Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
File:                     QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft (raw, json)
Hash identifier:          2gebIe5peehdbPZsTD4qe12AHWqzqIZMPYBSzguamrY=
Subject key identifier:   4A:F0:FC:A4:FE:89:92:24:6F:6B:A7:FE:DA:81:D8:C5:B9:68:5D:BF
Authority key identifier: 40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9
Certificate issuer:       /CN=F36DBAE4AF/serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9
Certificate serial:       0823
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
Manifest number:          0820
Signing time:             Thu 21 Nov 2024 00:58:21 +0000
Manifest this update:     Thu 21 Nov 2024 00:58:20 +0000
Manifest next update:     Sat 23 Nov 2024 00:58:20 +0000
Files and hashes:         1: QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl (hash: oObXGEleIWpY5YOzvzyNmoasf+85fCZs/ddWFdrxCDc=)
                          2: 9441D5EEDAC711E9BF722B0BF8AEA228.roa (hash: axIaMQf67dy55F4A4FCaJkKKc0Bb9fF9saVchkeuCiI=)
                          3: A99AE7C0DAC511E985EBCE09F8AEA228.roa (hash: OIGU7l2JXL8/haZu4eER9KuF5vp4/ZseEXDNYZByKwk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083 (0x823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBAE4AF/serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9
        Validity
            Not Before: Nov 21 00:58:20 2024 GMT
            Not After : Nov 23 00:58:20 2024 GMT
        Subject: CN=673e85ad-3353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:88:53:16:91:0c:10:76:a8:22:f9:9b:70:31:
                    ea:fc:16:43:7f:30:95:5e:40:18:37:95:e6:37:d7:
                    6d:76:2e:0f:9e:b6:34:9b:aa:ca:e6:5f:ce:89:6d:
                    84:69:2a:bf:ba:ce:b4:1f:ef:ef:c4:cc:90:9a:ba:
                    f8:32:d1:4f:05:b7:9e:24:a3:34:53:60:78:65:c7:
                    81:b9:72:cd:4f:d7:94:0b:82:a2:e4:73:07:35:e9:
                    a1:4c:67:78:72:1a:fd:23:a9:ce:a6:3f:84:e7:aa:
                    34:dc:64:56:b4:5a:3e:5e:cd:ff:7a:6a:70:2b:8a:
                    df:84:3f:a3:2f:a8:a3:40:30:82:1a:b6:04:9f:d1:
                    81:6c:b9:54:9f:32:34:12:71:a8:d2:2e:c8:18:90:
                    3a:47:e4:94:03:63:56:e0:3c:9d:d0:e8:67:81:93:
                    37:4a:f3:c5:a1:9e:8c:7f:03:f7:4e:95:0f:53:fe:
                    b6:87:8f:81:ba:ca:2f:71:a0:d4:5b:8e:1d:04:50:
                    7b:ad:e2:23:f3:d1:e1:f5:f6:63:f2:26:dd:b6:45:
                    13:ae:9d:c8:18:d5:23:ff:d0:db:e6:fe:04:2b:23:
                    07:75:a2:f9:7f:06:17:17:56:d2:f1:7e:c0:f2:eb:
                    b5:b0:a8:8c:25:a8:ed:19:c2:62:83:da:42:8e:cb:
                    eb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F0:FC:A4:FE:89:92:24:6F:6B:A7:FE:DA:81:D8:C5:B9:68:5D:BF
            X509v3 Authority Key Identifier:
                keyid:40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:fc:6f:d6:46:62:13:08:83:75:3d:78:e2:df:08:a3:46:aa:
         55:e0:68:e0:d8:5f:33:99:23:66:20:7d:cd:dd:bc:aa:59:97:
         c7:b3:a6:3e:23:53:36:7e:48:75:e3:bc:c9:e7:aa:db:68:ed:
         a5:45:f3:97:d3:45:c6:69:f7:15:67:e9:44:5b:ac:2d:02:fa:
         24:4d:d0:fc:fb:9c:18:a4:df:a0:b9:f7:cc:53:ea:c2:c8:f2:
         b9:a7:5e:c5:e3:9a:33:06:86:19:18:48:14:55:04:54:b6:21:
         bc:0f:93:a2:dc:f7:59:0e:4c:99:56:2c:06:6f:3e:07:6c:56:
         8f:ab:06:9d:d1:24:41:d2:30:4a:76:81:c2:4f:02:f2:c2:96:
         2b:37:73:2f:2f:79:61:b5:b9:a3:a0:91:8a:e0:b3:97:39:7a:
         cc:ae:e0:fa:80:53:5e:b6:ea:88:52:01:8d:38:0c:93:d8:0a:
         95:0c:05:29:1f:8f:49:b9:b7:30:5f:22:3c:a2:99:b3:c4:f6:
         17:98:ba:b3:63:19:a8:1d:82:8c:39:9e:33:8e:fb:6a:99:0d:
         37:4c:9c:d8:10:d7:68:6d:80:f5:3e:b4:8f:1b:44:99:f8:2c:
         c3:0c:1a:29:4a:5c:32:ee:77:c9:9e:cd:31:d1:b8:af:d9:a0:
         0e:d8:f6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:24 2024 by rpki-client on console-ams.rpki-client.org