Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          0jlQ+BeH3hU2Mfv/fM/j//YKw8c/0tnAA3rE1wBASL0=
Subject key identifier:   01:A9:7B:B9:73:89:E2:52:27:C5:A5:40:F2:6E:61:C2:E9:C3:7B:F6
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       46
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          45
Signing time:             Sun 19 May 2024 02:34:26 +0000
Manifest this update:     Sun 19 May 2024 02:34:26 +0000
Manifest next update:     Tue 21 May 2024 02:34:26 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: xffvBiLBsllyQm3b5EmxvIls/qICcJ25N6aXx1w8hpw=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: May 19 02:34:26 2024 GMT
            Not After : May 21 02:34:26 2024 GMT
        Subject: CN=66496532-1c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:33:fd:c9:9a:cd:e6:b3:4d:20:26:72:8b:
                    9f:e4:3c:d0:08:27:b7:aa:07:71:d5:56:aa:ae:c4:
                    14:38:ad:87:79:ca:23:78:91:05:3e:7a:2d:d3:8f:
                    1f:b6:43:f9:9e:90:c1:60:9b:be:50:21:22:8d:d1:
                    3d:e1:4d:81:a6:0d:86:e3:37:60:31:18:8d:e7:8e:
                    32:68:2d:7e:fc:60:1a:fa:bd:b1:30:6f:82:90:5e:
                    5b:6d:ee:37:4d:c5:71:00:e4:8d:7a:6d:2f:ed:a1:
                    aa:52:70:d6:71:1b:d8:72:6d:ab:9e:70:1e:01:53:
                    3c:f3:85:0c:3d:10:b8:76:70:1b:d4:29:b4:3d:c9:
                    d9:64:5e:2b:97:0d:ef:c2:62:43:cf:dc:5e:dc:63:
                    79:98:60:81:5b:a5:e8:b5:09:01:fe:ba:31:c7:6a:
                    25:8e:9b:ed:9d:3f:84:4b:b9:74:33:b2:48:21:af:
                    f6:3f:fc:69:32:0b:82:da:0e:a3:4c:d5:39:17:5d:
                    0e:0e:62:03:2c:4a:51:c7:8d:04:d4:56:7f:82:bb:
                    e2:3b:88:c5:b6:73:27:96:d2:82:be:d1:fb:8c:c8:
                    75:9c:11:5b:90:ea:9f:05:b7:97:53:0f:ce:00:7b:
                    1e:a6:04:91:a0:72:75:72:7d:c8:2e:d2:c5:ea:4f:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A9:7B:B9:73:89:E2:52:27:C5:A5:40:F2:6E:61:C2:E9:C3:7B:F6
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ca:30:26:28:bb:76:6d:24:95:00:13:3e:8f:49:7a:82:99:
         57:ec:86:58:d5:1b:de:1d:78:4a:59:2e:de:fd:1f:1d:85:a5:
         3b:67:af:79:fb:c7:6a:e8:5c:c9:57:13:0d:85:21:a3:97:63:
         25:b3:27:03:a1:0b:75:a7:ed:1d:a2:76:8f:d6:96:d0:50:b1:
         2e:c7:c7:8a:e8:fc:cf:7e:c1:93:4d:64:39:27:08:88:2a:76:
         bd:56:1b:16:71:ab:bc:2b:9c:13:a9:ad:79:7e:b1:30:c7:b7:
         2c:b6:ce:20:e0:d3:cf:30:e3:54:75:e6:ab:42:74:de:f6:3b:
         ff:9f:28:27:9b:3e:92:42:ae:6f:e9:49:9c:95:b1:c7:cd:cc:
         16:b3:42:5b:d6:8d:b8:47:55:18:78:1f:cf:fc:95:3f:57:38:
         7f:7d:fd:45:11:73:bd:4c:ed:a7:21:d7:e9:e5:3e:3a:09:dc:
         f6:07:f6:d5:68:fb:ea:e6:e5:df:1d:f2:16:4a:34:40:c6:49:
         62:c1:51:a9:2a:73:9d:40:91:6d:8d:b7:be:fa:b0:04:78:a1:
         b4:10:d6:ec:ac:b0:ea:11:32:ed:e9:dd:eb:5b:37:29:32:1d:
         3d:00:b9:8f:24:1c:79:18:62:41:6c:6b:e4:7d:a2:c7:2d:2a:
         ca:90:2c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:12 2024 by rpki-client on console-ams.rpki-client.org