Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CBA0F/00E1DAE08BBD11EFA1253244762E951A/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.mft
File:                     f4UxHUPeqV9MFIwIQ_ssKdOHfMw.mft (raw, json)
Hash identifier:          5IVV15OJOBAO9mPbBMqvOFCoxjajksCEVKWsaHBOzaY=
Subject key identifier:   CC:AC:FF:4A:D5:5D:C6:85:79:1D:FB:98:47:E7:90:3A:5D:3E:64:86
Authority key identifier: 7F:85:31:1D:43:DE:A9:5F:4C:14:8C:08:43:FB:2C:29:D3:87:7C:CC
Certificate issuer:       /CN=F36CBA0FAF/serialNumber=7F85311D43DEA95F4C148C0843FB2C29D3877CCC
Certificate serial:       0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CBA0F/00E1DAE08BBD11EFA1253244762E951A/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.mft
Manifest number:          09
Signing time:             Wed 23 Oct 2024 03:08:05 +0000
Manifest this update:     Wed 23 Oct 2024 03:08:05 +0000
Manifest next update:     Fri 25 Oct 2024 03:08:05 +0000
Files and hashes:         1: f4UxHUPeqV9MFIwIQ_ssKdOHfMw.crl (hash: TDCS+2aJlP87IGTvn40LEAIpYZEsFwVxKeqgJfKSjtY=)
                          2: B45129B48BBD11EF94428948762E951A.roa (hash: 43zaQg7rsnXHb+T9WO52mZLCQHsBhqCHCPb5tuPvMGw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CBA0F/00E1DAE08BBD11EFA1253244762E951A/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CBA0F/00E1DAE08BBD11EFA1253244762E951A/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CBA0FAF/serialNumber=7F85311D43DEA95F4C148C0843FB2C29D3877CCC
        Validity
            Not Before: Oct 23 03:08:05 2024 GMT
            Not After : Oct 25 03:08:05 2024 GMT
        Subject: CN=67186895-ed5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b8:a1:ec:00:1b:a3:9d:b5:50:72:fd:2e:ab:
                    22:67:d7:0f:a7:db:7a:8f:e2:9b:92:08:d7:e6:7c:
                    f8:66:20:56:60:7f:e0:2e:63:38:bf:42:28:88:44:
                    40:05:7f:d5:3b:97:ed:d3:01:2c:a8:2d:07:60:62:
                    c4:2c:4e:73:ce:9a:6f:e3:5a:84:2a:9e:3e:0d:c3:
                    e7:6c:8f:d0:16:96:58:34:b4:99:3b:d9:0b:f9:3c:
                    9b:4b:28:37:f6:30:50:6e:cb:f4:d6:1d:89:8a:07:
                    4f:89:37:85:9a:d2:08:04:08:8e:e7:86:b2:c6:32:
                    db:2f:21:39:ef:c3:ca:76:48:bb:db:f7:7e:77:79:
                    31:6e:43:9c:86:af:2a:89:4e:73:51:13:4e:f9:51:
                    52:6f:11:59:ae:3c:7d:e5:a3:84:86:50:75:16:ff:
                    2a:e0:ee:26:3b:74:ed:1e:2a:ec:39:e6:a6:03:47:
                    61:a4:09:99:03:f2:aa:e0:02:06:c0:bb:a5:3b:02:
                    77:b4:fc:1d:76:8c:9b:df:f4:85:94:cc:6d:fb:d6:
                    ab:5c:37:01:d8:46:e7:50:05:d7:ca:ce:f3:9d:56:
                    84:40:94:50:5e:a9:ab:fe:a0:e7:92:59:86:ac:d9:
                    45:fb:3d:d9:35:a8:71:31:63:c7:0a:62:30:bb:17:
                    fd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AC:FF:4A:D5:5D:C6:85:79:1D:FB:98:47:E7:90:3A:5D:3E:64:86
            X509v3 Authority Key Identifier:
                keyid:7F:85:31:1D:43:DE:A9:5F:4C:14:8C:08:43:FB:2C:29:D3:87:7C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CBA0F/00E1DAE08BBD11EFA1253244762E951A/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CBA0F/00E1DAE08BBD11EFA1253244762E951A/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:11:4c:2b:c5:9e:8e:38:fc:70:da:22:c0:6f:d2:44:ab:7e:
         18:33:0c:b5:2c:34:94:ed:9d:33:c9:0b:f9:ac:4e:e1:7e:48:
         25:ab:fd:40:17:f2:e1:59:a2:df:e9:db:b8:5a:22:24:f3:24:
         9c:9c:1a:6b:e4:24:32:cc:3e:4b:ef:e1:80:ba:6c:34:e1:be:
         4b:f0:e6:ac:4f:c9:68:f0:6f:12:89:22:86:ba:74:cc:05:31:
         18:76:1d:78:cb:91:73:99:a8:a6:43:a6:6b:67:99:f1:b7:b9:
         d7:ad:b5:4c:e7:4d:c6:da:7f:fe:dc:e4:28:78:ac:40:00:e8:
         7e:12:9f:a4:0f:ff:e4:c2:5f:52:40:a4:3b:d2:00:4b:86:e9:
         69:8e:b9:fb:4e:84:c2:0d:1f:07:66:e3:3f:31:7a:00:a9:8f:
         28:78:a6:45:7e:f4:73:7e:b3:1d:e4:67:88:76:98:73:fd:9a:
         ca:c6:4d:92:fa:b9:12:78:95:ac:53:4b:e3:53:4f:b5:7d:eb:
         22:a2:9e:f4:7f:68:93:ce:66:4a:9a:ae:5c:35:f5:9a:3b:61:
         92:77:28:c8:fa:4a:83:53:a6:42:b4:37:f4:dd:be:45:ee:33:
         d1:63:03:88:2b:f4:4e:f4:fc:4a:91:ad:a5:22:e7:91:fc:5d:
         ee:c7:d0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----