Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
File:                     yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft (raw, json)
Hash identifier:          RQtjsBaopi1wdO0qv4cYXk6qZvLSldjhy+cEclUuA/g=
Subject key identifier:   EB:6F:3C:4E:9A:66:8F:EE:EC:A3:8F:92:97:43:E7:17:A7:69:FE:F0
Authority key identifier: C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF
Certificate issuer:       /CN=F36C38D9AF/serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
Certificate serial:       FB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
Manifest number:          F8
Signing time:             Mon 27 May 2024 02:21:45 +0000
Manifest this update:     Mon 27 May 2024 02:21:45 +0000
Manifest next update:     Wed 29 May 2024 02:21:45 +0000
Files and hashes:         1: yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl (hash: 4nAy4Xy+fpC4vP+q1nc6Agbzlm2ZZ7NLUuC+TOQLZZQ=)
                          2: 04EB056A6ABE11EE9E4243804AD9E6FC.roa (hash: EyVlkSGybf5bnAy71sGPmJ47rqIPQfEXtljbaai4c88=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 May 2024 00:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C38D9AF/serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
        Validity
            Not Before: May 27 02:21:45 2024 GMT
            Not After : May 29 02:21:45 2024 GMT
        Subject: CN=6653ee39-36c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:64:2b:ca:2d:84:45:c3:3d:1c:59:21:94:
                    b4:9a:67:14:2d:e5:fd:f2:82:9c:66:d3:69:f2:9e:
                    7f:8b:3c:5e:51:71:c7:71:9f:a1:e5:df:c3:fa:4a:
                    ba:87:59:4d:22:0e:67:9a:51:25:7e:0f:2e:bf:3e:
                    6b:e3:74:ea:da:65:36:f8:72:41:72:a2:a3:9b:75:
                    4a:e7:24:66:37:50:4f:7e:02:e3:b0:65:cf:6f:bf:
                    32:17:88:c2:9f:79:ef:8e:e1:fd:92:f6:6b:72:83:
                    f5:63:1b:68:a4:99:3b:1d:74:cc:16:c8:65:d5:9b:
                    2d:58:bf:1e:b3:5d:44:4c:f8:63:0c:1e:dc:e6:12:
                    80:c8:0c:b2:d7:10:41:c7:ee:1a:6c:e5:8b:f6:4e:
                    b3:bf:07:04:b0:07:09:67:a5:71:4a:15:77:5e:f1:
                    df:f0:ee:52:59:4c:2d:8e:76:67:9f:7b:4a:93:90:
                    23:f7:62:b8:9a:db:bf:34:47:10:b6:1b:34:cf:05:
                    33:6f:36:4c:c9:5c:00:b0:7c:1d:c3:fa:6b:a7:29:
                    d5:13:12:e5:87:d0:12:ce:68:99:2e:32:73:98:46:
                    c5:30:71:13:1d:2d:04:3d:53:3d:b7:dc:32:96:77:
                    12:5f:76:95:1c:fe:55:4c:4f:fe:0c:e6:9d:4f:3e:
                    a5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6F:3C:4E:9A:66:8F:EE:EC:A3:8F:92:97:43:E7:17:A7:69:FE:F0
            X509v3 Authority Key Identifier:
                keyid:C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:05:c4:4c:89:05:00:b8:7b:fa:8c:52:ce:21:d9:4a:a4:9a:
         b0:e0:f3:3b:7a:dc:f0:56:7b:79:8a:21:f9:7e:36:dc:46:80:
         84:a7:0b:5d:80:25:73:96:88:1d:f4:9d:74:6b:de:ed:56:66:
         f6:3c:1b:8c:48:94:29:c2:44:36:a3:ff:5f:4e:cc:b7:9b:14:
         a8:05:f9:9b:50:9b:65:3d:75:08:b5:04:9a:3e:32:d1:57:5c:
         54:bc:91:28:06:84:c5:70:a2:7f:fe:03:96:3d:7d:16:26:1a:
         7b:43:b3:36:56:02:95:17:9c:bc:1d:ad:73:76:45:39:41:af:
         ff:a9:e9:91:db:bb:c6:d2:1e:b2:43:96:6c:e7:ba:87:1c:4b:
         31:1e:4a:8f:d7:73:ee:e4:ce:0d:e5:94:3b:0e:7b:b2:49:99:
         70:0f:8d:fd:9a:b2:79:9e:a7:7a:8e:56:1c:3a:f0:31:3f:aa:
         49:a5:82:f4:7f:56:62:ae:02:65:f2:86:9d:eb:0e:3a:1d:1e:
         aa:77:a6:19:4f:3e:11:5e:8e:e9:4c:17:48:81:0f:17:b4:6a:
         06:a5:a3:2c:18:3d:d8:1b:07:70:5b:24:3f:7f:65:9c:04:52:
         48:ab:38:b5:ee:c3:33:d2:66:9a:d5:d2:39:c1:47:db:dd:0e:
         bb:1d:8a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:56:58 2024 by rpki-client on console-fra.rpki-client.org