Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
File:                     bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft (raw, json)
Hash identifier:          8gqeqVSBkGMbSTQIDu3BsRLYK8Y+FeH/MjdWszMrwV4=
Subject key identifier:   D2:8A:9A:F5:7C:7B:45:13:14:B3:F9:3B:21:91:EB:D2:4A:0E:E0:C4
Authority key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Certificate issuer:       /CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Certificate serial:       0412
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
Manifest number:          0410
Signing time:             Mon 06 May 2024 01:32:28 +0000
Manifest this update:     Mon 06 May 2024 01:32:28 +0000
Manifest next update:     Wed 08 May 2024 01:32:28 +0000
Files and hashes:         1: bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl (hash: TFAJL1iPN0C8eHBKunJo9zYE1T01uc/VlP+qAXswJFg=)
                          2: 1347AC5CF39811EB9A15AC4AD8A014CE.roa (hash: ELdoPCpH4/Jlr8Ic0qQsz8AnRp2cpHaa9g5JTK9vKSg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
                          rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
        Validity
            Not Before: May  6 01:32:28 2024 GMT
            Not After : May  8 01:32:28 2024 GMT
        Subject: CN=6638332c-8851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a9:27:ff:f1:05:03:77:91:b5:50:19:af:3e:
                    e1:0b:98:d6:d9:16:2e:a1:83:02:00:e8:6a:e6:2c:
                    35:af:10:04:9b:c5:35:04:82:a9:c2:bb:be:3f:26:
                    84:1d:57:1e:e8:56:01:d2:f5:ed:bf:40:71:fe:21:
                    e4:0c:ba:bc:ec:0d:69:a8:d6:20:37:6e:e9:91:4e:
                    50:6a:53:9b:3a:0d:f8:44:8e:39:8a:db:5e:19:fa:
                    e9:06:ef:90:6b:b0:1e:c9:3d:c2:a9:0c:28:7d:08:
                    e5:90:6c:d6:0b:0a:fb:a1:94:e5:4a:8f:d4:7b:6b:
                    02:20:99:3b:83:71:9b:73:d6:67:ac:ed:96:7c:05:
                    ad:a8:d9:d7:b3:51:2a:51:e3:45:b9:3d:56:5b:64:
                    65:e7:91:9a:03:f1:d0:b1:44:cf:3c:fe:09:b2:05:
                    e5:1b:b2:03:ef:4f:78:f2:6b:3d:f2:3d:9b:dc:e8:
                    b5:25:22:e1:35:b9:74:df:c4:15:cf:b7:bb:db:6e:
                    1c:e0:b3:40:e5:ad:f0:b1:09:db:28:47:a2:af:67:
                    b6:11:5d:09:a4:a6:cc:31:5d:35:eb:82:01:7d:0c:
                    78:d4:56:ed:5a:0c:96:64:25:d5:44:e8:cd:11:ea:
                    85:ec:a4:f4:26:10:d7:f0:2c:86:bd:57:d2:e0:a0:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8A:9A:F5:7C:7B:45:13:14:B3:F9:3B:21:91:EB:D2:4A:0E:E0:C4
            X509v3 Authority Key Identifier:
                keyid:6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:04:0b:4b:71:58:fd:7a:8c:78:4a:f6:f7:d8:ea:3f:a3:fa:
         fe:32:0a:0c:72:86:62:59:e3:41:9a:cf:37:de:65:2d:46:26:
         6c:18:74:4a:2f:e5:7d:2b:43:87:48:82:2f:10:07:6d:b9:80:
         c1:fc:bf:70:9d:4a:35:43:c4:f9:85:b5:bb:36:df:24:f1:d9:
         16:e4:eb:8c:41:06:32:fe:81:fe:25:49:2e:c8:e7:97:0f:60:
         3a:09:1c:b7:f8:be:c7:11:32:a0:0b:ba:e1:00:59:c0:33:52:
         44:d9:6f:7e:76:c9:71:f0:97:1e:88:43:bc:ee:81:b2:36:ef:
         27:14:3e:c5:5f:c7:0b:d3:58:d9:c8:f3:32:66:5c:15:18:91:
         ab:76:af:27:31:c7:79:7e:8b:43:de:b6:aa:9d:4d:01:62:df:
         ae:5c:a1:d5:84:47:29:b3:15:7a:95:8f:22:27:93:2c:e6:47:
         90:c4:3c:62:7f:78:25:cc:00:68:30:b3:3f:48:6b:66:36:f9:
         ae:13:0b:ed:41:bf:98:e3:39:b7:14:0e:ba:f0:38:26:a7:00:
         8e:84:34:e5:f1:11:3c:bd:f6:d0:54:6a:aa:b9:42:d3:74:be:
         3c:ac:12:27:91:8e:ec:5c:49:e5:ad:28:ab:9f:08:d5:6e:6e:
         c5:90:2f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:08:41 2024 by rpki-client on console-ams.rpki-client.org