Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
File:                     hbCxijGOWnXQTRoKp37_lQUiiSQ.mft (raw, json)
Hash identifier:          V+rnqQWVkzmXU1ENmpUTg/6L8m7zbgdGLNhUU+h/jAQ=
Subject key identifier:   B8:52:A0:4F:BA:CD:D3:EB:A3:33:F6:CD:5E:64:F1:64:D8:10:33:2F
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Certificate issuer:       /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial:       053B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
Manifest number:          0532
Signing time:             Sun 26 May 2024 01:16:27 +0000
Manifest this update:     Sun 26 May 2024 01:16:27 +0000
Manifest next update:     Tue 28 May 2024 01:16:27 +0000
Files and hashes:         1: hbCxijGOWnXQTRoKp37_lQUiiSQ.crl (hash: kGcw4hoXQflnmdzKu1ASXSd2sfNQUo1mToFyC5wW8II=)
                          2: 67B8C7B20B7311EF82634D34017001B1.roa (hash: gTnze+sNFy8wfWQuqCuoldModdIZeS9lmW2uAevzSyE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 28 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1339 (0x53b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
        Validity
            Not Before: May 26 01:16:27 2024 GMT
            Not After : May 28 01:16:27 2024 GMT
        Subject: CN=66528d6b-3bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:82:35:e7:21:35:bd:42:3d:62:ee:c5:f8:
                    85:fa:4b:66:6f:a4:55:1f:83:88:85:a5:49:38:26:
                    b5:45:05:36:ec:e4:34:e5:05:7a:e0:08:de:1b:62:
                    62:96:b1:d9:26:40:e6:cf:05:b9:a4:4d:c5:f3:9f:
                    c7:f0:00:8d:02:de:be:a0:88:c9:a0:e1:ab:6b:c5:
                    2b:ad:f4:b5:3d:ff:b0:0a:68:d9:3b:4f:74:c0:5f:
                    f7:53:1f:45:6e:1d:c8:f5:aa:a4:d6:72:3a:73:ea:
                    70:74:6c:46:fb:fe:b6:89:93:2c:a0:fc:c3:a0:fc:
                    3a:90:8c:8a:7e:a9:4d:b9:c5:c6:05:f9:54:d1:5e:
                    3a:3b:da:6a:49:4e:00:07:28:53:aa:ce:87:9c:18:
                    e3:a4:b3:dd:52:ff:4c:32:ed:62:8b:99:73:ab:86:
                    d0:58:f0:3e:db:0f:e5:fb:65:8c:7d:ea:e4:88:49:
                    e2:0d:9b:77:cd:aa:72:0e:69:a0:c8:40:7d:18:66:
                    fe:76:19:f1:18:07:92:d2:8f:2a:cc:fc:8c:b6:34:
                    0e:b8:58:a2:18:49:fc:60:0a:6a:80:fc:5f:e5:c9:
                    53:6b:49:cd:c9:b1:df:a1:8c:b3:0e:cb:5b:fe:41:
                    b7:40:1d:f8:2d:c1:58:be:0c:0e:14:5d:d8:b7:5e:
                    6f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:52:A0:4F:BA:CD:D3:EB:A3:33:F6:CD:5E:64:F1:64:D8:10:33:2F
            X509v3 Authority Key Identifier:
                keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:99:3c:10:00:c1:f2:66:b4:b7:f7:4e:9c:3b:75:42:06:09:
         60:d3:54:78:9a:31:fc:2d:f8:e8:74:74:0b:29:ee:90:29:16:
         26:eb:cf:8b:22:08:8e:2e:eb:18:9a:74:f4:e5:59:32:a7:84:
         a4:85:f3:e9:e5:b8:ee:62:7b:22:39:1a:95:3f:c3:cd:e7:9b:
         6e:a1:00:e7:ba:a0:87:0b:cd:ea:22:77:26:f0:37:45:8f:17:
         d2:46:38:60:c6:e7:cd:1b:25:30:23:13:03:78:a3:9f:38:25:
         76:78:04:64:c5:0c:f5:a2:93:e4:e5:1a:38:3f:1d:01:83:db:
         40:75:3f:24:2c:2b:83:e2:cf:22:10:6e:1f:40:53:cb:48:52:
         82:fc:02:f2:bd:90:0d:c5:a1:3a:35:46:ea:d3:80:8a:0d:2c:
         7c:e5:04:94:56:67:13:c4:d8:c2:f2:41:30:cc:2b:14:33:3f:
         35:0e:1d:2c:71:4e:58:73:7b:92:9f:54:d2:8c:3b:04:db:03:
         b5:45:d9:6c:00:6d:fd:d9:91:95:e0:24:62:7a:66:56:8c:04:
         70:e7:a1:6d:ec:96:0f:f8:5b:b5:df:31:d5:bb:1a:bf:7f:70:
         81:f2:62:4c:6f:f1:8a:dd:29:c2:c9:1b:df:47:0a:95:98:29:
         e6:e9:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 02:15:14 2024 by rpki-client on console-fra.rpki-client.org