Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
File:                     2dbgTePDYTvOHbKdd8ahOIrEIj0.mft (raw, json)
Hash identifier:          I/9/spVmPosNSW+qmDUtVTlxMFFzgtwUYO/uOCz1KNA=
Subject key identifier:   53:91:E7:59:C5:A0:95:C4:B7:09:61:09:9A:31:7E:79:64:DB:28:04
Authority key identifier: D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D
Certificate issuer:       /CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
Certificate serial:       0199
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
Manifest number:          0196
Signing time:             Thu 21 Nov 2024 02:28:35 +0000
Manifest this update:     Thu 21 Nov 2024 02:28:35 +0000
Manifest next update:     Sat 23 Nov 2024 02:28:35 +0000
Files and hashes:         1: 2dbgTePDYTvOHbKdd8ahOIrEIj0.crl (hash: nkFsXjQNfZNJq8LEbvQx7O1vx9TIAqq35r5byPmJZh8=)
                          2: B56502AE36B211EFAA421B5E762E951A.roa (hash: pW3bMqz4FHfQnjso9ES+xBDe7OZbTMlRNhZcJvVAqsk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1E88AF/serialNumber=D9D6E04DE3C3613BCE1DB29D77C6A1388AC4223D
        Validity
            Not Before: Nov 21 02:28:35 2024 GMT
            Not After : Nov 23 02:28:35 2024 GMT
        Subject: CN=673e9ad3-d5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:22:18:75:32:32:cb:6d:d6:58:38:9d:3e:9b:
                    0b:51:a5:0a:f5:52:0d:d8:c6:a6:31:4c:50:79:e4:
                    0c:c5:4a:c0:62:60:15:46:5c:01:3f:65:0f:cb:49:
                    db:7a:11:1f:7b:bd:31:6a:04:9e:4f:85:47:74:c5:
                    15:68:25:c8:72:4f:ff:7e:c7:05:30:bb:8d:75:3d:
                    c4:6b:43:1f:05:4e:13:87:0e:b7:1f:2a:da:06:44:
                    7f:53:14:e4:0d:5a:47:3e:88:12:a0:62:f0:d0:f9:
                    df:7a:19:92:ee:9a:0a:74:40:04:ad:99:7e:c1:88:
                    8e:5a:bd:20:a9:a2:a0:4f:37:bf:7b:15:a3:e5:1b:
                    94:ac:d6:3b:c0:e8:ee:9a:69:40:2d:f0:26:81:13:
                    8f:ec:6d:00:bd:bb:48:d9:31:df:70:8f:e9:69:dc:
                    be:9b:ec:70:5f:43:13:09:21:2f:6b:75:24:63:76:
                    cd:d0:72:d4:1e:ac:45:47:b2:f1:72:2d:f0:aa:26:
                    48:f6:37:e3:0d:2d:de:90:2b:05:e1:5f:f2:01:2e:
                    c4:09:fe:e1:68:65:4d:3d:cc:ff:04:e1:50:bb:3e:
                    7b:3f:77:ed:83:e0:a5:81:02:44:3e:fa:82:39:41:
                    20:31:75:04:67:57:c9:8c:64:86:57:d2:da:95:91:
                    49:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:91:E7:59:C5:A0:95:C4:B7:09:61:09:9A:31:7E:79:64:DB:28:04
            X509v3 Authority Key Identifier:
                keyid:D9:D6:E0:4D:E3:C3:61:3B:CE:1D:B2:9D:77:C6:A1:38:8A:C4:22:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2dbgTePDYTvOHbKdd8ahOIrEIj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/213AEA8278E711EEB495563C4AD9E6FC/2dbgTePDYTvOHbKdd8ahOIrEIj0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ab:0d:8a:79:3d:c7:f6:ea:1e:4e:c2:c2:da:7e:29:c4:28:
         5b:e9:86:a3:ed:19:77:aa:cd:b0:70:67:e4:3d:97:34:3f:df:
         7e:37:6a:39:69:3a:72:7b:18:49:68:4f:02:f0:95:0e:75:78:
         74:8e:7f:27:78:92:7d:98:19:52:5b:c9:db:28:c4:26:a9:4a:
         e4:98:03:dc:62:7c:32:0c:21:9e:bd:87:92:17:00:d2:2a:0d:
         f4:61:03:2e:43:0c:fd:77:21:4f:38:fb:b6:07:ee:74:de:40:
         a9:3f:da:ce:8d:8d:5d:ac:80:09:1b:c8:c5:c3:1c:ac:00:fa:
         a1:51:f7:04:70:31:ce:bc:3a:10:89:bc:a4:37:00:31:f5:f8:
         7e:25:9b:b0:00:7f:67:f4:14:d9:5b:d4:eb:81:c1:ca:18:0f:
         50:8e:6c:79:65:d9:cf:c9:4e:3d:22:52:c9:7c:1b:ee:90:8e:
         57:a0:7d:b6:cd:31:0a:fd:f7:66:55:90:31:4d:4d:d0:d5:8f:
         f7:f8:ae:2f:c1:14:09:8e:5b:49:e4:46:6b:c2:51:f4:f8:64:
         7c:da:1e:79:18:63:5d:33:1d:19:fb:49:54:bc:72:2f:a8:90:
         82:b3:13:94:ca:6c:09:bc:69:3e:7b:34:df:21:52:a7:64:55:
         aa:f1:d8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:20 2024 by rpki-client on console-ams.rpki-client.org