Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File:                     i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier:          lKGnsNHRcr7kgXCnyj+wpMwmUwM4RhNq5XG46MnoKt4=
Subject key identifier:   C8:FC:53:39:F5:71:A9:E3:D6:05:59:E8:24:72:5F:76:10:C7:E1:C2
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer:       /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial:       1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number:          17
Signing time:             Wed 23 Oct 2024 03:07:07 +0000
Manifest this update:     Wed 23 Oct 2024 03:07:07 +0000
Manifest next update:     Fri 25 Oct 2024 03:07:07 +0000
Files and hashes:         1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: 3WqxK1rCM+DNi1/zyA2/z8KTcgydMx5rM//X8xXwTnE=)
                          2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
        Validity
            Not Before: Oct 23 03:07:07 2024 GMT
            Not After : Oct 25 03:07:07 2024 GMT
        Subject: CN=6718685b-f141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:3d:a6:24:8b:fc:21:2b:ea:44:d1:d1:e9:
                    ca:58:9c:f7:9a:fd:bb:98:13:06:73:3d:d5:10:5c:
                    81:e7:6c:e1:a9:f7:3e:97:0d:2d:90:47:14:dc:23:
                    e0:fb:03:2e:37:3b:b7:09:7f:b6:5c:37:58:43:c6:
                    b2:56:55:21:42:81:77:84:a0:2b:2d:90:fa:1a:a0:
                    e1:31:d9:6e:44:a8:d6:a5:87:73:73:bd:7f:08:05:
                    ec:b9:41:2d:ed:a4:7b:38:74:65:5e:7f:a1:91:0e:
                    42:fa:f4:3c:7e:50:aa:4b:c4:d0:93:99:d1:58:2f:
                    8c:1a:d2:50:d4:f6:5c:6a:10:1b:54:e4:d9:bb:8f:
                    6a:54:8f:07:5f:53:62:56:bc:56:7a:c1:7c:2c:26:
                    09:53:87:09:31:40:96:a7:56:7f:6c:fe:e8:e9:cc:
                    a4:f5:87:c5:34:e7:af:4e:77:df:35:5a:bc:60:c7:
                    9a:c7:c8:00:99:22:1c:67:56:db:c3:5e:4f:ea:26:
                    1e:49:27:00:5a:fb:f0:55:4e:29:76:11:a6:79:89:
                    a3:4d:87:0b:33:f3:bd:c1:f5:82:d9:2f:9b:6a:06:
                    22:8a:d9:15:be:f5:8a:c7:78:28:c3:c1:cd:71:94:
                    0e:f2:01:63:1f:f4:c6:59:d5:87:b5:94:c7:d0:9d:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FC:53:39:F5:71:A9:E3:D6:05:59:E8:24:72:5F:76:10:C7:E1:C2
            X509v3 Authority Key Identifier:
                keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:11:4a:d4:eb:e7:14:8f:7e:7c:ab:81:71:66:7a:01:06:1f:
         2c:14:7d:29:85:5b:e7:96:11:7c:c0:e4:2c:b6:27:27:6d:4f:
         1a:9f:c3:89:5f:73:a7:53:1f:70:e4:ce:32:cb:c3:f0:fd:2f:
         ec:6e:bb:01:83:25:c8:97:75:2a:a6:d9:3d:98:ef:e3:f8:04:
         9a:11:46:28:a9:b0:a2:34:c9:28:fc:ba:f1:4a:da:d4:89:bf:
         63:5b:97:d6:c5:06:9c:fa:e5:68:18:37:49:0e:a1:fc:fc:6f:
         02:1e:44:1d:ab:d1:99:ac:25:22:a9:d0:ae:9d:f1:e5:11:c5:
         51:cc:44:fe:70:be:f5:d4:d7:45:3a:08:e3:ee:3d:09:bf:d5:
         6b:92:ba:99:48:19:f2:20:24:98:e6:c3:bc:28:bc:3b:e3:43:
         c4:9f:9a:83:59:bb:8f:43:37:10:14:ef:55:c3:43:c3:11:33:
         d4:2b:86:77:5f:71:c4:48:50:78:8d:9f:95:08:63:bb:ea:e2:
         43:66:a3:7d:84:80:2e:4b:bd:6e:48:9f:5e:ce:c9:91:33:6d:
         e6:be:42:77:04:9e:95:33:57:ff:55:11:c1:e4:19:0b:62:62:
         e6:cf:38:18:9a:89:63:26:b9:ed:d8:64:ac:b1:20:1e:44:18:
         9d:45:2f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:01:00 2024 by rpki-client on console-fra.rpki-client.org