Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
File:                     v10_TcmvF_i6c_VaHXLzlZwFGOI.mft (raw, json)
Hash identifier:          7hHdpGzEyURwdJBZ7nAKb8J0AeB0IItA3qnut2CIBN8=
Subject key identifier:   1F:A5:C5:20:04:E9:1D:92:09:49:91:CF:A0:B7:B6:95:12:42:8B:71
Authority key identifier: BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2
Certificate issuer:       /CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
Certificate serial:       03A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
Manifest number:          03A7
Signing time:             Thu 02 May 2024 01:38:18 +0000
Manifest this update:     Thu 02 May 2024 01:38:17 +0000
Manifest next update:     Sat 04 May 2024 01:38:17 +0000
Files and hashes:         1: v10_TcmvF_i6c_VaHXLzlZwFGOI.crl (hash: Bl8sEWhN1smOYesqh6VermVBKLwMWfKUseCFjALauGA=)
                          2: DAF0E168407F11ECB8D6EB12D8A014CE.roa (hash: hHFxlWCSnH4gDexnkdfm1eIFVHKF3ZADP/XYQDBgtyE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 936 (0x3a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D32D1AF/serialNumber=BF5D3F4DC9AF17F8BA73F55A1D72F3959C0518E2
        Validity
            Not Before: May  2 01:38:17 2024 GMT
            Not After : May  4 01:38:17 2024 GMT
        Subject: CN=6632ee8a-f404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:85:29:0c:88:c5:5a:12:57:9d:b9:bf:86:09:
                    2d:ee:c3:29:39:81:ae:00:ee:70:d3:34:dc:f3:51:
                    d0:e2:1a:f8:f6:86:23:ef:0a:04:0e:9d:7b:9d:4d:
                    6b:2f:a7:02:af:c7:3c:1d:0d:a2:0f:15:b0:1d:d3:
                    0b:3c:a3:54:9d:b1:dc:d2:d9:f0:03:ff:53:33:a8:
                    e7:3b:b7:3e:cd:94:cf:4b:51:0e:f5:95:96:19:8a:
                    37:44:1c:30:c8:98:b2:20:a9:ad:55:8f:1c:0e:38:
                    fa:5f:0c:f7:68:a1:7d:9f:ac:48:62:2d:de:6c:92:
                    c3:08:0b:00:62:2a:fe:90:4d:a1:7f:a5:24:8a:f8:
                    b9:a9:8d:8f:61:80:8a:7c:e2:13:3b:c3:ad:2f:fb:
                    54:72:df:26:4c:48:ef:d3:41:c6:79:46:9e:47:f6:
                    20:7e:de:4a:cd:b0:b4:e6:22:9b:1a:9b:53:2d:58:
                    9b:46:1b:d6:75:8a:5f:9f:a1:00:71:e8:70:59:6c:
                    14:dc:46:0f:39:15:a6:f6:cd:61:ce:1d:c5:36:80:
                    9b:e8:26:55:65:5e:24:14:b7:ae:37:4c:87:fd:fd:
                    b8:7a:24:12:24:39:32:bd:c6:89:5f:cd:a2:f1:4e:
                    a4:e1:a9:0f:95:18:d4:52:24:43:3a:0b:8c:4d:d2:
                    2c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A5:C5:20:04:E9:1D:92:09:49:91:CF:A0:B7:B6:95:12:42:8B:71
            X509v3 Authority Key Identifier:
                keyid:BF:5D:3F:4D:C9:AF:17:F8:BA:73:F5:5A:1D:72:F3:95:9C:05:18:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v10_TcmvF_i6c_VaHXLzlZwFGOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D32D1/AD00932C407D11ECA8E59D0FD8A014CE/v10_TcmvF_i6c_VaHXLzlZwFGOI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e7:30:32:5a:d0:f7:79:fe:55:59:21:ea:55:ce:76:b9:5c:
         82:fa:fa:cc:fc:1f:77:c9:d1:59:6c:f0:b7:0b:a0:dd:87:a8:
         2b:1b:87:6d:cf:35:fb:2b:49:70:ad:36:ae:a2:2f:c3:94:f9:
         dd:21:53:25:e1:f4:7a:f3:98:b9:68:2a:6e:1f:10:df:7b:8a:
         4d:b0:d5:41:74:90:db:2b:d6:c2:e9:b6:eb:76:ac:4c:65:4e:
         c4:61:48:b4:7a:88:ef:7b:e8:eb:e4:9b:bb:90:d2:ff:27:a8:
         e6:71:bd:bb:08:d9:aa:6d:08:49:23:fc:c7:31:61:c7:74:71:
         82:c2:d3:30:b0:67:6f:14:05:3b:6b:bc:fd:30:d0:16:cf:83:
         78:d9:38:e0:16:a4:03:6c:a1:c6:36:98:ce:c2:9b:09:00:7b:
         79:7d:41:0f:36:7b:15:2f:10:5f:04:93:97:75:8d:74:97:43:
         32:bc:30:8f:a7:41:6d:83:51:be:5f:31:01:37:08:0f:a3:60:
         7e:b1:91:6e:7c:65:22:f0:96:2e:0a:23:58:db:8c:d4:98:17:
         ef:3f:6e:e0:8c:9b:7f:ee:34:da:e3:e2:a7:25:d2:8d:d2:41:
         ba:ac:92:b6:f4:70:b7:28:ef:91:fe:d6:67:07:65:2b:e5:17:
         5b:ea:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:50 2024 by rpki-client on console-ams.rpki-client.org