Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
File:                     htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft (raw, json)
Hash identifier:          WiilLh6guphFI6G6bZDwaXumX6BIIz6mYHONY0GpLkM=
Subject key identifier:   FF:68:1D:0A:9D:19:C7:C1:46:59:5C:2E:4A:E2:2B:9C:30:21:CF:B5
Authority key identifier: 86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14
Certificate issuer:       /CN=F36CC8EBAF/serialNumber=86D5F6042E46689FE5A503E7D2DF89F0E3FC9214
Certificate serial:       0347
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
Manifest number:          0346
Signing time:             Fri 21 Jun 2024 01:44:04 +0000
Manifest this update:     Fri 21 Jun 2024 01:44:04 +0000
Manifest next update:     Sun 23 Jun 2024 01:44:03 +0000
Files and hashes:         1: htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl (hash: AnNPMd1As36cv4DBR/hyBt2MNaCN/vWs9Mc7ItGWAe8=)
                          2: 79EE3F02B0EE11ECBF890E845A40D577.roa (hash: Ubonh4WupVYX7KDVzMvxh6Y6MxDnvCg7ttFECjnjgfI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Jun 2024 00:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839 (0x347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBAF/serialNumber=86D5F6042E46689FE5A503E7D2DF89F0E3FC9214
        Validity
            Not Before: Jun 21 01:44:04 2024 GMT
            Not After : Jun 23 01:44:03 2024 GMT
        Subject: CN=6674dae4-0dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:89:66:95:bd:fd:99:c6:08:96:c0:81:bc:
                    2f:14:6f:82:4e:89:1c:7e:f9:56:31:a6:4d:2b:18:
                    4b:f6:96:16:85:c6:66:dd:30:0b:93:7a:6a:ab:f0:
                    43:2e:fe:96:67:b1:21:00:19:74:64:47:d0:8f:1b:
                    56:7e:e3:04:01:31:95:80:31:b4:8b:1e:7b:0a:38:
                    b1:65:c5:cb:43:66:f3:79:d7:ab:09:e7:09:14:80:
                    17:db:ac:58:88:2b:65:7a:9c:f6:1c:9e:2a:ed:6c:
                    1a:d7:af:5a:dc:97:36:89:e1:fc:ef:a4:40:d6:be:
                    19:b8:fc:ff:bd:5d:a4:0f:ed:44:82:dd:95:ea:c1:
                    66:3d:d0:6a:1f:54:3b:31:13:29:75:a7:26:64:40:
                    07:ad:d2:eb:f4:63:19:3b:c6:bd:62:30:ff:eb:65:
                    b3:61:f3:b7:4a:c4:49:b1:3b:f4:2a:fa:76:cb:37:
                    fd:49:9c:3d:ab:b3:0a:3b:10:50:8c:5e:aa:5b:32:
                    08:3c:0e:16:89:dc:21:c7:16:fb:63:81:e0:44:06:
                    21:5e:17:15:11:9a:71:bd:fd:83:74:1b:d9:b5:29:
                    19:ea:ee:48:4f:7f:25:30:b5:18:a5:75:aa:dc:0a:
                    5c:4c:53:ae:8a:f6:75:f3:01:13:77:ae:7c:f6:3a:
                    21:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:68:1D:0A:9D:19:C7:C1:46:59:5C:2E:4A:E2:2B:9C:30:21:CF:B5
            X509v3 Authority Key Identifier:
                keyid:86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:4c:c8:88:ab:41:8f:f0:99:ae:cf:8f:b4:07:66:6c:92:d9:
         b5:ce:96:18:08:f0:62:23:b7:1a:41:1c:a7:9a:9f:6c:80:d7:
         7f:20:60:2c:76:9f:37:d0:af:30:bd:71:0c:cc:86:08:20:58:
         5b:51:6b:19:50:1f:1e:6b:49:48:25:dd:45:50:0c:88:28:4e:
         1a:30:47:3c:51:9e:e3:57:8b:0c:df:35:a6:0c:c7:c6:c9:9e:
         3a:ae:ee:da:f7:47:8f:25:ee:c8:ae:2d:6a:16:3b:1c:1e:28:
         e4:8c:74:db:84:1e:fb:b2:d5:d7:1a:ad:53:5a:c3:78:1a:ac:
         69:fc:f9:44:b8:1d:e8:7e:3b:69:d9:37:6d:bf:55:65:f7:a2:
         04:6e:86:aa:df:ca:3c:af:41:f7:6f:4e:84:9b:6a:27:08:60:
         30:9e:28:59:6e:91:09:11:de:a5:9f:77:75:81:b5:74:66:a7:
         e3:cf:77:d0:77:1b:5d:db:1b:68:c3:a4:44:f9:8a:d8:b2:a6:
         eb:49:95:27:89:4a:e5:dc:9b:e9:d6:3e:50:03:19:7f:80:eb:
         db:20:12:f4:e3:cf:ef:34:35:20:ab:5f:e2:e1:4c:a8:39:c0:
         1a:ab:b3:4f:4d:cf:d2:3a:8f:3c:95:97:a2:f1:14:4f:d1:03:
         07:52:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 02:20:36 2024 by rpki-client on console-fra.rpki-client.org