Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
File:                     n10GlKN56yP6tAip1LvVCOGqOSI.mft (raw, json)
Hash identifier:          BNqk4EeQDVozEwUkhmAvLlY2XPe94gRieYKBLbn0iUE=
Subject key identifier:   A9:37:EF:09:93:0D:7E:10:FE:12:90:56:CE:C6:53:DD:91:41:84:61
Authority key identifier: 9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22
Certificate issuer:       /CN=F36DA96DRI/serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
Certificate serial:       F4
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
Manifest number:          F0
Signing time:             Sun 19 May 2024 02:22:06 +0000
Manifest this update:     Sun 19 May 2024 02:22:05 +0000
Manifest next update:     Tue 21 May 2024 02:22:05 +0000
Files and hashes:         1: n10GlKN56yP6tAip1LvVCOGqOSI.crl (hash: L3R32scKeFcyrT0Cfm+hKJKzTjW8YVjB+CtAckju7i0=)
                          2: 53D5E47E692911EEB61154754AD9E6FC.roa (hash: M9eXTkhtijjaez2K/vv8DttTDCULDmMGvvyO2PiC8ks=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                          rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DRI/serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
        Validity
            Not Before: May 19 02:22:05 2024 GMT
            Not After : May 21 02:22:05 2024 GMT
        Subject: CN=6649624e-a439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:2c:1e:c8:63:db:da:1f:79:b8:ba:3e:10:
                    cd:55:1c:54:e5:51:d5:39:40:b7:c1:9a:c0:41:b4:
                    d0:3a:45:3f:44:e1:97:74:dd:0a:ed:e0:25:14:35:
                    04:d7:a4:4b:c0:c6:bb:90:d7:39:70:d0:d9:8e:76:
                    fb:84:e8:62:ad:94:53:df:65:50:15:46:ac:10:6a:
                    14:01:d3:cc:03:e2:c2:06:51:62:98:6a:95:e0:43:
                    34:8a:a1:ff:42:f6:bd:e5:b2:fb:49:d8:81:62:a7:
                    67:9f:ed:25:32:34:9c:04:0e:fc:ce:11:6c:d3:92:
                    98:08:a8:71:21:e6:e4:34:b8:6f:19:b5:12:80:18:
                    19:4e:cc:97:b7:73:ed:94:f3:89:66:9d:d2:c7:17:
                    db:01:e3:19:b0:db:4a:d6:c6:7b:c4:7a:3c:cf:b0:
                    5d:02:6d:94:41:ba:c3:12:8c:38:07:40:bc:9f:19:
                    91:6c:94:b5:b3:4c:97:de:8f:20:94:d8:10:1b:a8:
                    84:86:fd:15:6d:f1:30:ec:f4:36:02:52:7c:32:18:
                    b1:25:a5:e7:19:c8:58:f4:ec:7f:f5:11:db:c9:3f:
                    c6:ba:43:41:58:c7:6e:db:82:27:42:60:1d:82:c0:
                    9f:33:aa:2c:8e:8d:b7:6d:2f:7f:92:13:77:de:42:
                    48:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:37:EF:09:93:0D:7E:10:FE:12:90:56:CE:C6:53:DD:91:41:84:61
            X509v3 Authority Key Identifier:
                keyid:9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f6:75:9e:92:d0:cb:2f:40:74:cc:62:a4:97:98:50:2a:91:
         19:c1:a2:3d:44:2e:93:56:b4:59:ac:eb:b6:bf:b2:f7:b0:30:
         fd:6a:f6:6c:0a:24:39:60:33:af:c3:88:9d:ad:98:e0:e9:08:
         10:24:96:64:75:c3:9a:a0:ff:7c:96:e9:94:67:b5:f6:02:55:
         70:67:95:11:5e:ec:af:9a:a2:04:db:60:1f:f4:4e:5e:77:bd:
         16:77:69:ed:ca:7f:93:3e:8c:09:1e:43:90:bd:a5:00:d5:2a:
         da:16:6a:9d:61:2e:d3:10:67:32:8c:35:0f:f9:9f:bd:8e:b3:
         97:6c:0c:a6:2f:c5:d2:53:df:5e:d7:4f:8e:25:94:3e:67:33:
         ff:81:80:af:46:64:32:22:81:4b:76:90:45:5f:68:1f:0e:1c:
         97:cc:29:0f:1f:f9:3c:a7:9e:5d:0f:ff:6d:5b:8e:b2:c2:93:
         04:e4:48:62:58:33:6b:fb:da:cf:fb:79:51:75:90:7f:21:08:
         af:a4:c1:05:8e:6c:db:39:a1:02:3b:1d:80:3b:6b:9d:a1:9f:
         30:1e:05:9d:80:69:27:e0:21:ab:4c:83:77:cf:7b:31:00:ad:
         34:f4:2e:10:a8:a0:71:7c:27:45:58:4f:a2:d2:32:dd:0c:3e:
         13:12:a1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:47 2024 by rpki-client on console-fra.rpki-client.org