Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
File:                     NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft (raw, json)
Hash identifier:          etnPTo5hfKzUfC0P8zixzThD8DkFZYpP/8cd9dv24iY=
Subject key identifier:   99:00:56:A5:71:05:B9:A9:A9:4E:C0:3E:84:71:03:E9:20:1E:C1:54
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Certificate issuer:       /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial:       0532
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
Manifest number:          052F
Signing time:             Thu 02 May 2024 01:16:58 +0000
Manifest this update:     Thu 02 May 2024 01:16:58 +0000
Manifest next update:     Sat 04 May 2024 01:16:58 +0000
Files and hashes:         1: NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl (hash: 3sMlmSNYS3S2U6qAYzjyL+b/y+UcZD0UYCiOk6UpP74=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330 (0x532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
        Validity
            Not Before: May  2 01:16:58 2024 GMT
            Not After : May  4 01:16:58 2024 GMT
        Subject: CN=6632e98a-0a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:13:3e:80:c0:2b:26:cc:b5:c9:3f:4c:c0:0f:
                    12:c5:2e:2f:c1:0c:8c:d9:77:18:3d:2d:5e:61:55:
                    e0:57:cf:f1:33:30:e8:33:5c:c6:d0:2e:1a:16:f1:
                    18:06:9e:8a:d0:eb:3d:09:0e:72:f3:11:2c:b4:e9:
                    59:7d:ad:97:5c:f7:4d:91:56:73:cd:b9:4e:c0:73:
                    a5:73:af:53:ed:48:f2:d4:b9:75:35:16:70:b2:27:
                    c2:e0:f6:49:77:61:e2:f3:96:32:64:13:8e:77:3a:
                    fa:c7:e8:37:4a:c2:90:3e:07:da:8b:81:40:49:53:
                    cb:82:62:de:94:9d:6a:83:54:04:92:f7:c1:71:a3:
                    b0:87:96:f7:04:74:bf:69:e0:2f:f0:ae:1f:b9:94:
                    d2:c4:52:10:e2:5f:50:11:0a:cb:17:82:32:ec:29:
                    d9:09:18:90:78:1d:73:e4:06:25:10:9a:6b:09:59:
                    64:f4:8a:fe:e3:8e:39:b2:5b:6e:85:5f:0a:98:dd:
                    82:7a:d0:2e:31:35:9c:51:6e:81:ca:06:c1:0b:a8:
                    c0:5a:25:09:b9:e7:a7:c3:d0:77:0c:01:67:86:64:
                    99:5f:bb:7d:70:2d:52:b2:0f:bf:04:90:0e:ce:38:
                    f5:a5:27:a7:8d:2e:14:99:5c:48:9f:97:d3:86:78:
                    6f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:00:56:A5:71:05:B9:A9:A9:4E:C0:3E:84:71:03:E9:20:1E:C1:54
            X509v3 Authority Key Identifier:
                keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a2:8b:29:a4:c4:99:99:bb:57:16:55:04:16:51:85:27:22:
         cf:9c:44:a3:14:73:45:b0:ae:53:e8:61:20:5c:ed:e6:a1:9b:
         e0:13:86:25:04:22:10:9a:7e:17:80:e4:0a:9a:bb:14:4f:39:
         71:cf:ea:27:51:c2:93:83:53:7f:1c:f7:e9:d7:a5:17:82:27:
         44:06:77:70:b1:b2:69:7e:55:dc:c2:09:a6:5e:63:bd:c1:e1:
         bd:31:7c:a8:bf:61:a2:3e:dc:a4:41:17:50:41:05:42:3f:37:
         a3:cc:4c:31:87:41:a3:6c:21:ec:df:e1:5e:aa:99:a5:50:22:
         45:11:87:6b:5b:dd:45:9d:12:e1:d1:1c:93:94:84:68:6f:f3:
         11:fd:b8:7e:a3:9c:eb:a0:51:2b:88:7f:cf:4d:15:b3:20:96:
         9a:7b:52:fa:06:18:24:f4:50:7e:24:ef:4a:3e:bd:4e:5c:ac:
         27:e9:4e:2c:18:6e:21:ea:0b:aa:83:40:33:6f:05:61:dd:91:
         bd:00:ca:0a:63:eb:8e:3b:01:cd:df:e3:29:ed:0f:19:5a:28:
         f9:df:ae:47:3c:5e:b0:38:f6:de:66:2a:ec:6c:5d:6f:7b:67:
         df:d1:19:b9:cb:86:77:03:5c:ab:d0:8f:38:80:dc:3d:6a:3a:
         7b:43:a0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:04:27 2024 by rpki-client on console-fra.rpki-client.org