:48:8d:e7:3c:7d:10:5d:
                    56:4d:a8:0c:4d:6d:27:bb:55:87:60:2f:df:81:12:
                    e3:ef:71:bd:31:89:83:81:86:cb:64:b4:8e:e3:b8:
                    09:24:d1:33:8b:dc:35:02:68:d1:bc:b0:84:94:0e:
                    8d:08:32:d0:19:f3:65:00:d8:93:4d:2d:02:aa:9a:
                    ad:09:85:ba:46:ac:ef:21:a8:18:12:80:70:ab:71:
                    c5:ab:a9:28:4d:18:19:77:fd:25:f5:e6:3d:6c:fc:
                    36:37:53:e1:74:91:85:70:48:3a:91:cc:3e:69:bc:
                    a0:38:78:69:78:2e:55:d0:b0:6a:7e:32:a7:b9:72:
                    46:d5:62:a0:64:9c:fd:9e:d3:78:f2:32:8f:95:a9:
                    7a:a2:32:50:02:b5:c2:84:71:66:ec:fc:db:3c:29:
                    b1:21:1a:bf:88:4a:54:02:0e:63:cc:dc:52:9a:6f:
                    2b:a4:2e:da:04:c4:d0:69:01:e6:51:a8:ba:b9:02:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7F:4A:18:7C:23:62:09:37:2F:F2:2A:AE:22:22:75:5A:13:B3:D7
            X509v3 Authority Key Identifier:
                keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4d:77:15:de:37:c2:96:3e:34:3d:22:29:64:cc:3d:2a:62:
         4f:2a:cc:9a:05:f7:65:11:e9:c0:7e:13:17:e3:44:bd:4e:86:
         fb:2f:a4:9c:fa:a2:8b:4a:82:69:5c:07:56:0e:7f:59:43:6f:
         23:71:7f:4e:5a:02:c4:da:eb:90:85:9d:14:de:a1:91:7d:91:
         be:1e:bb:2e:35:63:75:8d:57:06:20:bb:48:cb:91:12:fa:43:
         49:c7:0e:b6:47:e4:01:02:32:f9:52:13:22:04:41:a9:88:39:
         9a:2e:01:f8:5b:80:b5:91:08:1d:ae:f1:ef:16:72:d9:6a:fb:
         83:41:ab:39:cf:1d:a1:31:be:0a:f7:4e:31:27:da:75:9d:0e:
         e3:6f:c5:ee:ff:0a:82:75:b3:9b:38:c2:4e:11:c4:f4:8c:ac:
         39:f2:6f:5f:e7:9b:98:8a:7a:b7:6a:e4:3a:fb:55:8e:8a:4a:
         81:09:57:b0:a4:72:60:76:4c:0c:82:dd:7e:c7:1d:df:d2:a5:
         89:6d:d7:1a:07:23:3c:72:0b:6c:4a:c7:b4:b3:4b:be:9d:e1:
         86:7a:e1:55:a9:98:37:02:dd:ca:4d:0c:b5:6a:98:22:62:31:
         be:8d:b3:8d:25:22:68:28:16:81:2f:ac:77:ad:7e:71:2e:84:
         63:89:6c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:37:45 2024 by rpki-client on console-fra.rpki-client.org