Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
File:                     NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft (raw, json)
Hash identifier:          6TgVa7VE/4CwM91mgFzEYxLhaGp47NNMWVhkMFEVLcM=
Subject key identifier:   15:64:99:65:DD:86:99:15:F4:79:98:A9:67:5A:13:92:CF:E9:CB:48
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Certificate issuer:       /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial:       0603
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
Manifest number:          0600
Signing time:             Mon 25 Nov 2024 01:21:10 +0000
Manifest this update:     Mon 25 Nov 2024 01:21:10 +0000
Manifest next update:     Wed 27 Nov 2024 01:21:10 +0000
Files and hashes:         1: NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl (hash: EixeC/OQjkDA/je7Iwh+qDMSxt7hE18OCOfDcgFnLyg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
        Validity
            Not Before: Nov 25 01:21:10 2024 GMT
            Not After : Nov 27 01:21:10 2024 GMT
        Subject: CN=6743d106-c87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:00:1c:b7:18:25:6e:76:4f:2a:fd:60:13:
                    21:a0:94:93:7c:d0:d9:78:bc:88:fe:c4:87:a2:1a:
                    4b:de:4a:0d:d9:0c:0a:4f:51:4a:9d:3c:50:de:f6:
                    27:3f:23:e2:03:b3:a5:b8:32:75:94:0d:aa:82:21:
                    75:ce:d2:9f:7f:a7:41:0f:be:30:42:5e:4c:a9:72:
                    ce:61:06:be:02:22:c5:63:82:e7:0d:a7:e6:7e:2c:
                    eb:6c:c2:a8:d3:11:9e:17:2e:03:1c:4b:2b:86:05:
                    d0:be:85:3b:41:bb:a4:89:8e:09:b1:01:46:a0:d3:
                    3c:96:4f:18:6f:65:37:30:1f:98:11:b9:21:8c:54:
                    e8:e2:e2:91:55:23:19:fb:7a:7b:94:23:5f:16:2a:
                    b5:77:5d:f2:00:f1:b7:63:eb:55:49:55:8a:6d:fc:
                    cb:83:72:28:24:11:cb:45:4f:24:2e:0b:1a:fc:7d:
                    18:a1:a7:f6:30:41:b7:7a:87:fa:2d:4f:4c:af:0b:
                    7c:eb:11:fe:ce:70:44:d9:3e:4d:ef:29:ca:ec:69:
                    9c:a2:49:35:e8:19:1c:3c:c5:e9:ad:2e:fc:fe:0a:
                    df:9c:62:dc:e8:ac:bb:1a:3a:f5:a7:8f:d5:b6:83:
                    f4:60:37:99:00:93:cc:9e:44:33:6d:ce:b7:7d:1a:
                    e4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:64:99:65:DD:86:99:15:F4:79:98:A9:67:5A:13:92:CF:E9:CB:48
            X509v3 Authority Key Identifier:
                keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:26:3a:5f:78:fb:c6:71:66:1f:b7:f0:99:6b:5d:6d:1c:0e:
         b0:92:00:6b:2f:f8:8a:59:a0:8d:b2:17:86:97:07:f7:97:6b:
         9d:3b:8e:1b:e9:7b:d8:f9:18:0e:9b:d8:19:a8:96:06:73:25:
         fc:ed:c5:97:8e:06:06:04:c6:1c:81:f8:61:61:5e:40:b7:dd:
         89:9b:75:b3:01:e5:b5:07:2b:ae:95:e1:83:43:b5:33:be:d0:
         2b:5c:cb:54:27:7c:95:c5:68:44:bb:de:db:b9:dd:5e:f8:87:
         71:f7:78:c6:67:d6:f6:a4:30:72:b8:17:1c:7b:83:32:4c:54:
         0e:85:1e:cb:a6:b7:a7:0a:39:0d:d0:12:0f:0f:74:01:8f:9c:
         c4:c0:f0:34:0e:0d:51:84:03:0b:50:7e:75:de:1d:89:48:da:
         1d:ca:39:f5:40:a1:6e:94:93:0c:6c:a9:3d:4c:88:b5:b7:37:
         fc:f6:06:d9:05:86:9a:db:11:17:0c:c0:9c:f9:03:82:a9:85:
         c9:03:aa:3f:1a:70:10:ed:70:40:27:bc:11:5b:57:ed:9b:cf:
         61:c4:4e:c4:79:51:6e:19:3c:29:bd:29:e2:51:9a:84:c2:1c:
         3e:ac:a6:ca:64:6b:76:19:d9:7c:6d:4c:c4:e9:c8:20:4b:0b:
         a9:80:e3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----