Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File:                     4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier:          5k46y5kzHSzpz1MT2mummgAuxd2+P7ry3G93Iy/9G/k=
Subject key identifier:   59:50:02:0C:2B:78:27:F7:A7:1E:DB:58:2A:31:41:C4:41:7D:73:D3
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer:       /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial:       EB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number:          EA
Signing time:             Thu 21 Nov 2024 02:40:00 +0000
Manifest this update:     Thu 21 Nov 2024 02:40:00 +0000
Manifest next update:     Sat 23 Nov 2024 02:40:00 +0000
Files and hashes:         1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: KkbhbXc4oMRFeIPgf1HTNNXaB41Px0Y4AvBNfbSYH+U=)
                          2: 5A1C572CF8AE11EE85EDAC3B017001B1.roa (hash: Nhi/kAnQFZgp/t5smGUgjSQeAv2V3l/PSJmDi9Vk5T0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                          rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
        Validity
            Not Before: Nov 21 02:40:00 2024 GMT
            Not After : Nov 23 02:40:00 2024 GMT
        Subject: CN=673e9d80-760f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:06:44:ed:ec:20:4a:de:e7:e3:75:43:f0:
                    be:1e:01:04:b3:f3:ee:14:29:c4:31:b4:19:a2:0a:
                    96:c3:0c:27:22:32:ab:20:e1:0e:2f:1c:5f:6c:ee:
                    97:40:5d:3a:84:a6:9c:92:e8:d0:ac:5d:60:9b:db:
                    e2:6f:e3:b4:34:59:95:f4:37:24:1e:47:44:a4:3a:
                    5a:8e:bd:fa:45:a7:28:e1:fd:e0:a1:68:86:54:62:
                    f5:0a:63:ae:97:8b:b4:63:e1:75:31:51:77:e1:12:
                    00:98:88:f6:cf:cb:47:12:23:26:76:fe:ee:a8:f6:
                    e5:26:7e:f3:05:0c:90:08:bb:49:0c:76:61:8a:5e:
                    78:00:7b:35:60:06:83:c2:ad:1e:e3:3a:b7:1f:2d:
                    0d:76:76:cb:34:84:16:34:7b:b8:60:34:08:b1:bf:
                    66:ad:f1:82:4e:ce:c2:d0:96:93:ab:bf:55:de:fe:
                    c6:27:9d:09:47:05:61:4c:33:1d:19:cf:b8:8b:ce:
                    c1:1d:79:57:35:0d:5a:57:c0:16:64:90:8f:bd:2b:
                    69:35:93:fc:41:04:30:e1:e2:5b:14:5c:c0:ff:a9:
                    20:a6:50:be:c2:03:06:af:a9:43:0a:c2:4c:1b:90:
                    5c:48:65:49:64:71:ae:d7:09:3e:7a:e6:fc:bc:d2:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:50:02:0C:2B:78:27:F7:A7:1E:DB:58:2A:31:41:C4:41:7D:73:D3
            X509v3 Authority Key Identifier:
                keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ad:a2:a1:68:cf:e1:76:5c:93:f9:0e:79:66:85:ba:8c:22:
         8b:c1:35:46:a4:6d:b5:f2:22:4a:95:40:05:2c:fd:b0:f2:47:
         ce:e8:cd:88:66:d1:0b:f8:c3:d7:00:2f:df:3a:e0:46:10:e4:
         57:c9:9b:82:bc:58:ad:9a:27:18:97:75:cd:d8:30:84:96:f8:
         c7:81:e2:de:de:a7:b3:18:8a:ed:fc:61:42:9b:34:ba:a3:f4:
         33:09:f3:f1:1d:ad:30:7c:29:de:21:ac:2e:99:df:fc:01:02:
         7f:9e:94:17:68:f0:77:4a:04:ad:33:9a:1c:56:e4:cb:5e:5e:
         15:4f:62:6b:bf:b6:70:b0:5a:09:5e:32:c5:8c:1e:9e:4c:0b:
         2d:37:e8:88:e7:57:23:ed:fb:3d:e6:c3:a8:07:5a:04:23:6a:
         1c:b9:d9:04:ea:37:76:60:f9:e5:78:fa:ae:a4:cf:48:11:c9:
         4e:c9:83:70:f0:3a:de:be:40:10:63:3c:fd:b7:90:79:d0:5d:
         de:5e:0d:08:ab:f4:89:28:66:17:64:6b:ab:2f:9c:f5:cf:75:
         ef:c6:4c:80:d4:dc:08:b6:a9:68:f9:e3:35:e6:27:a6:33:1f:
         94:76:78:af:d1:02:b3:d5:c3:a2:e4:ce:35:c7:d3:c1:92:fd:
         06:d9:98:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:36:59 2024 by rpki-client on console-ams.rpki-client.org