Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
File:                     OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft (raw, json)
Hash identifier:          +4vmELzenFd3AR0+B0mI8Wbt1FFVfaNHXdE9TCmBBEw=
Subject key identifier:   D3:32:A9:E3:6C:C4:86:2A:97:02:9C:36:1E:75:43:0A:C0:9C:E3:D2
Authority key identifier: 39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB
Certificate issuer:       /CN=F36C01B9RI/serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
Certificate serial:       5B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
Manifest number:          59
Signing time:             Tue 28 May 2024 02:40:19 +0000
Manifest this update:     Tue 28 May 2024 02:40:19 +0000
Manifest next update:     Thu 30 May 2024 02:40:19 +0000
Files and hashes:         1: OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl (hash: HV54pGMCMz+GIZV70AmUVQFK8F/rS6VXWim2P+ln3X4=)
                          2: FCC5AF24DAF811EE935BB276775412E6.roa (hash: lFol3HpR6fMYzPmNkPhAztGIiqTs04+UE2qgxyB1A54=)
                          3: 8FEDACA2DBAD11EEB79EC1A0775412E6.roa (hash: v3lIrrWZHaGAgIYY4ddWroI+DgCBWv6OTEzoRUSn5vA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                          rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 May 2024 00:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C01B9RI/serialNumber=39649D638F8C5209384D62B880DF7F8C7E46E1FB
        Validity
            Not Before: May 28 02:40:19 2024 GMT
            Not After : May 30 02:40:19 2024 GMT
        Subject: CN=66554413-af21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:d3:e3:6b:c1:9a:76:ac:be:3c:7e:0b:b9:
                    08:96:23:bd:ce:4b:78:b6:7c:49:19:dd:65:63:82:
                    dd:12:5a:e9:45:94:c7:87:8b:41:3f:11:2e:26:c1:
                    71:2d:79:49:48:2f:13:11:09:d7:72:64:33:21:d5:
                    8f:13:ed:2a:7a:7d:72:25:9a:c7:d8:ab:95:89:62:
                    1e:54:5d:cc:1e:44:05:0f:6a:ad:9f:5b:b2:87:dd:
                    97:91:ba:2a:54:1d:b8:51:09:41:8e:95:da:85:e9:
                    53:fc:5a:6a:0e:96:ab:a5:72:1b:6b:9d:fa:c1:5d:
                    00:f7:4a:a9:1a:40:1c:a2:ed:68:c9:f5:95:b4:78:
                    47:f2:f1:28:41:af:5c:28:c5:2d:09:cf:6a:f2:10:
                    f4:73:3a:cb:2a:8c:de:ac:7f:bf:5d:0e:fb:85:4e:
                    f0:41:e2:34:7c:0b:7f:0c:78:bc:08:0f:f1:a5:c5:
                    33:86:37:44:97:ed:a5:f9:c6:d4:44:46:a9:d0:42:
                    2a:64:56:f7:8b:70:7b:fb:a2:42:2f:8d:34:1b:f9:
                    30:d7:b6:c3:e1:c5:23:3c:a4:82:61:e0:2a:a1:f1:
                    5f:75:bc:8d:b8:44:ea:f6:3f:58:5f:1c:5e:0a:c1:
                    2a:ad:d3:43:70:04:c5:74:1a:5f:7e:06:63:6a:d8:
                    dd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:32:A9:E3:6C:C4:86:2A:97:02:9C:36:1E:75:43:0A:C0:9C:E3:D2
            X509v3 Authority Key Identifier:
                keyid:39:64:9D:63:8F:8C:52:09:38:4D:62:B8:80:DF:7F:8C:7E:46:E1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/AFDA9FDCDA2E11EEA6D125A7775412E6/OWSdY4-MUgk4TWK4gN9_jH5G4fs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ce:47:d7:a7:ab:22:38:7e:ca:83:11:3a:0c:f0:7b:71:a2:
         66:cb:53:3f:91:f1:4e:d3:0b:df:d6:84:fe:6d:91:01:31:cc:
         47:63:a9:02:4f:dc:b0:ca:66:7c:d1:1b:93:fc:59:c5:78:91:
         50:cd:e9:aa:85:d6:9d:3c:2c:22:ef:a8:1c:8d:bb:41:88:e8:
         cf:79:18:68:85:41:c4:a7:df:f1:9c:cd:88:ea:e6:04:1d:a1:
         3a:b5:71:38:4c:9b:07:ae:84:28:14:3b:40:33:b7:ee:4b:27:
         c5:6c:51:94:f4:fb:c6:6c:cf:81:58:58:d4:88:f1:77:bb:15:
         c7:05:90:18:e8:cf:34:90:b3:3e:d3:2f:e3:8f:97:ab:69:f3:
         ee:ca:bb:e1:7f:82:b4:4e:ea:82:7a:df:b9:c8:2c:ac:01:87:
         a2:bd:be:8b:a0:a2:f9:66:a7:6c:70:a6:ba:c1:4f:8c:f4:d7:
         4f:78:56:67:dc:5b:74:d7:61:1a:c4:92:22:ae:77:79:c6:9f:
         64:83:1d:97:dd:d3:26:81:d1:2b:a7:c3:0d:1d:c4:97:01:64:
         c2:65:fc:f4:93:1c:78:f5:b3:93:54:19:c7:be:8f:0e:ee:f0:
         41:c5:26:d6:8a:1f:b5:3c:1b:46:c1:ad:e2:7e:9c:c0:31:8c:
         13:a9:17:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 03:12:56 2024 by rpki-client on console-fra.rpki-client.org