Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File:                     CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier:          AA88r+ypuAQBNCw+fNmGXY7NP5LVhZKyqfYMWfRVjr4=
Subject key identifier:   EA:42:44:E7:73:4A:10:7D:87:AC:EA:A5:52:75:0A:A2:B2:6F:09:EF
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer:       /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial:       0233
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number:          0232
Signing time:             Sun 05 May 2024 01:58:39 +0000
Manifest this update:     Sun 05 May 2024 01:58:39 +0000
Manifest next update:     Tue 07 May 2024 01:58:39 +0000
Files and hashes:         1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: PnoYFk44nXgBW5cpfcALQa1XKX0fYSggiRZ6oJoJbYo=)
                          2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
        Validity
            Not Before: May  5 01:58:39 2024 GMT
            Not After : May  7 01:58:39 2024 GMT
        Subject: CN=6636e7cf-e028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:a4:6d:e1:49:93:ac:76:f5:4a:de:cf:00:
                    e4:9c:4a:0b:19:aa:cd:dc:56:7e:ea:7f:33:e2:cc:
                    40:1b:cc:aa:d7:89:f0:4a:7a:7c:b4:d6:47:d6:d9:
                    b9:8b:31:09:2b:25:66:0d:7b:18:46:36:71:a1:0e:
                    56:f7:03:c7:77:f1:41:ca:ec:29:90:e0:05:20:8f:
                    bc:15:fd:24:f7:a8:46:e9:3e:ab:02:77:23:cf:3c:
                    d9:31:23:72:23:06:1a:39:93:d8:98:4a:f9:9f:da:
                    b7:de:e0:1c:c3:92:7f:54:9d:31:07:c1:c3:d2:44:
                    d7:ca:3c:68:a1:13:57:2a:74:92:6d:e7:48:d5:3a:
                    75:a9:9a:7a:73:f7:e0:2e:e6:e3:17:dc:52:70:e5:
                    98:99:cb:88:36:fd:56:dc:0a:18:d2:e2:01:66:55:
                    9b:82:73:53:3f:f9:9a:a7:6a:11:2b:76:b2:9f:71:
                    33:81:d8:59:f2:e9:e1:b3:ed:26:54:a1:0b:c0:fc:
                    73:b1:8b:d7:76:ed:cd:c2:0c:bf:13:73:cf:72:10:
                    14:bd:cd:9a:02:ad:90:dd:a5:44:e7:9c:32:42:7c:
                    0b:71:e1:10:9d:30:16:3c:49:0b:39:9d:90:f8:fc:
                    2d:1d:72:a0:1a:87:8c:78:ef:78:5f:0c:74:6c:7b:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:42:44:E7:73:4A:10:7D:87:AC:EA:A5:52:75:0A:A2:B2:6F:09:EF
            X509v3 Authority Key Identifier:
                keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:a7:0e:fe:45:62:b8:c5:31:bd:43:34:f7:3a:fa:61:7d:
         e1:4f:02:e2:a2:dc:f2:11:70:53:8f:d1:cd:73:30:40:8d:56:
         de:46:7a:7f:0a:39:d3:c4:20:61:6d:96:82:a2:4b:30:97:ca:
         48:66:73:23:b2:fb:76:46:6b:be:52:9a:7f:26:bc:79:7b:a9:
         09:15:3a:70:ff:72:d7:53:e7:ba:ff:fd:33:f2:75:c7:70:92:
         3d:d1:0b:c1:3c:77:1e:7c:c9:d5:94:4e:9d:5f:d8:d3:d2:e9:
         a6:ff:e3:69:2a:b0:eb:7a:d1:82:9b:0b:48:bc:ec:70:0b:d6:
         f5:3a:44:ab:8a:88:fc:7a:87:65:b2:27:99:8e:1c:23:20:47:
         a9:46:8a:13:7f:d9:ba:b0:4e:d2:48:e2:26:09:5e:fa:84:ae:
         a8:5e:0d:1d:c4:11:c7:53:a2:e8:94:74:f6:5e:04:c9:31:54:
         80:7e:d6:df:30:0d:f4:f6:f2:ac:d4:34:c3:cd:e5:17:e5:77:
         f2:44:1f:4b:21:2b:6a:98:32:9c:04:27:45:ef:2c:42:e9:18:
         bf:8a:b5:11:74:bb:e3:f1:18:ae:80:e4:4e:83:77:71:c8:a4:
         45:57:f9:28:31:ea:36:c8:3e:97:27:ea:00:d5:1d:09:8a:91:
         8c:0a:4a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:09:50 2024 by rpki-client on console-ams.rpki-client.org