Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
File:                     jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft (raw, json)
Hash identifier:          pO8LmEyY+bckGt5sbM6r4qvBDKrCdQurRCk/rtR6nx8=
Subject key identifier:   7C:E2:42:47:D7:AB:5E:34:42:7C:24:4C:CB:3B:92:B9:8E:6B:38:D5
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Certificate issuer:       /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial:       031A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
Manifest number:          0310
Signing time:             Mon 17 Jun 2024 01:48:52 +0000
Manifest this update:     Mon 17 Jun 2024 01:48:51 +0000
Manifest next update:     Wed 19 Jun 2024 01:48:51 +0000
Files and hashes:         1: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl (hash: Ox7YQ4EkMB7U6N0Ft8ap3WZh5aBa6CdssXnbBjc9C8g=)
                          2: 565A309AAA4411EE82EC719A775412E6.roa (hash: w+NXlL7WYD4hkFC1Zg/6oqPBSnT10uVKTO9QtVy5wAw=)
                          3: E9B17964E76511ECB6B242F6F1222468.roa (hash: QX79+PCfVXxj+OGB6vFI/wIK/0K3qU3aoir40/gZdAI=)
                          4: 3F01599AAA4511EEB18C019C775412E6.roa (hash: xuksImk9clm+yhzS5080Q5PjZJcy4MzP48gyczG5O/I=)
                          5: FBD8F91C315911ED857E3ED8F1222468.roa (hash: F3tjPa1GVDjVxl63DkFUkmny30YoZBaG3q0D655v1oc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 19 Jun 2024 00:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
        Validity
            Not Before: Jun 17 01:48:51 2024 GMT
            Not After : Jun 19 01:48:51 2024 GMT
        Subject: CN=666f9604-b28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:dc:0c:0c:ff:7d:95:ff:3a:14:41:06:9e:
                    8c:24:89:dc:1e:a3:80:25:9b:05:c6:76:e0:a3:01:
                    9f:28:b9:17:35:ae:ff:69:bb:ba:ef:ce:0f:0d:ad:
                    95:74:c1:6e:23:f9:a6:fd:bf:a3:66:29:09:d1:7c:
                    3a:48:d7:e9:08:af:74:e9:20:9b:4c:a9:ea:2a:2f:
                    c7:35:31:c1:86:31:71:5d:41:e2:2c:1f:46:41:34:
                    9d:e1:70:57:a6:e7:c1:d3:5f:0a:02:70:94:f9:e5:
                    dd:bf:35:e4:9b:d2:84:25:9d:76:d7:01:e4:f7:89:
                    17:0f:79:5d:5a:5f:bd:d6:36:48:b4:7d:41:ee:f1:
                    63:fd:fc:23:11:b8:b4:88:a5:0c:c4:67:3f:ff:29:
                    66:df:1e:78:3f:b3:c1:95:ee:be:30:be:75:10:63:
                    6f:0f:ea:94:32:a3:6c:bd:c5:a0:7b:f4:43:fb:7b:
                    8a:af:e7:d2:2c:69:f3:cc:03:e1:d7:57:e5:22:a6:
                    af:b1:b9:44:b8:41:4a:36:e5:81:3c:d9:87:2b:cb:
                    b2:76:8c:b7:fd:f2:a8:db:52:a5:4e:44:f4:29:6d:
                    34:f1:a6:c9:cd:09:f1:e0:e2:b3:e7:9f:2c:02:c1:
                    55:e8:3b:ff:06:77:d6:60:71:af:24:0b:ab:a4:40:
                    64:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E2:42:47:D7:AB:5E:34:42:7C:24:4C:CB:3B:92:B9:8E:6B:38:D5
            X509v3 Authority Key Identifier:
                keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:2a:0c:63:50:46:d8:63:85:8c:1b:e5:73:42:c9:44:42:fa:
         96:2d:24:af:a2:24:97:24:61:16:4a:5a:81:26:48:38:f1:73:
         dd:ad:71:fe:69:37:71:0b:15:b7:92:cd:9a:0a:42:d0:97:cc:
         89:b4:7e:c2:1d:65:43:59:a7:7f:99:e0:2f:ae:3e:69:bf:26:
         71:e6:18:18:4b:44:58:2a:94:cf:23:7e:d4:57:d7:c4:0f:fa:
         96:32:3f:ad:46:3d:44:4b:92:88:c4:57:06:99:31:91:42:fc:
         be:99:1b:d3:bf:ac:ce:6e:b6:dd:a9:df:a2:2e:55:36:99:a3:
         e8:60:f9:ea:a3:ab:3c:cf:e2:1d:47:1d:ab:82:42:81:61:30:
         9f:54:51:1a:1e:fd:71:32:9b:58:f1:e8:e6:31:b0:01:41:61:
         9f:21:24:4d:d6:ba:58:5d:bb:78:aa:21:fb:43:6a:97:a7:1a:
         bf:a9:39:5b:8e:6b:4e:4d:65:7b:17:b3:e9:a8:33:1d:c1:31:
         16:9c:43:2a:ab:1a:ce:61:8e:8d:2a:76:b8:6b:7c:64:3e:db:
         8a:37:07:7c:3d:96:7b:39:cf:6f:3d:44:7e:a3:a4:fd:6b:f3:
         bf:d8:c6:4c:91:30:cd:9b:c6:00:cc:a0:f0:8c:f1:41:00:3c:
         3d:a9:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:56:12 2024 by rpki-client on console-fra.rpki-client.org