Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File:                     i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier:          i3HlM1BKBtOOJ7iCndPEhBmMx5GeKqnkz8jW7g0jX5Y=
Subject key identifier:   5F:15:93:4E:1D:97:1F:AE:7B:07:2A:C3:8D:CC:1A:30:55:63:3E:BC
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer:       /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial:       3C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number:          38
Signing time:             Sun 24 Nov 2024 02:55:03 +0000
Manifest this update:     Sun 24 Nov 2024 02:55:03 +0000
Manifest next update:     Tue 26 Nov 2024 02:55:03 +0000
Files and hashes:         1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: rmz8qVVxs4uoycAGohVAv9Rkm+DapNR5melQwwlHoOs=)
                          2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
        Validity
            Not Before: Nov 24 02:55:03 2024 GMT
            Not After : Nov 26 02:55:03 2024 GMT
        Subject: CN=67429587-e685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:16:1f:08:f8:c6:3d:b0:2a:3f:61:8b:bf:98:
                    9b:53:fe:5b:a6:30:9e:c6:26:2c:a2:3d:29:eb:8c:
                    ed:b0:42:5e:fe:66:19:59:da:17:d2:a0:0d:55:d8:
                    c6:73:52:bf:38:1c:b8:df:2a:ae:b9:6a:69:b3:d8:
                    d5:fa:dd:7d:b8:11:b4:3b:fc:39:a4:33:2e:89:94:
                    48:fa:4a:fa:b6:d7:89:32:7a:bb:f5:a0:48:5d:3e:
                    39:4e:0d:f6:a3:47:91:e5:a0:8b:68:60:7f:bf:75:
                    b4:9f:55:76:86:0e:46:70:6c:d8:62:76:bc:86:c8:
                    42:a8:10:11:ef:75:68:c6:37:bd:89:5d:22:e3:af:
                    a3:17:8a:74:81:72:f6:6d:45:7a:f1:46:cd:64:5a:
                    9c:ee:9e:5c:bf:a0:e1:9d:19:2d:a4:3e:6c:9b:15:
                    3b:33:d5:6f:cd:cc:f3:da:d4:29:3d:74:63:55:7d:
                    13:2f:a4:3c:af:ad:2f:f5:cd:45:3e:a2:2a:6c:86:
                    55:9e:46:76:d0:90:6f:05:4b:01:c6:ff:64:f6:2e:
                    ec:2c:12:2d:62:6c:f3:f9:96:b4:a9:71:37:88:c3:
                    03:3b:42:29:3a:d4:55:ca:30:be:ef:f2:48:14:8e:
                    11:74:95:75:60:7a:ed:3e:87:83:b1:f8:0d:a0:8a:
                    d5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:15:93:4E:1D:97:1F:AE:7B:07:2A:C3:8D:CC:1A:30:55:63:3E:BC
            X509v3 Authority Key Identifier:
                keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:eb:9a:43:ca:0e:b2:86:22:91:5f:0e:95:74:75:91:d7:fe:
         81:f4:30:f2:13:f6:9a:9c:92:5f:d4:a6:d9:7e:b0:47:15:c5:
         9a:62:fd:e6:f4:8b:74:52:e5:d7:60:ee:a0:da:91:54:a6:bb:
         fe:e0:4e:a3:0b:80:2a:cf:1f:ec:27:8c:2e:d1:8b:ec:64:c5:
         07:f8:6e:22:4e:ba:2c:77:ba:bc:af:89:91:7e:b8:d1:6b:a8:
         9b:e5:1b:ba:0e:82:56:8b:fe:83:d1:54:68:e3:f3:75:6a:8e:
         41:79:47:c8:cf:26:44:08:83:2c:d2:67:af:c7:a1:07:48:1d:
         50:8a:08:85:5d:60:84:b1:2a:e7:8f:91:2d:c8:69:ac:3c:2b:
         2c:0c:e9:44:e2:6b:b6:ed:a3:3f:8b:3a:47:3f:cf:ed:91:69:
         f3:63:6e:c0:f9:60:f9:51:20:f1:d9:76:99:77:dd:e4:a0:08:
         ad:a1:b5:eb:1a:2b:8d:52:c6:d8:58:93:c2:7b:f8:6f:60:33:
         f6:33:85:be:49:53:9c:52:9b:f3:38:03:59:97:39:4d:6d:ea:
         2a:f1:12:56:33:21:eb:89:97:50:0a:e3:c6:fa:9b:aa:4c:4b:
         ce:13:c1:48:7d:f9:b0:c0:e6:e3:34:bb:f5:ca:8c:11:1f:c3:
         81:f1:ae:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:39 2024 by rpki-client on console-fra.rpki-client.org