Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File:                     4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier:          G15bCYLZtrP+yf5PYXH9NYiC7kcdTm2UvNan1VnWoRo=
Subject key identifier:   58:87:96:4E:10:FF:A6:E6:B4:04:78:CD:7B:38:66:2A:D1:8B:3D:F5
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer:       /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial:       33
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number:          32
Signing time:             Sat 25 May 2024 02:36:34 +0000
Manifest this update:     Sat 25 May 2024 02:36:33 +0000
Manifest next update:     Mon 27 May 2024 02:36:33 +0000
Files and hashes:         1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: Omu/jEhAjvDmqRBXva67dIBuzS4mEjqT8mqqYBvesrc=)
                          2: 5A1C572CF8AE11EE85EDAC3B017001B1.roa (hash: Nhi/kAnQFZgp/t5smGUgjSQeAv2V3l/PSJmDi9Vk5T0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                          rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 27 May 2024 00:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
        Validity
            Not Before: May 25 02:36:33 2024 GMT
            Not After : May 27 02:36:33 2024 GMT
        Subject: CN=66514eb2-ebcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:86:dc:e6:07:9e:d3:21:23:e7:8c:5e:b9:b3:
                    19:3e:89:eb:d8:8c:5b:3f:5c:69:a0:b2:da:56:40:
                    71:35:b8:66:26:ff:d2:ef:c6:b7:29:b4:03:74:24:
                    94:23:af:6a:fb:f4:4b:4c:a7:54:b5:d6:cc:b7:ed:
                    bb:20:d1:3f:eb:9a:8e:08:6a:b1:e6:8f:a5:09:09:
                    bb:53:14:48:fb:2f:dc:61:3e:4b:51:7e:26:56:f8:
                    91:fa:88:8d:c2:0b:cf:91:83:7f:8a:e7:a6:74:41:
                    20:5d:a6:68:14:8c:79:f7:0a:20:d6:f9:b0:51:9a:
                    54:0b:0e:7a:83:e9:c0:f0:41:bd:16:ed:45:9e:c3:
                    75:c1:10:0b:ea:bb:3a:f5:04:8f:83:de:a8:80:5b:
                    ba:0d:5a:44:77:44:fa:35:f4:e5:2b:c0:63:7b:06:
                    25:5f:78:d6:e9:11:30:ec:f3:de:a7:a6:d9:3a:95:
                    0f:43:92:9a:7a:b8:68:09:13:b5:0e:82:25:61:32:
                    df:0d:71:bd:53:40:9a:4b:5b:3f:9d:21:ab:fd:14:
                    d5:bd:c3:ed:5d:2e:1c:6c:3e:0d:c0:d5:78:51:d3:
                    66:60:4f:6a:93:49:f7:e1:9d:0b:00:73:56:31:31:
                    33:fa:8a:2a:df:48:09:b5:96:4f:33:25:08:b1:53:
                    0c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:87:96:4E:10:FF:A6:E6:B4:04:78:CD:7B:38:66:2A:D1:8B:3D:F5
            X509v3 Authority Key Identifier:
                keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:14:b1:7b:e1:dc:e5:48:52:ea:5c:94:7d:52:f6:e7:17:40:
         e4:88:45:53:90:96:2a:3c:ef:36:41:81:45:1f:4a:b0:9e:e6:
         84:f7:43:30:b5:f2:29:1e:42:cd:53:3c:dc:27:c3:5a:29:d0:
         df:30:a1:a7:fa:41:a9:43:da:e5:63:a6:fa:7f:e9:3a:ef:a3:
         f7:25:ca:c3:51:fc:1f:9f:f2:12:41:99:87:eb:88:5a:91:47:
         0a:e9:fb:3a:87:36:34:39:97:cf:a5:08:59:c3:e2:cb:16:ed:
         b5:0b:58:22:4c:df:cd:5a:c5:a5:6c:b2:fb:0d:43:77:d3:0b:
         de:d1:a2:6c:4e:ff:97:c0:a2:b4:ec:0d:10:1c:1b:4a:ea:8a:
         8e:8d:57:e2:3e:93:50:a9:1a:3a:6a:4b:2b:8a:bd:0b:36:8d:
         7c:cd:02:55:f4:3f:54:c7:cc:95:3f:0f:30:0e:ad:45:3c:90:
         d4:2f:b3:e9:87:47:d2:f2:6a:3c:c6:be:e2:b5:b6:ca:5f:44:
         0b:41:17:49:8e:92:89:7d:1c:18:eb:c4:bc:e9:dc:bd:b0:af:
         e3:36:3a:28:b2:47:77:5f:ef:22:cd:6b:ee:33:3a:cd:08:98:
         f1:e8:34:40:36:89:32:c2:73:49:c0:f3:6a:03:f8:aa:97:f7:
         af:31:96:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 04:34:44 2024 by rpki-client on console-ams.rpki-client.org