Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          pLMv7QMxqO9NuHyak/gboD3Y36CXv9wsq18DlaSGDh0=
Subject key identifier:   51:BD:A8:41:71:0D:F6:16:25:5A:4C:E0:CD:4B:6F:C3:38:84:16:F0
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       78
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          77
Signing time:             Mon 16 Sep 2024 02:46:02 +0000
Manifest this update:     Mon 16 Sep 2024 02:46:02 +0000
Manifest next update:     Wed 18 Sep 2024 02:46:02 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: WcGgThKPTVQnKrPDpCJZ0FJkQhFY4bOWgu2iBJ/uCYM=)
                          2: 5E52EDD81C4911EFA98F9E317DDC24C2.roa (hash: Zixh/aFPuo2zs0C1hGvWJdvczTuAhUvvaA1FyHi6zv8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Sep 2024 00:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Sep 16 02:46:02 2024 GMT
            Not After : Sep 18 02:46:02 2024 GMT
        Subject: CN=66e79bea-41ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dc:47:cd:ff:19:bf:df:1c:8c:3d:42:da:53:
                    c4:f4:2b:00:ec:5a:74:94:96:2f:dc:4e:48:cb:ac:
                    69:d1:12:27:53:af:cb:12:14:d2:4d:0a:ff:27:7e:
                    db:1f:c5:ab:4e:f0:b4:a9:39:32:ad:89:cd:15:14:
                    f5:27:d8:60:cc:84:a3:40:cc:da:8b:db:26:0e:e7:
                    c7:c9:40:ba:f6:26:04:48:57:df:a9:41:cb:0e:5b:
                    80:a3:d5:5f:ba:d2:ec:83:07:31:08:c0:e9:2c:cf:
                    bd:ba:fe:21:e9:53:e4:67:bf:76:8b:72:16:60:4e:
                    12:30:cf:29:bc:d9:63:9d:f2:70:26:a0:47:19:6b:
                    0a:ca:26:99:c2:88:a3:4d:52:42:72:88:ac:1a:12:
                    62:5c:09:54:4f:4e:00:aa:16:30:6c:71:9c:c8:d5:
                    bc:d4:6f:68:a1:dc:7c:8b:27:d8:e9:43:a6:a9:4f:
                    04:05:31:35:a0:20:83:f1:d8:a6:43:3a:fc:fd:db:
                    7a:db:7a:da:bc:c2:a8:ee:ed:cf:24:fc:ef:ed:f3:
                    93:d5:1e:69:f2:3a:9c:8a:d6:01:7e:7e:43:b4:ae:
                    6e:60:2e:a5:69:52:dc:50:c9:e8:d4:d9:55:17:3c:
                    0a:62:b8:50:07:9d:8f:72:d6:c2:11:22:28:22:7e:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BD:A8:41:71:0D:F6:16:25:5A:4C:E0:CD:4B:6F:C3:38:84:16:F0
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:16:bb:ed:f3:2d:88:3f:a3:e3:ea:16:0d:02:c8:52:72:08:
         b5:bb:7e:ee:a7:5d:80:91:db:04:5e:ce:78:bb:82:f0:9a:9e:
         fc:0a:15:f5:5b:da:9f:1a:a1:04:cd:f8:88:12:b0:6d:10:90:
         56:41:40:92:ec:3f:ff:73:ca:c7:e9:fd:c8:95:85:01:6c:68:
         eb:ca:6f:98:9b:7c:83:1b:c1:91:81:84:af:5c:13:39:f4:1c:
         f5:2b:d0:5c:1c:4d:81:0c:f5:7c:3c:e8:26:b0:26:36:28:3d:
         fd:24:d2:61:f2:79:50:31:27:e4:d5:de:d8:2f:7e:2d:27:63:
         ca:52:0e:9d:5d:13:c0:fb:9a:46:97:4d:fe:b5:0a:6b:18:06:
         26:5d:90:d1:3c:11:01:b1:c3:76:ad:42:d3:56:a1:95:fd:9f:
         a0:bc:58:a1:d5:88:c7:a4:08:e0:ed:98:46:0b:3d:11:c6:fc:
         65:30:91:db:97:f1:33:17:cd:a8:fc:37:07:56:8f:08:b5:6b:
         14:69:dc:19:83:aa:17:03:f9:a4:51:ff:6b:e6:03:12:2a:da:
         eb:29:62:7e:f4:96:cd:0c:36:39:73:14:79:d9:2e:f0:3f:2d:
         d6:1e:58:ae:22:5b:60:52:20:d4:22:8a:35:c2:5d:fb:f7:b6:
         ec:9a:95:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----