Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
File:                     bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft (raw, json)
Hash identifier:          Vts6VdTqUy/bu9XVjZu0BDwCkNBzAyFdZVtFsvhszpo=
Subject key identifier:   2F:EB:53:CB:31:3C:65:D4:D2:6C:D1:C8:B3:F4:FB:DD:A5:92:5B:BB
Authority key identifier: 6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE
Certificate issuer:       /CN=F36C3584AF/serialNumber=6C0B46384E939A20D778364656645013B5F766FE
Certificate serial:       025F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
Manifest number:          025F
Signing time:             Thu 21 Nov 2024 02:13:46 +0000
Manifest this update:     Thu 21 Nov 2024 02:13:45 +0000
Manifest next update:     Sat 23 Nov 2024 02:13:45 +0000
Files and hashes:         1: bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl (hash: gy7SSavCH99I5HRr7ydHd/3gQ4Yjtyiau5/pSS79Ypo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3584AF/serialNumber=6C0B46384E939A20D778364656645013B5F766FE
        Validity
            Not Before: Nov 21 02:13:45 2024 GMT
            Not After : Nov 23 02:13:45 2024 GMT
        Subject: CN=673e9759-794a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:89:d0:c8:1a:e5:c7:b6:7d:4c:3b:cf:3f:
                    6e:5b:cc:64:33:e9:02:cc:56:b9:63:00:f7:be:f1:
                    84:6c:fd:6d:6d:ad:28:e9:38:16:d6:f0:de:26:80:
                    b3:9c:5a:4e:af:87:94:e6:77:1f:ea:b2:cd:86:d2:
                    af:5b:0f:79:2d:21:80:a2:a5:ae:a9:35:13:59:57:
                    8d:91:77:21:c6:d8:a9:ea:ca:9a:de:8c:07:bc:67:
                    aa:f8:7b:72:d2:55:22:aa:01:be:4b:c3:f8:48:a6:
                    f4:51:11:30:88:e4:9d:a2:87:23:f8:85:2c:08:3a:
                    78:1a:a3:10:d1:03:ef:50:9e:a6:8b:5e:3d:58:37:
                    ed:14:ad:39:fd:8a:b3:e0:4a:bd:0a:51:95:0b:de:
                    34:73:6c:69:2a:3e:62:51:70:ce:43:36:08:60:fa:
                    ff:81:d7:fb:71:3f:48:c2:d9:30:14:e9:c4:f2:68:
                    53:7b:22:1b:c5:56:2f:f5:c8:6f:2e:aa:0d:c2:bf:
                    7e:c5:87:4e:74:b9:36:01:7b:53:33:d1:26:bd:0a:
                    5a:f5:56:40:ab:45:be:0b:6c:a4:a1:84:b9:0c:de:
                    7d:a0:8a:56:82:bd:33:68:ff:55:bb:56:8a:93:46:
                    0d:7d:c3:b6:74:4c:40:34:70:05:6f:6f:42:a4:de:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EB:53:CB:31:3C:65:D4:D2:6C:D1:C8:B3:F4:FB:DD:A5:92:5B:BB
            X509v3 Authority Key Identifier:
                keyid:6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d0:b0:a0:1b:a1:88:cd:80:0b:13:32:30:61:48:30:d7:36:
         23:de:a5:fc:9c:9c:4a:b1:38:b1:c0:d9:00:bd:a9:59:52:c2:
         85:57:62:a6:54:13:92:f0:3b:47:cf:de:c8:63:a8:bd:25:d6:
         a6:12:74:e2:87:83:69:0d:37:6d:b0:de:3d:c2:dd:18:d5:c8:
         27:6f:9f:6b:63:4a:7b:f4:64:b6:30:bf:01:c1:0d:eb:49:3c:
         8b:fe:1f:ee:f2:16:92:4e:b1:94:f0:d7:64:35:f7:79:96:09:
         fa:4f:01:1c:bf:2f:75:c5:13:42:0c:f2:dc:ca:e5:50:d5:4e:
         38:0c:03:6d:20:ff:46:28:52:17:d6:48:8c:95:28:b4:5a:e0:
         66:4d:e8:72:c7:fa:5a:40:13:9b:59:a2:b2:f2:8e:98:5e:ec:
         b6:6d:a2:0a:5f:f3:bf:9c:2d:3d:24:6f:49:48:84:81:5c:9c:
         1d:c7:f9:78:24:31:d4:50:27:e5:ea:bd:d3:54:32:0a:57:2e:
         fe:c8:e5:f0:db:f1:04:48:21:da:2b:27:17:0f:83:01:46:a8:
         1a:f5:94:17:46:11:46:66:34:14:a8:b7:e0:4b:77:3c:24:89:
         1e:0a:dd:c9:d1:a7:bd:1c:61:f9:0a:08:4f:86:60:21:c6:2c:
         72:54:c0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:20 2024 by rpki-client on console-ams.rpki-client.org