Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
File:                     _VmsIHc1mw1yPSCqmZqOFqhLQZM.mft (raw, json)
Hash identifier:          +Hd5e4Y/oLOzb1f/K6L89PI0knxaOVxJvJiUJO1RA9g=
Subject key identifier:   46:08:F6:1C:FB:FB:30:C2:3C:19:6A:CE:71:0F:DE:E1:9B:C1:0C:D7
Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Certificate issuer:       /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Certificate serial:       0B9A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
Manifest number:          0B99
Signing time:             Thu 02 May 2024 00:42:09 +0000
Manifest this update:     Thu 02 May 2024 00:42:09 +0000
Manifest next update:     Sat 04 May 2024 00:42:09 +0000
Files and hashes:         1: _VmsIHc1mw1yPSCqmZqOFqhLQZM.crl (hash: aSgCeOxRORIu6BwUj+HH09zMX22wlogS2dQbNEW3gF8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2970 (0xb9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
        Validity
            Not Before: May  2 00:42:09 2024 GMT
            Not After : May  4 00:42:09 2024 GMT
        Subject: CN=6632e161-ec93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:8b:33:57:12:e5:6e:42:52:9a:52:44:2d:
                    03:13:78:8e:59:89:d5:0c:86:4b:02:8a:29:72:1b:
                    30:72:b9:94:a5:fc:f8:27:60:69:c6:e7:83:9b:45:
                    9a:ec:00:85:43:30:f3:87:97:be:dc:2a:c3:2a:9d:
                    b5:e4:db:c8:a2:db:98:36:07:c0:a2:35:05:a0:40:
                    3b:53:99:79:50:e9:75:13:ec:a6:de:6d:5c:62:53:
                    6a:89:6d:5c:98:3d:99:52:af:ad:9d:d5:02:36:4e:
                    f5:b3:19:63:67:2a:e9:0b:e6:b5:ed:33:1f:3a:08:
                    61:ec:bc:70:94:5a:43:d0:fc:67:e2:ee:b6:c9:f9:
                    32:48:78:c4:14:d3:c7:91:ce:8b:94:1b:e7:57:7f:
                    ad:e7:c6:b4:43:47:64:96:db:b1:01:fe:c9:19:74:
                    b2:c9:1e:6e:55:55:94:e1:ad:76:62:b3:6b:9f:19:
                    0f:ee:2f:b6:00:39:e5:94:f1:ad:78:22:89:f9:57:
                    9f:6a:67:f5:bb:cc:06:ab:da:2c:1d:54:6e:0f:dd:
                    55:34:e9:b8:e8:bc:4c:e6:67:23:ea:4b:d8:76:ad:
                    52:e4:da:b5:c9:5e:91:50:c7:f7:9a:52:a8:98:ef:
                    23:e1:1e:9c:42:45:5a:e7:84:42:36:09:33:e2:aa:
                    6e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:08:F6:1C:FB:FB:30:C2:3C:19:6A:CE:71:0F:DE:E1:9B:C1:0C:D7
            X509v3 Authority Key Identifier:
                keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f4:3f:95:7c:c8:dd:b8:74:92:e9:c0:86:6d:7e:0f:1b:2f:
         19:60:c8:43:c1:ee:4e:4d:21:7d:8e:a4:5c:bd:2b:f1:7f:44:
         7c:a0:48:b0:35:44:2c:02:d3:bc:66:dd:e7:25:81:23:52:ad:
         60:5b:e9:68:10:30:ef:95:11:eb:a0:ff:c3:3c:05:40:2c:9a:
         50:ff:5a:86:f4:4d:0b:3c:c9:c0:96:ba:ea:28:58:d1:73:5b:
         90:9a:69:4b:fd:e6:66:e2:79:f4:1d:0d:e7:81:02:9c:4a:ea:
         da:28:08:0c:bc:62:30:d8:f2:5b:cc:04:81:44:b9:94:84:8e:
         11:f4:e3:e8:a5:de:63:7b:22:6a:1d:5a:d5:0d:b7:70:64:ea:
         01:4d:ae:63:ab:10:0f:0c:ed:78:3b:08:22:6f:09:08:11:1e:
         ba:be:ad:0b:59:6e:64:59:90:85:b5:f9:d7:b7:69:89:d2:57:
         7a:c0:91:0b:a9:60:cf:a5:25:20:25:3d:5f:f4:0c:66:2e:b9:
         29:18:e4:24:e4:be:c5:42:71:cf:19:ba:2d:33:37:43:d8:e3:
         af:b0:3f:0f:13:5d:c5:8e:4a:1b:16:f0:50:8d:e0:9c:9e:f5:
         cf:c0:e3:c4:f1:bf:5f:01:a0:e3:b1:fb:2b:18:5c:e6:e6:53:
         da:d7:03:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:48 2024 by rpki-client on console-ams.rpki-client.org