Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
File:                     6Z6B_I_kh8L4TcmvrcH827QCmvk.mft (raw, json)
Hash identifier:          9SD1xW/LlUJtBdTNNDkZIJJCwKWFyTAg56ZPqimTdBM=
Subject key identifier:   46:17:46:1D:63:E5:55:B3:81:D8:CC:FA:72:A3:33:48:F7:B6:7C:E1
Authority key identifier: E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
Certificate issuer:       /CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Certificate serial:       016F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
Manifest number:          0168
Signing time:             Sun 19 May 2024 02:13:01 +0000
Manifest this update:     Sun 19 May 2024 02:13:00 +0000
Manifest next update:     Tue 21 May 2024 02:13:00 +0000
Files and hashes:         1: 6Z6B_I_kh8L4TcmvrcH827QCmvk.crl (hash: 5SP7F3Nsbo+67+BXQFVKb/BZGIRqBtBWu0Y9jNqmvos=)
                          2: DFF4540A0AAA11EE89915D5A4AD9E6FC.roa (hash: cP9R2Qrl9S1ixebQNGm1g6k1ly30xv1Wd7bXVEu0duY=)
                          3: A20A504A0AAA11EE812F6E594AD9E6FC.roa (hash: G7RsbPwM9vl05EvPa/pSvH1sxjZhrGpa0npEjP9lu34=)
                          4: 03B9356C0AAC11EE9989895D4AD9E6FC.roa (hash: GvzLodpAjODjSMFS5AA5iBQ1yRBDjLhq9pR5HhpCZGw=)
                          5: 20911B1A0AAB11EE98E6EE5A4AD9E6FC.roa (hash: 3LYqrUAm+YgDBSHjb0aEV7V78Rp6eI1SjXprGGtvbe8=)
                          6: 57F065AC0AAB11EE93858A5B4AD9E6FC.roa (hash: 3dH4FpXYKrw/ZxlMDdoPn1emT4uwkIhadIqln0a8STQ=)
                          7: 0D0376880AA611EE969E634C4AD9E6FC.roa (hash: HqtvBW6NArhptDqE2y6MsEyLSvpMvAR33FSX2td8nv0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
        Validity
            Not Before: May 19 02:13:00 2024 GMT
            Not After : May 21 02:13:00 2024 GMT
        Subject: CN=6649602d-d904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:16:07:dd:6a:95:6e:e2:fb:da:9f:b5:39:
                    01:5f:21:ce:06:ed:e3:76:30:6a:ab:1b:b5:a1:2a:
                    13:2f:b1:67:d1:0f:8c:21:7d:62:6b:80:01:6f:9f:
                    12:95:15:df:1a:ed:e6:05:4d:48:cb:4e:a5:c9:b7:
                    58:49:ce:7e:66:07:43:29:9f:5c:1e:db:c3:96:fa:
                    0e:2e:c7:2b:3d:0b:3a:4d:34:18:c5:a9:8a:8c:f8:
                    cf:3a:4f:3e:86:f7:01:7c:32:77:66:90:d6:3f:14:
                    60:23:a0:ec:21:e0:3a:3a:21:c2:88:73:fc:a3:1b:
                    b8:6f:a3:14:86:f0:3d:e8:eb:4a:f7:a1:35:c9:cd:
                    85:e4:1b:2a:18:a4:4f:16:9c:e7:45:42:48:0f:91:
                    6a:35:2b:80:46:8f:f7:9a:ab:ad:52:19:91:20:0c:
                    29:a1:d7:c4:4a:f2:bb:77:78:57:fd:c1:25:89:af:
                    07:c7:bb:32:db:20:66:1d:ca:99:16:e4:92:a2:50:
                    d3:35:e3:da:92:e2:7b:b3:fa:18:81:f9:e2:f7:ba:
                    b0:54:bf:cd:7d:05:23:b7:7b:4a:56:f6:b1:5a:ca:
                    85:87:49:a5:fa:b6:14:47:03:e9:a2:da:b4:cf:ac:
                    48:7d:20:20:79:5e:82:af:da:7b:53:f1:45:50:ed:
                    ac:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:17:46:1D:63:E5:55:B3:81:D8:CC:FA:72:A3:33:48:F7:B6:7C:E1
            X509v3 Authority Key Identifier:
                keyid:E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:dc:4a:5e:17:37:55:72:32:00:49:0a:6f:c0:14:c0:6c:6e:
         35:7f:22:cd:8c:38:e9:44:b6:9b:cb:9b:8d:d9:a2:f5:7b:b4:
         61:e4:8d:9a:69:65:41:5e:43:9a:32:08:aa:fc:20:76:97:73:
         4d:ef:f0:67:96:c4:b0:61:0f:ae:0f:b8:a5:49:30:bb:a1:7e:
         ff:2f:69:b1:a2:92:1b:72:af:83:27:38:0c:35:30:a5:71:a7:
         79:53:10:05:21:2a:74:96:79:12:1f:ec:2f:57:ef:87:74:3b:
         72:aa:c3:7a:0a:9f:f1:6c:79:84:b6:65:44:36:c5:d9:d6:92:
         38:73:d1:15:43:6b:65:60:13:fe:24:24:f1:19:bf:5e:0d:cc:
         13:ca:9b:bd:47:1f:db:fc:6c:70:7e:60:f9:f3:b7:44:db:9f:
         47:7c:8d:46:c3:7c:50:1c:fe:b5:6f:ce:89:fe:a4:2f:bb:73:
         ca:93:06:4a:d2:5c:9c:c1:3b:1c:18:8b:70:8e:00:7d:7f:11:
         de:2a:eb:48:f7:69:8c:12:02:4c:62:35:2b:dc:3f:3a:99:0e:
         f3:bd:f3:26:7b:c1:67:e7:4c:23:57:07:fb:e1:74:c4:17:b2:
         8c:78:5e:8f:da:de:bb:09:9f:f1:1d:63:66:24:31:76:c3:8c:
         15:52:48:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:33 2024 by rpki-client on console-fra.rpki-client.org