Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
File:                     n10GlKN56yP6tAip1LvVCOGqOSI.mft (raw, json)
Hash identifier:          RW5+jWUiu6vbXZR9wQlEi9fUmns2bJ2O1htEOAmymD8=
Subject key identifier:   39:F9:8C:ED:85:41:6B:E4:D2:95:EE:94:20:0A:FF:55:13:7C:68:5E
Authority key identifier: 9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22
Certificate issuer:       /CN=F36DA96DRI/serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
Certificate serial:       01B5
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
Manifest number:          01B1
Signing time:             Sun 24 Nov 2024 02:25:49 +0000
Manifest this update:     Sun 24 Nov 2024 02:25:49 +0000
Manifest next update:     Tue 26 Nov 2024 02:25:49 +0000
Files and hashes:         1: n10GlKN56yP6tAip1LvVCOGqOSI.crl (hash: TmhmxvZRLXvQOWx+/uJOdaTmUy07Paocskp8oQ1FR5A=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                          rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DRI/serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
        Validity
            Not Before: Nov 24 02:25:49 2024 GMT
            Not After : Nov 26 02:25:49 2024 GMT
        Subject: CN=67428ead-3745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a8:ef:4f:7d:64:77:ab:31:d7:3b:f1:ba:d7:
                    36:5e:ab:2c:e1:af:04:d3:ff:61:a6:dd:41:4a:13:
                    38:a2:71:64:ee:c9:b4:d9:4a:f8:4d:5b:cd:b8:8f:
                    87:67:3f:84:b3:ca:93:cf:a7:f7:4b:a3:18:bd:32:
                    0b:87:ff:88:c3:48:26:75:b9:c8:8f:65:65:f0:39:
                    e3:c5:74:56:79:d5:1d:2d:24:c0:7c:17:8e:e4:35:
                    82:d2:d1:c4:75:b4:bc:81:f5:62:cc:dd:b5:cb:53:
                    d8:05:0c:f4:fc:30:e4:2b:26:ea:25:71:bb:75:ad:
                    ac:3b:b0:0d:d1:28:62:8a:d8:90:97:6b:d3:84:0e:
                    f4:b2:b7:f6:e0:70:e3:51:82:cc:e3:79:5f:a3:22:
                    ee:02:a8:54:9d:e0:da:f2:64:84:ce:a9:9c:2b:45:
                    d9:91:60:c5:58:2d:7e:57:70:72:6c:98:8a:fc:33:
                    04:86:c8:13:d6:d9:51:63:6d:a8:3b:c0:7c:76:78:
                    9f:a5:b4:83:61:6e:ea:63:5f:ed:74:82:06:71:48:
                    b0:db:36:a3:5c:46:c6:d9:2c:31:6c:a9:09:34:06:
                    37:a2:66:5a:fc:99:7a:e5:88:79:7d:fd:a6:57:41:
                    42:cf:42:0c:fa:d1:89:46:5d:bd:65:ab:78:26:b1:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F9:8C:ED:85:41:6B:E4:D2:95:EE:94:20:0A:FF:55:13:7C:68:5E
            X509v3 Authority Key Identifier:
                keyid:9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:74:93:a7:dc:8f:a2:cd:c3:6e:8d:74:b5:c2:59:ca:04:d2:
         d7:bf:6b:43:a7:97:62:ec:7a:96:7c:59:c1:00:7e:be:8d:bc:
         c9:5d:a8:d6:53:bf:d3:08:0e:75:30:42:65:a9:98:9e:1d:e4:
         46:9f:a0:27:80:00:30:f8:91:28:c0:39:e1:35:cf:7a:94:ce:
         e7:fa:c0:10:ef:cd:d7:b2:cf:2d:9f:2a:a0:3a:92:ab:34:0f:
         3e:1a:a0:80:ca:05:19:92:be:17:4a:3b:c1:b7:5d:fe:e1:a9:
         03:57:47:c9:9e:90:36:c7:04:36:04:da:28:b2:30:37:3c:80:
         e7:13:b8:40:8f:b4:6e:c9:b9:19:ce:9b:f5:b2:80:1b:85:18:
         a0:a5:e4:05:60:bb:53:6d:ec:66:17:3f:aa:dd:aa:f3:3c:0f:
         53:3b:70:11:89:e9:a5:4b:0a:1a:0e:10:45:f4:8d:29:25:cb:
         e0:51:a1:92:f2:dc:ce:93:b8:ad:c6:04:ce:ed:b7:a6:e6:59:
         46:e0:b6:46:3a:da:28:b4:53:62:73:1c:ab:74:cf:5d:6f:45:
         98:f9:ec:f9:ab:da:2e:8d:0f:89:a9:6e:de:48:7a:04:1a:e2:
         25:bc:44:ed:b2:15:9a:65:a3:23:90:f2:c7:35:31:f0:04:a4:
         2a:9a:96:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:19:43 2024 by rpki-client on console-ams.rpki-client.org