Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
File:                     _IwxIe9n77axzoOCjjTdt-4B7nc.mft (raw, json)
Hash identifier:          Z1xEOzjHuqqSyx6hIal1vIc1g6W25GSi5hBLNXcUCU0=
Subject key identifier:   B0:89:C8:7F:12:28:1A:4D:97:ED:8F:03:EF:D4:C7:A1:03:28:74:E7
Authority key identifier: FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
Certificate issuer:       /CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Certificate serial:       0121
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
Manifest number:          0121
Signing time:             Thu 21 Nov 2024 02:36:42 +0000
Manifest this update:     Thu 21 Nov 2024 02:36:42 +0000
Manifest next update:     Sat 23 Nov 2024 02:36:42 +0000
Files and hashes:         1: _IwxIe9n77axzoOCjjTdt-4B7nc.crl (hash: hW21to6wpeoYcUMhTKocOG8PQDyj1htuyi0Y0UvIgeA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
        Validity
            Not Before: Nov 21 02:36:42 2024 GMT
            Not After : Nov 23 02:36:42 2024 GMT
        Subject: CN=673e9cba-c3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:52:7d:57:88:56:d3:30:68:a2:27:49:e6:36:
                    18:d0:46:92:a7:42:cf:ea:75:74:ff:08:85:26:c1:
                    e7:2f:48:b4:30:33:1c:c5:09:96:bd:43:de:e9:94:
                    41:aa:5f:2b:0e:c1:1b:1e:85:ae:a2:a2:d5:af:14:
                    e1:05:b6:fb:bc:ba:06:d2:50:d9:c0:67:04:1d:9d:
                    24:40:e3:22:28:ab:ea:0b:50:2a:96:1d:c7:ee:80:
                    36:90:e2:70:b9:99:d4:d6:1d:f3:a4:3d:5c:ff:61:
                    f7:e4:91:78:d1:ff:d9:08:6e:f6:05:64:a4:fb:dc:
                    9e:dd:59:61:50:6b:b2:28:59:7b:cd:eb:3c:7c:36:
                    ed:f4:53:ed:75:6a:02:fe:ad:39:37:9b:d7:9e:38:
                    cb:9d:b4:42:57:4d:bb:34:38:50:db:e1:b6:9c:d3:
                    df:7c:fd:e0:ec:0c:2f:93:c2:0b:15:7e:d9:83:ec:
                    05:80:1e:f0:2c:3f:17:57:86:e1:3b:92:6c:1d:0d:
                    85:83:4b:2e:2d:ad:02:7f:ab:96:77:94:fa:00:0d:
                    81:35:21:a5:d1:9f:58:fa:8e:64:fd:b2:bc:8c:1f:
                    5c:60:bb:f0:68:dc:76:05:b9:00:c9:f3:24:70:5b:
                    3e:13:49:e3:d8:4a:ed:a7:8e:fb:8c:c2:9f:67:10:
                    cb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:89:C8:7F:12:28:1A:4D:97:ED:8F:03:EF:D4:C7:A1:03:28:74:E7
            X509v3 Authority Key Identifier:
                keyid:FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:46:32:57:c3:fe:b6:57:08:e1:49:30:91:e3:e2:29:15:a1:
         c9:0d:34:0a:8e:b4:3b:59:e1:b7:79:34:87:b9:7a:6f:1d:f8:
         09:d9:b3:2d:76:14:f0:45:b0:cb:c5:f8:25:b7:62:62:f2:a0:
         fa:3f:01:b9:66:54:83:4d:43:a5:35:39:ec:8d:8c:dc:40:9f:
         ea:66:4e:ef:99:32:68:44:23:76:6e:af:09:b2:71:d5:73:55:
         4f:5a:10:01:95:14:9a:e6:c1:83:5a:de:03:e7:47:be:36:36:
         27:8d:30:c8:0e:d6:9a:e5:15:bd:2f:0a:6d:5f:85:f2:d5:44:
         bc:43:6c:a5:cb:8f:d8:b8:13:5f:b3:ca:30:b1:77:36:d2:7f:
         90:04:06:b2:92:ed:54:b9:b3:17:e2:86:8c:82:9e:26:38:95:
         c5:6d:82:01:d1:e0:53:89:7e:5b:17:fa:a8:92:19:a8:6f:86:
         b8:03:33:46:e6:15:ef:58:e3:5a:02:c8:a7:02:ad:a4:22:ee:
         ea:18:9a:95:b2:bb:c0:bf:f4:67:00:0c:1b:24:f2:24:19:e5:
         cb:14:f7:3b:77:69:85:f3:da:a3:90:3d:0f:e5:a1:7a:2f:b0:
         73:e5:e2:12:c8:c6:b9:bd:56:74:68:83:19:91:e4:2b:f0:de:
         69:f9:49:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:52 2024 by rpki-client on console-fra.rpki-client.org