Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
File:                     ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft (raw, json)
Hash identifier:          Jw2fvR55p6GgF0yl3TjOsoitpqjM4wPCNGwm6cF4jCs=
Subject key identifier:   52:64:1C:A0:93:A8:40:8B:37:3E:FB:2A:65:C4:6A:B2:37:92:06:CA
Authority key identifier: 38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B
Certificate issuer:       /CN=F36BCCC8AF/serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
Certificate serial:       1D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
Manifest number:          1C
Signing time:             Sun 24 Nov 2024 02:56:27 +0000
Manifest this update:     Sun 24 Nov 2024 02:56:27 +0000
Manifest next update:     Tue 26 Nov 2024 02:56:27 +0000
Files and hashes:         1: ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl (hash: BulV5x4yu22b47jSB+DKyIQSKVOsD1Ip53vl3ujlw4c=)
                          2: 5822D58E969911EFBB03BAB6762E951A.roa (hash: OlnjZbEYMFxAprqREi0XurB39VJQTTPlIESsXPJn9fE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCCC8AF/serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
        Validity
            Not Before: Nov 24 02:56:27 2024 GMT
            Not After : Nov 26 02:56:27 2024 GMT
        Subject: CN=674295db-780e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:13:2e:89:c0:80:0a:aa:a9:5d:39:32:d4:35:
                    3e:46:d4:91:3d:e2:41:92:d8:da:87:b0:88:c3:05:
                    21:77:5f:38:3a:e0:b9:9d:c0:11:dd:55:0e:79:ba:
                    63:e0:47:fb:61:f3:32:3a:dd:44:48:a2:ca:38:6e:
                    f3:1a:f5:8d:76:79:97:f7:68:7c:58:05:95:c3:26:
                    36:73:41:9f:aa:21:92:f3:3a:38:dd:19:48:c6:1a:
                    dd:23:a8:95:14:3f:b4:74:f1:2f:af:61:30:02:35:
                    77:8f:92:3b:19:61:27:14:95:cf:c6:27:73:2c:ce:
                    f5:f1:54:c9:ce:47:c2:ea:9a:0d:6b:d9:8d:ab:ce:
                    db:2f:42:09:dd:36:56:e1:b3:cb:ee:c5:b7:b1:4f:
                    d0:cd:d8:f1:a8:18:ca:bd:e3:df:ed:00:51:9c:29:
                    52:a1:e5:4c:c7:be:b7:25:b3:30:20:8f:80:4f:ed:
                    34:80:a4:ad:1f:55:e1:76:9c:57:83:8f:22:7c:43:
                    52:4c:13:b2:4d:c7:56:9f:d3:1b:29:ba:d8:29:5b:
                    52:a1:fe:99:ca:ab:e7:d9:49:34:f4:ae:69:da:04:
                    e7:c2:c4:dd:7c:53:32:18:44:ba:01:d1:a4:d9:44:
                    03:07:f6:d4:73:52:3e:28:79:1a:b2:83:4d:17:cc:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:64:1C:A0:93:A8:40:8B:37:3E:FB:2A:65:C4:6A:B2:37:92:06:CA
            X509v3 Authority Key Identifier:
                keyid:38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:11:6d:87:2a:41:64:0d:60:61:d0:0b:30:10:77:79:a2:3f:
         1e:c2:60:5c:f6:93:15:a8:92:4f:a4:4a:10:2c:2f:fd:87:e4:
         03:aa:14:a8:93:c5:67:c7:ca:6d:fe:52:bb:ad:6b:1a:00:4e:
         26:ff:ff:37:a2:38:14:c0:b5:17:a6:53:ca:ef:7a:41:70:31:
         9a:76:d8:64:e9:30:fa:44:e1:99:da:8c:4f:3d:75:03:17:ba:
         ca:97:7d:03:a5:fe:2a:66:3b:65:3d:5a:fc:f6:3a:8b:35:3d:
         1a:b0:36:1d:a4:00:5f:a0:c5:94:82:5d:cc:e0:08:0f:bd:1f:
         81:8a:48:ec:a4:ed:3e:bb:88:1e:c6:0d:dc:ae:50:4c:8c:d2:
         ae:60:47:b1:2b:2a:97:de:29:86:e0:df:ea:bd:a0:84:c7:04:
         3c:67:24:d7:de:63:34:26:ec:e4:1c:3e:4c:20:88:c0:dd:86:
         89:17:ab:80:f0:58:b1:3a:d2:c8:f4:47:35:55:ad:a0:a9:74:
         43:85:21:70:26:31:79:02:b7:39:e3:d8:d1:63:d5:b6:83:88:
         6a:d9:47:c8:b7:8b:7a:90:34:68:94:1f:7a:a0:32:bf:a8:47:
         b3:bf:a0:8c:af:9a:32:bd:38:e6:31:6d:15:53:1b:63:4a:18:
         c0:a4:26:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:19:32 2024 by rpki-client on console-ams.rpki-client.org