Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
File:                     iyKehHwjMl1Mwm9Ajx0z5VennW0.mft (raw, json)
Hash identifier:          cgFXJvw7Q5/avSWqo6n0WyX4OvWI9SLSRaqBhpQvHCM=
Subject key identifier:   B7:29:74:BD:4B:2C:69:4A:B3:7E:4C:B2:77:75:34:C7:FA:26:78:63
Authority key identifier: 8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
Certificate issuer:       /CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Certificate serial:       026A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
Manifest number:          0266
Signing time:             Sat 04 May 2024 01:57:47 +0000
Manifest this update:     Sat 04 May 2024 01:57:46 +0000
Manifest next update:     Mon 06 May 2024 01:57:46 +0000
Files and hashes:         1: iyKehHwjMl1Mwm9Ajx0z5VennW0.crl (hash: Ty+X/LWnyYPCn2ojAL8fhBiBg5xUI/Tx9fEMA4kPCJs=)
                          2: B0B575D0A38811EE99CDD37FD25BE465.roa (hash: y9HbwEBl+NGNAhofS3ZJW3Gt7+cXF+yZ56e2tyCUsYg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
        Validity
            Not Before: May  4 01:57:46 2024 GMT
            Not After : May  6 01:57:46 2024 GMT
        Subject: CN=6635961b-bf65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5c:39:40:0f:dd:1e:92:0e:7e:03:03:8e:c8:
                    4d:4b:4a:f4:d6:64:33:22:1d:09:f2:02:f7:e8:36:
                    74:fe:84:d4:62:c2:0c:fb:ff:69:a5:e1:02:fd:ed:
                    4a:d9:f0:aa:4a:69:4a:45:b2:39:9a:80:26:dc:b9:
                    ed:96:4a:98:1f:90:b0:67:09:76:32:6e:61:41:4a:
                    5f:77:8d:0e:1b:db:2d:bd:b5:96:b1:07:4c:52:68:
                    f9:4d:a3:21:69:70:a3:d3:ee:c7:55:de:75:03:7f:
                    57:7b:a9:d5:af:9a:ba:8e:7f:23:15:e5:ce:03:e4:
                    fc:99:df:1f:b5:a0:80:d1:0a:b2:18:73:7e:f9:07:
                    30:0d:15:59:32:d5:bd:2d:1f:d3:44:19:24:b2:59:
                    09:0d:fa:e5:2e:88:9f:d7:11:de:ad:ec:50:60:ed:
                    ed:8a:89:46:56:ab:06:0c:1c:0d:5e:16:67:02:9e:
                    39:25:a7:ba:9d:1d:a5:5a:24:31:0d:88:76:9c:8b:
                    35:0e:ef:d6:91:af:9c:78:e6:8d:6b:ab:c6:33:e1:
                    08:22:e4:1b:aa:79:7b:9f:c9:67:2b:5e:5d:29:6c:
                    79:de:34:ea:90:27:5c:d3:60:50:95:6b:7e:af:c1:
                    0a:4f:d1:a2:bf:2d:32:14:3c:c2:5b:fe:c3:41:30:
                    18:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:29:74:BD:4B:2C:69:4A:B3:7E:4C:B2:77:75:34:C7:FA:26:78:63
            X509v3 Authority Key Identifier:
                keyid:8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5c:79:e1:14:82:d2:ed:9e:0f:e7:f2:2f:a6:20:8a:3d:fc:
         94:21:c6:8a:1a:99:65:93:f2:d5:9e:c9:93:72:78:b1:f0:a5:
         e1:34:8e:3c:37:7c:20:b2:e9:dc:40:e1:25:42:c9:7b:86:de:
         25:99:bb:ed:c1:ca:9c:ee:7f:fd:2e:f3:1e:68:0a:7c:ff:74:
         f1:49:1b:05:5a:49:91:24:47:7b:53:5b:33:2f:d0:8b:ba:5f:
         5e:44:b1:2f:8b:3a:62:5e:2f:ce:ac:9a:bd:43:99:b5:a7:43:
         fe:0b:ac:21:be:24:8b:08:32:e1:8e:fd:c5:da:ff:7f:51:9d:
         d8:df:82:d9:fe:50:39:50:35:87:5c:be:99:90:83:8a:3f:3f:
         32:e6:ab:91:9a:be:f0:51:6a:c0:e9:2e:8f:e0:ec:22:3e:ac:
         fd:14:d7:10:6d:92:ba:50:fe:53:1a:78:fe:7a:c5:9f:f7:10:
         14:51:5b:0f:d9:36:b5:4f:56:33:6b:87:04:2f:e9:1a:0d:14:
         e3:01:7a:b8:87:d5:24:e8:0d:76:c8:46:7f:2e:5a:d2:fe:71:
         1c:76:21:71:7b:b2:3a:48:94:02:00:d1:c4:d6:31:aa:db:48:
         2f:25:72:ef:db:c6:fd:d7:03:eb:70:0f:61:c2:fd:a9:17:e8:
         c2:73:5a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:06:03 2024 by rpki-client on console-ams.rpki-client.org