Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
File:                     zr6Z7rC-POjbGbpEdmyj48gHqYk.mft (raw, json)
Hash identifier:          ND+Rbyt+uiPn858Gm/ejXQV21HRegnwvk0GVDeeJc4Y=
Subject key identifier:   03:29:36:D2:C4:BA:D2:6F:06:4A:E2:61:B7:8B:91:19:1E:CE:22:44
Authority key identifier: CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89
Certificate issuer:       /CN=F36C4A3BAF/serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
Certificate serial:       0158
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
Manifest number:          0157
Signing time:             Thu 21 Nov 2024 02:32:24 +0000
Manifest this update:     Thu 21 Nov 2024 02:32:23 +0000
Manifest next update:     Sat 23 Nov 2024 02:32:23 +0000
Files and hashes:         1: zr6Z7rC-POjbGbpEdmyj48gHqYk.crl (hash: EeFJcK3SNaDy7KBJD0IJIDhNaZ+2/D0FpfLJvkBbHR4=)
                          2: B4ABD18CA48E11EEB808FE65D25BE465.roa (hash: S5XSL+t01DymTgJeqFWNkxH4TrI/NWZhOLYNwLD+7Qs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4A3BAF/serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
        Validity
            Not Before: Nov 21 02:32:23 2024 GMT
            Not After : Nov 23 02:32:23 2024 GMT
        Subject: CN=673e9bb8-4160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:97:a1:3d:5b:f0:b6:db:2f:7e:ad:90:99:
                    20:d1:c3:38:00:82:38:1d:00:0b:51:0f:3b:96:11:
                    85:b3:4d:29:11:41:7c:bf:bc:50:7f:73:c7:03:a6:
                    75:f5:c2:87:83:dd:b7:f2:d8:dc:e1:ca:8c:07:d8:
                    72:83:39:80:89:b0:6c:f8:b4:4e:38:1d:33:14:43:
                    a2:50:da:5d:59:21:c7:88:43:9b:ad:74:df:2f:bc:
                    aa:75:e1:6c:37:f8:ba:ec:e8:9d:00:8e:52:66:9a:
                    28:c0:c0:45:02:5b:4d:3c:88:63:d9:e2:34:72:7b:
                    52:20:dd:2d:49:09:90:01:db:aa:fc:6a:0a:37:06:
                    77:80:bf:e6:4c:92:0b:df:aa:69:8e:23:00:00:72:
                    09:bf:bb:83:32:3f:f5:ff:e6:cf:c6:22:87:e4:92:
                    d1:f7:f6:41:87:27:16:7e:32:c3:ea:8e:d9:55:9f:
                    a9:33:62:90:64:05:fc:cf:dc:5c:a1:ca:be:ab:0d:
                    fa:c4:59:bf:65:22:26:9e:96:da:67:ec:ac:b8:41:
                    65:29:b9:e9:12:b0:73:22:e2:39:46:a8:cf:4c:98:
                    1c:45:ce:40:60:09:ba:b0:cd:34:cb:44:1d:c4:7d:
                    52:6d:43:96:53:2c:11:de:cb:7e:41:5c:f4:82:82:
                    a5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:29:36:D2:C4:BA:D2:6F:06:4A:E2:61:B7:8B:91:19:1E:CE:22:44
            X509v3 Authority Key Identifier:
                keyid:CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:34:cd:a9:bc:65:ca:4f:a9:06:e9:74:d4:fa:74:54:cb:78:
         55:94:80:61:e1:29:95:68:30:9c:06:1f:82:5b:c6:12:ec:ab:
         f3:b3:b8:9c:25:21:14:44:0f:22:0e:d9:e5:f8:65:b9:67:3e:
         6e:74:1a:a0:80:1d:9f:7c:0f:da:8e:66:b7:c9:26:72:a4:0d:
         06:4c:b9:d6:9c:4c:1e:20:f3:a3:d1:d5:ae:b2:e6:56:01:2c:
         2f:24:6e:b4:46:b7:4f:c3:59:7e:58:a0:f6:1a:27:26:51:44:
         41:3b:a2:48:e1:cc:f9:2d:d0:2d:c4:22:4a:1c:3d:a3:60:56:
         72:8d:bd:45:04:dd:7b:9a:43:1b:d8:6a:78:d4:14:53:e5:47:
         c5:2b:11:d7:47:0a:58:62:4b:5d:b6:00:c8:e6:80:44:a7:a1:
         a4:64:de:d9:d2:71:2a:99:b2:c4:be:82:8f:92:f7:ba:ef:6b:
         ac:41:27:fd:e2:1e:66:10:c0:fb:34:19:62:a1:06:c9:7e:a2:
         a2:7b:61:48:54:52:b9:d7:47:1c:44:30:de:4b:d7:d0:f1:55:
         40:83:0d:b4:09:0e:dc:f7:5d:3c:01:0b:2a:c0:ea:3f:84:fc:
         54:fc:0b:d4:0a:74:86:23:46:32:2c:af:ec:c7:12:b1:17:88:
         77:60:16:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:52 2024 by rpki-client on console-fra.rpki-client.org