Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
File:                     dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft (raw, json)
Hash identifier:          SzB6/wPThhBgGnOcv56+rpcjCw02WSveGxN/F0hdC/Q=
Subject key identifier:   4A:32:2C:A0:2E:86:D7:3B:D4:3E:F8:91:C7:02:39:18:82:AB:D3:11
Authority key identifier: 74:2F:A2:03:0F:A4:0C:4B:1F:29:E0:63:FF:32:E7:05:30:09:FA:33
Certificate issuer:       /CN=F36BE2EDAF/serialNumber=742FA2030FA40C4B1F29E063FF32E7053009FA33
Certificate serial:       02BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
Manifest number:          02BD
Signing time:             Sun 24 Nov 2024 02:06:08 +0000
Manifest this update:     Sun 24 Nov 2024 02:06:07 +0000
Manifest next update:     Tue 26 Nov 2024 02:06:07 +0000
Files and hashes:         1: dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl (hash: tlY+HZgPSGPmkCPFJujAs2ov7IQIEjOrstIIS9g2dZg=)
                          2: B15985CA97E111EDB41AE57CF1222468.roa (hash: abdzPuIuACJJuQmlSUaUnN0N+3SokV71Kyt96n5N98A=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAF/serialNumber=742FA2030FA40C4B1F29E063FF32E7053009FA33
        Validity
            Not Before: Nov 24 02:06:07 2024 GMT
            Not After : Nov 26 02:06:07 2024 GMT
        Subject: CN=67428a10-4501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1a:92:e9:b1:dd:55:37:aa:58:f8:b1:66:0f:
                    0b:72:ce:fc:22:2f:ee:d3:45:2c:ae:48:b6:d6:22:
                    b6:fb:2e:ea:f0:f5:b3:99:05:4a:31:c2:aa:f3:1e:
                    16:db:6a:e4:40:d7:40:ea:7a:b8:f4:f9:ef:0e:1f:
                    d6:9b:45:7f:6d:37:fa:2f:02:c5:d6:1b:c1:5c:1b:
                    d2:66:45:55:1a:43:8c:fc:35:ae:65:d4:c7:64:80:
                    17:ea:52:a8:97:db:70:86:fd:20:c8:4c:6c:08:14:
                    67:b0:a0:b3:cd:e5:cf:37:86:b3:b0:64:58:f6:c3:
                    42:52:cd:16:78:ef:88:f4:8d:0f:a9:c1:bb:e6:25:
                    7d:4b:c2:56:a1:84:2c:1e:47:75:d0:77:a8:9f:6b:
                    ff:5b:67:33:45:35:d7:18:f8:16:f9:ed:5c:d2:50:
                    4d:c5:d4:18:2c:f0:3d:37:c1:26:65:9f:fe:db:1d:
                    8f:57:74:da:29:76:6c:2f:93:a3:01:0e:6f:66:d8:
                    88:33:2c:6d:fe:f3:71:c2:fb:f5:2c:c8:d6:f6:00:
                    bb:4b:ba:0a:24:ec:6b:67:9d:5e:9d:56:52:45:9f:
                    59:ab:6e:45:cd:71:52:a0:54:73:71:ce:15:1e:90:
                    8a:de:50:b7:bb:35:4e:fb:a5:ee:0f:2a:eb:07:53:
                    1b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:32:2C:A0:2E:86:D7:3B:D4:3E:F8:91:C7:02:39:18:82:AB:D3:11
            X509v3 Authority Key Identifier:
                keyid:74:2F:A2:03:0F:A4:0C:4B:1F:29:E0:63:FF:32:E7:05:30:09:FA:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/2C4CE81097DF11EDB38878F3F1222468/dC-iAw-kDEsfKeBj_zLnBTAJ-jM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b0:ee:76:05:94:3d:a5:2f:8c:15:ae:76:c8:50:c5:6b:d6:
         c1:34:03:a9:7f:15:1f:bd:91:de:af:7f:13:43:a4:09:ba:15:
         54:64:66:91:0f:78:b9:d5:d5:e0:b4:b3:f6:26:6b:e7:44:f9:
         54:d9:31:56:d2:b8:e9:45:84:2c:e2:5a:f1:d5:15:04:f9:3e:
         fe:69:59:b2:17:b4:6b:44:1e:24:70:3e:5b:47:4e:74:3b:07:
         76:68:79:e4:e1:61:32:40:21:cf:0e:61:78:db:91:71:0c:e6:
         1e:8c:84:0c:22:a8:51:4b:b7:bd:63:17:6c:27:e0:54:09:62:
         0d:b7:f1:d5:b2:ac:e8:1a:02:9c:df:74:04:60:85:5f:92:89:
         2c:1d:48:d5:87:49:32:7a:fc:b8:f9:bd:c8:09:86:4c:26:fc:
         6d:19:c8:42:bb:9d:37:d1:50:12:00:c6:ff:83:b6:a2:33:1d:
         8b:63:e4:85:c4:88:1a:f6:fc:d8:d5:fc:7e:26:8e:1d:6c:6f:
         2b:22:94:aa:6b:17:ab:e0:47:b1:6c:b7:74:b6:d3:ed:74:e1:
         85:66:e3:bb:79:4d:fc:cd:86:e5:1e:0a:21:bd:0c:27:1e:ee:
         33:ec:4a:cb:69:55:33:8c:7c:39:0d:5f:72:9c:aa:3d:bb:3a:
         0e:ed:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:39 2024 by rpki-client on console-fra.rpki-client.org