Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
File:                     z9HOEVgucPjVG3hwclwV72fgxlE.mft (raw, json)
Hash identifier:          6/PAdxxVX1xb96H9UmioYRZ36KI6hHOftq+OmoTMrvI=
Subject key identifier:   5B:01:22:5F:0D:6E:3F:38:E6:F2:9E:A1:1B:B9:51:32:63:30:2B:69
Authority key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
Certificate issuer:       /CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Certificate serial:       0CEC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
Manifest number:          0CE9
Signing time:             Fri 22 Nov 2024 00:46:33 +0000
Manifest this update:     Fri 22 Nov 2024 00:46:32 +0000
Manifest next update:     Sun 24 Nov 2024 00:46:32 +0000
Files and hashes:         1: z9HOEVgucPjVG3hwclwV72fgxlE.crl (hash: O5f/ibnWKCNjUW3AvyrHhyk6wtzA1/M2ZckNp2tmU34=)
                          2: 44FF457CB46311E58407FA55F8AEA228.roa (hash: B9WSKZRqziRr6GOCV6BDWegKxCtGmeVw42cvf6ryK9U=)
                          3: A17B340AB46311E59241EB56F8AEA228.roa (hash: 7FwQeUfCbVL0Bd2EXyoVC5y/xe6Lbd8u11SpNh5f5zI=)
                          4: F0D40794B46211E5A330CA55F8AEA228.roa (hash: t2nsrO2U23DwtiWKoe3fqAaOO4rdHwgErkagqsJpKHc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3308 (0xcec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
        Validity
            Not Before: Nov 22 00:46:32 2024 GMT
            Not After : Nov 24 00:46:32 2024 GMT
        Subject: CN=673fd469-5e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:56:fb:5f:68:ff:d1:49:0b:e8:75:99:04:
                    51:be:d9:b5:bf:85:3d:07:b4:fe:6a:1b:21:f2:4a:
                    bc:ea:6a:64:e5:05:11:97:14:d9:03:a1:9a:cb:88:
                    96:25:65:32:b6:20:65:b3:ec:0f:ee:12:7c:c0:e4:
                    47:3b:d2:92:9e:43:8d:3e:a7:8f:93:2a:b0:85:c2:
                    50:23:6d:6c:c9:6f:4d:35:e6:cb:e2:2b:cc:fd:e7:
                    8e:87:7b:e0:fc:8a:95:5b:21:eb:d5:ea:1f:53:23:
                    79:ed:08:8a:e6:64:0e:8b:22:68:25:32:5f:cb:4f:
                    65:fa:33:8a:94:1f:68:27:27:68:10:5b:f4:cd:b5:
                    9b:c3:e0:19:c4:42:b2:4c:d8:d0:76:93:06:dc:3b:
                    10:c2:02:a9:50:20:c9:cd:e5:43:86:21:db:dc:5c:
                    ab:7c:46:a1:4b:0a:0d:2e:7c:e3:a8:dc:b9:1d:be:
                    d5:8c:b2:85:d1:53:af:28:1c:19:72:86:90:0c:97:
                    e3:f9:71:34:48:dc:6e:88:58:7e:ac:a6:36:70:ee:
                    bf:d2:31:2c:06:cf:81:b7:78:af:c3:b9:09:97:1d:
                    d9:49:bd:d2:af:b7:3c:e0:8f:4a:e5:c1:07:b7:9d:
                    2e:7d:11:50:d7:0f:81:49:5a:cd:37:25:d4:10:34:
                    da:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:22:5F:0D:6E:3F:38:E6:F2:9E:A1:1B:B9:51:32:63:30:2B:69
            X509v3 Authority Key Identifier:
                keyid:CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:41:df:44:c2:64:9c:a6:06:4c:ab:51:9b:7a:51:88:5c:2b:
         58:26:93:cf:07:08:16:1d:f4:e6:9e:2c:88:09:e8:0f:60:b7:
         8c:34:69:7b:cf:f0:9b:77:83:b0:fa:40:8f:77:58:cc:2f:20:
         b7:d0:15:0a:62:c6:2b:a6:63:a8:e6:20:ef:c9:14:0c:e3:11:
         a2:2b:ea:b5:44:53:e5:d7:58:c3:6e:1b:38:bd:d0:8b:cf:13:
         d1:70:95:27:34:cc:79:fc:58:b2:4a:18:4e:f3:b1:f4:88:f9:
         93:78:e1:66:73:3f:60:34:a5:95:bd:d3:fe:82:18:14:9a:cc:
         11:14:5e:2c:ee:2e:77:27:ec:b3:25:fd:53:a1:bd:fc:14:6a:
         54:32:16:aa:f8:6d:1c:13:27:18:58:9f:93:9c:45:a1:3e:ef:
         eb:21:d3:d9:0a:f6:39:00:25:57:ff:1a:6b:ae:c1:b3:1e:1c:
         64:61:5f:33:e6:52:a6:fb:14:cb:88:3c:ea:e0:05:62:9f:21:
         de:67:34:fd:d0:d1:18:9e:41:aa:d2:6c:75:c6:a1:a5:ff:e2:
         85:75:3e:16:d3:6d:93:61:3e:9a:0f:42:fa:9d:78:24:ad:d8:
         eb:2b:e5:93:ea:df:de:95:e6:79:91:af:18:f1:a7:04:f9:0f:
         67:80:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:18 2024 by rpki-client on console-fra.rpki-client.org