Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
File:                     x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft (raw, json)
Hash identifier:          AVt36M/qcYOuVsyapOnARYRYjspMf+DuWOwUgTyMQt4=
Subject key identifier:   BC:E6:1B:CE:B2:9D:9F:46:51:87:1B:6F:0A:A7:7E:0B:8E:CF:65:A6
Authority key identifier: C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86
Certificate issuer:       /CN=F36C629BAF/serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
Certificate serial:       0185
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
Manifest number:          0182
Signing time:             Thu 21 Nov 2024 02:29:53 +0000
Manifest this update:     Thu 21 Nov 2024 02:29:53 +0000
Manifest next update:     Sat 23 Nov 2024 02:29:53 +0000
Files and hashes:         1: x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl (hash: 4QxYinKEag9FaWPKO9pRXdcCBXJ/Lsp0YVS2e2r8yK8=)
                          2: B2D67FBC81B811EFBF661993762E951A.roa (hash: uoPtPDn/rbTQRBGn7Sv62W9Z11akCbhfrMo3RcO5nHI=)
                          3: 566028A281BB11EFA2B4C6A4762E951A.roa (hash: sff2TxKKkLZbomvR8u92IEB7S8eTuT8nC5FtfM/Fsf4=)
                          4: D54273E281BA11EFA327CDA0762E951A.roa (hash: 5R8cd2x4uz0VmbtOqIFPktz58DCFoYAlE0EfcBaZH7c=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C629BAF/serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
        Validity
            Not Before: Nov 21 02:29:53 2024 GMT
            Not After : Nov 23 02:29:53 2024 GMT
        Subject: CN=673e9b21-38ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:34:97:48:5d:5f:2c:47:a8:53:5c:1f:76:4c:
                    c6:98:a0:a8:ca:1f:07:15:0b:d7:e8:74:1c:ae:0a:
                    ae:66:bb:99:53:5b:74:24:42:5b:cf:d0:78:76:01:
                    16:50:b9:71:eb:2e:fa:ed:29:bb:89:b5:bf:4e:a2:
                    04:e1:62:08:53:cc:2b:7a:f7:00:8c:d4:57:d4:4f:
                    4c:81:89:78:b6:9f:46:22:91:70:de:6a:ab:55:d4:
                    e4:dd:8a:36:cd:82:2f:81:92:bf:02:1d:97:98:80:
                    bc:ca:b2:cc:c7:c5:44:52:f0:42:c8:c0:47:30:18:
                    29:87:14:d5:47:f9:78:8e:15:0a:b3:b6:62:99:fe:
                    6d:b4:f8:ca:80:b2:e2:ac:78:5d:9b:fd:88:89:8e:
                    3e:83:0c:fa:b6:0e:cb:a9:a7:eb:d3:ba:b6:fa:67:
                    80:a6:ab:dc:f0:b2:62:64:6d:f0:4e:d2:68:9b:3d:
                    47:c0:25:cb:73:da:8b:6c:f7:d4:ac:c3:c2:a3:e3:
                    dc:ee:5c:3b:27:29:b6:9f:32:ba:0b:71:99:ec:21:
                    b9:5d:fd:b8:76:46:4c:46:a4:e6:55:26:00:06:ae:
                    0b:32:6e:f2:db:04:5b:e2:d0:1f:82:5d:c8:15:18:
                    f6:71:36:16:fe:59:22:13:0c:52:b3:14:a1:d4:57:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E6:1B:CE:B2:9D:9F:46:51:87:1B:6F:0A:A7:7E:0B:8E:CF:65:A6
            X509v3 Authority Key Identifier:
                keyid:C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:bc:ae:78:09:a5:85:30:3a:bb:3a:43:c0:62:6e:50:e5:c1:
         77:83:53:e5:13:84:73:8f:69:9b:ca:35:3c:05:44:09:de:9e:
         36:1f:fd:80:61:19:fc:65:44:43:17:b3:34:b0:f8:51:74:5f:
         9a:23:9f:75:e0:f0:6a:f0:63:1e:63:66:61:ae:92:ab:1f:fd:
         58:53:02:d8:f9:c3:21:80:2f:df:cb:2c:d3:fb:83:8f:ff:bb:
         07:b4:af:d5:81:5e:91:3e:90:41:f0:3f:b7:5f:98:02:4b:6f:
         98:aa:c6:53:8f:26:65:ed:e5:6c:39:e5:4c:c1:26:db:80:d7:
         63:ea:47:69:35:22:99:aa:01:14:47:46:bd:1d:7e:d9:87:92:
         c5:9f:60:e2:b0:4a:64:c1:cc:b0:5e:e0:07:54:68:11:e4:07:
         38:c7:92:bc:ec:7f:f7:88:65:ab:04:8f:1e:e5:09:15:af:7d:
         b0:8c:00:ed:ca:20:1d:18:33:a1:d2:cf:03:6e:59:56:92:74:
         d1:e0:97:a6:97:ec:16:b3:72:b1:f2:c6:96:7f:8f:3f:db:a3:
         60:7c:e9:7b:9e:dd:68:a5:d5:31:b3:de:14:85:49:32:67:fc:
         37:9e:de:cf:22:0f:72:f2:b4:00:a8:79:fd:bc:ef:d9:cf:0f:
         dc:d3:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:22 2024 by rpki-client on console-ams.rpki-client.org