Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
File:                     VCiBspPW4uKh8hlSyLwDISbuu8k.mft (raw, json)
Hash identifier:          8f+0kdcQSli1iXpt1vPoNR5K8fuHAXSXXKT65UBHXqY=
Subject key identifier:   20:81:5D:86:97:4C:05:05:19:9B:FF:D1:7D:1C:21:5C:CD:A0:BD:14
Authority key identifier: 54:28:81:B2:93:D6:E2:E2:A1:F2:19:52:C8:BC:03:21:26:EE:BB:C9
Certificate issuer:       /CN=F36B52A6RI/serialNumber=542881B293D6E2E2A1F21952C8BC032126EEBBC9
Certificate serial:       081F
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
Manifest number:          081E
Signing time:             Fri 22 Nov 2024 00:57:25 +0000
Manifest this update:     Fri 22 Nov 2024 00:57:24 +0000
Manifest next update:     Sun 24 Nov 2024 00:57:24 +0000
Files and hashes:         1: VCiBspPW4uKh8hlSyLwDISbuu8k.crl (hash: qtAgY/Tt3jVFIhNSieTxK3EcVbYOdvYut6YICAERJ3w=)
                          2: 6B867142864C11EF92D39262762E951A.roa (hash: q/5PVa0Y5jiVYanPXInC3+mN2koWYpdxJKq6XS413jQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
                          rsync://rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6RI/serialNumber=542881B293D6E2E2A1F21952C8BC032126EEBBC9
        Validity
            Not Before: Nov 22 00:57:24 2024 GMT
            Not After : Nov 24 00:57:24 2024 GMT
        Subject: CN=673fd6f5-98b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:f9:62:1d:36:cb:6a:49:a9:cb:1e:58:a6:
                    df:e9:8a:d6:cd:cc:6f:71:2b:6f:49:36:e7:ab:68:
                    f0:e3:cc:50:36:83:1e:7c:a3:4e:2b:30:ef:f0:f0:
                    d9:30:a3:77:9d:ce:1a:40:4f:7f:04:e8:cc:0c:71:
                    79:7d:fd:c6:97:47:95:9c:b0:1a:15:7c:4f:5c:7c:
                    a6:26:6c:f0:b8:7e:30:d0:d4:5b:9b:fb:ec:a1:a4:
                    ad:2e:bf:2f:6d:20:de:aa:c1:a6:6a:c2:56:c9:17:
                    b2:5c:e0:ea:40:83:89:18:7a:48:23:42:a8:62:bc:
                    61:f4:62:fa:e0:9b:e3:72:61:fc:29:a4:04:90:ba:
                    00:71:21:49:9a:69:64:c7:21:a1:90:ce:b5:5d:2b:
                    5a:ab:a6:2d:9c:4c:ab:7c:da:f3:cc:5f:e2:c3:17:
                    c2:b3:64:e0:ea:34:38:46:44:30:24:82:a1:39:65:
                    78:51:64:45:38:b0:d0:d7:af:5b:10:b0:66:d0:77:
                    b0:82:87:a6:6c:35:0f:1f:7a:4e:74:6d:c5:4a:b2:
                    37:f9:d2:cd:46:e9:cf:90:f3:ec:b7:3a:96:2a:3d:
                    90:d3:81:c4:6d:0e:16:c8:ce:8e:29:0c:44:a6:ed:
                    d7:36:a7:b1:bb:4c:32:52:e2:37:f2:67:0a:5d:a6:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:81:5D:86:97:4C:05:05:19:9B:FF:D1:7D:1C:21:5C:CD:A0:BD:14
            X509v3 Authority Key Identifier:
                keyid:54:28:81:B2:93:D6:E2:E2:A1:F2:19:52:C8:BC:03:21:26:EE:BB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/VCiBspPW4uKh8hlSyLwDISbuu8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/982543566FFD11E9ACC6EB34F8AEA228/VCiBspPW4uKh8hlSyLwDISbuu8k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f7:e3:87:eb:a6:db:15:c2:1d:2d:fc:b3:bc:0a:80:29:d8:
         85:2e:70:0c:79:0f:af:a1:7d:9e:9b:5d:2e:66:41:1e:6d:8b:
         04:1e:35:4d:93:b7:22:d7:89:0b:37:1b:b8:98:0c:a6:dd:25:
         e7:05:07:aa:68:37:0c:3e:df:21:7a:14:d9:06:f4:3c:68:69:
         28:4d:fb:8d:53:4c:01:f8:ff:23:35:30:d7:33:1f:de:f0:4c:
         de:96:50:28:55:45:93:78:26:b7:2b:7f:16:51:08:46:48:9b:
         59:56:58:82:f5:39:7a:50:7d:84:9f:a0:0f:19:b7:b0:bb:93:
         81:9c:1e:cd:68:26:87:6a:c0:64:6a:63:32:0b:ff:17:ef:12:
         7c:01:6c:a5:41:9c:df:44:f2:8e:a8:f3:cc:26:8b:fa:d4:2e:
         f3:3b:7b:ff:bf:0d:70:05:9b:43:21:8f:9e:14:00:54:dd:28:
         fd:26:16:bc:44:f9:9c:c4:2b:a0:28:60:f7:fa:e7:18:26:66:
         30:ae:4b:9f:88:7e:ba:e9:67:93:2b:fd:31:da:f6:25:f5:15:
         3e:1d:ce:99:87:23:d1:de:3c:e2:23:40:a6:74:6f:2f:b0:80:
         2f:ad:2c:fe:ed:98:eb:80:89:19:1c:ec:39:31:57:ae:0d:86:
         4f:cf:68:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org