Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
File:                     ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft (raw, json)
Hash identifier:          yvrLquAzr5xrij/4APSXHisUnVHVDUH7HcljEvJYWmA=
Subject key identifier:   9A:3C:7E:32:B1:25:76:96:8B:A8:3C:A0:43:41:82:3F:95:20:BC:9A
Authority key identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
Certificate issuer:       /CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Certificate serial:       02B6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
Manifest number:          02B5
Signing time:             Sat 04 May 2024 01:50:57 +0000
Manifest this update:     Sat 04 May 2024 01:50:57 +0000
Manifest next update:     Mon 06 May 2024 01:50:57 +0000
Files and hashes:         1: ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl (hash: Z/Nu5aEXgzaamqB5VUMdS54KrgwSDbFJpWwRaXTgoNw=)
                          2: 1099B4C6FD6711EC90C697E5F1222468.roa (hash: V2LWr8hmR+58LBjz2rlvTVbnq/B1pL3dqStgUsr8zr4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
        Validity
            Not Before: May  4 01:50:57 2024 GMT
            Not After : May  6 01:50:57 2024 GMT
        Subject: CN=66359481-63a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ce:3e:35:a3:87:0b:fb:07:7d:fb:65:5d:54:
                    7c:06:4a:43:3d:cd:9f:b4:ef:24:1e:5f:42:52:7e:
                    6a:17:2b:38:27:89:46:59:fe:0b:ce:3a:ed:45:a8:
                    12:e8:1b:49:27:db:a3:63:10:28:52:c3:c4:97:ed:
                    5c:61:b6:98:33:56:01:63:6c:ab:6a:68:ad:ff:12:
                    e8:d1:6e:ca:68:b9:17:51:1a:aa:3c:f7:b2:7e:46:
                    d8:5f:88:82:9d:1f:03:35:0b:16:94:ed:44:6d:cd:
                    f2:c9:d9:56:cf:b1:fc:cf:1b:87:b8:a8:d6:2f:e1:
                    b2:3e:f6:e3:ad:d7:b3:0f:17:97:2e:e5:e2:16:be:
                    c2:dd:ad:2a:57:37:ae:8b:1e:ee:0b:bd:0c:eb:94:
                    d7:4b:84:12:1e:cd:02:d5:a1:ed:b3:0f:45:8a:fc:
                    2c:0b:fc:dd:dd:de:d5:11:4d:09:00:dd:cc:53:0b:
                    1b:2f:e0:07:d3:ae:04:b9:bf:00:f3:7a:38:b9:ed:
                    1d:b3:02:a6:fc:7c:33:75:e4:bc:47:74:8e:2c:9f:
                    1b:c0:55:07:5c:e8:2f:2e:34:e2:52:24:9d:3a:df:
                    3a:43:60:a8:38:37:04:3b:cc:c3:5d:b5:d0:35:05:
                    5d:72:14:81:e0:ff:38:43:d4:f1:05:8e:88:77:19:
                    8e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3C:7E:32:B1:25:76:96:8B:A8:3C:A0:43:41:82:3F:95:20:BC:9A
            X509v3 Authority Key Identifier:
                keyid:01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:95:88:47:68:91:3a:10:19:dd:41:81:aa:bf:80:0e:a0:4d:
         87:2a:db:0e:13:9f:2f:7c:b3:7d:bf:dd:17:ca:ce:80:88:ee:
         5f:51:a8:22:60:67:78:fa:65:5e:1f:da:0c:71:8d:93:0b:99:
         50:0f:eb:17:84:d2:40:06:ca:12:2b:61:b3:3f:12:d8:75:84:
         1b:83:20:38:13:9f:b5:a4:1e:6b:f2:49:e0:a6:f7:96:98:8f:
         9f:10:30:e1:92:a8:5a:73:d2:3c:0a:82:28:82:cb:d0:06:73:
         ca:97:8b:d0:52:62:89:70:e5:33:74:da:ce:fb:7b:50:39:f0:
         2a:b6:bf:a6:96:59:09:b4:21:15:27:3e:4c:3b:a3:77:92:99:
         a3:de:b7:8b:8d:52:2f:f2:28:d4:bd:16:5d:3e:51:b6:e3:21:
         69:5d:68:88:5f:b8:01:c2:11:b4:da:4d:c2:23:e3:bf:7b:29:
         1e:7b:ff:4b:cf:2b:cc:02:9b:62:a0:fa:8a:6c:79:a8:90:fa:
         ad:f9:6d:87:84:29:6e:a6:87:71:1d:72:32:c4:0c:7c:2b:a5:
         2d:dc:03:94:15:07:6b:1a:ae:80:5b:88:a6:a5:0d:77:e8:f1:
         ac:ee:77:8d:c4:c8:56:3e:66:a4:b3:2c:93:a3:81:f1:02:5b:
         69:99:dc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:57 2024 by rpki-client on console-fra.rpki-client.org