Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
File:                     AaNx1Ie11VLkTUu-yVarlsMlge0.mft (raw, json)
Hash identifier:          TnQrEDx5q3ylBnpVr/S3+ddWb1wvHX52UKsfU4JhmjE=
Subject key identifier:   7D:61:50:21:C7:76:F6:52:7E:6A:28:52:88:04:BD:3A:9A:7A:90:DA
Authority key identifier: 01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED
Certificate issuer:       /CN=F36DCAE3AF/serialNumber=01A371D487B5D552E44D4BBEC956AB96C32581ED
Certificate serial:       02CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
Manifest number:          02CB
Signing time:             Mon 06 May 2024 01:49:24 +0000
Manifest this update:     Mon 06 May 2024 01:49:23 +0000
Manifest next update:     Wed 08 May 2024 01:49:23 +0000
Files and hashes:         1: AaNx1Ie11VLkTUu-yVarlsMlge0.crl (hash: DXdjdwKr8rCjus6tsz3lMid/JytzSfOHuJlzJHg5b3U=)
                          2: 91DA0C3CF08F11ECA3387197F1222468.roa (hash: m3NCW8i2F16lSabUpSi4fXD8AQaLmw9scRn5comU59s=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DCAE3AF/serialNumber=01A371D487B5D552E44D4BBEC956AB96C32581ED
        Validity
            Not Before: May  6 01:49:23 2024 GMT
            Not After : May  8 01:49:23 2024 GMT
        Subject: CN=66383724-de0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:89:f5:a8:7d:5c:91:da:8e:65:a7:02:d5:d4:
                    c9:36:0c:c7:09:85:eb:b5:e7:07:a3:c9:c4:c5:b9:
                    b6:a9:30:dd:6c:70:ad:7f:bc:0d:e2:16:fc:1c:ea:
                    28:f7:07:4f:e8:00:20:0d:77:6d:5f:2e:9b:36:b9:
                    de:2a:b7:78:b7:fd:bf:e6:55:23:e8:d2:ee:9c:aa:
                    8d:76:98:b5:fb:fd:ed:ec:ca:e3:da:42:cf:84:0e:
                    df:00:60:a0:1a:b5:33:db:00:1f:58:d2:36:58:f0:
                    ef:84:3e:18:a0:37:d5:e8:e4:fc:b1:21:f9:0d:1f:
                    3e:98:8e:ef:d9:8c:d7:0d:49:7c:c0:ee:b9:ae:a4:
                    56:4b:75:e9:99:98:6e:d5:62:f8:9a:fa:60:9b:d9:
                    f2:28:c4:ab:06:d2:26:b5:4a:d8:3a:f5:fe:e4:7c:
                    b5:7b:5b:98:d7:a4:37:e3:2e:c3:6f:49:10:7f:fc:
                    50:2f:44:db:fb:b3:70:61:9f:50:3b:e6:3f:47:16:
                    94:6a:ae:6f:6e:7b:3f:ab:0d:cc:be:d2:5c:1e:ad:
                    fb:8f:d7:de:c5:7e:a8:c3:92:5d:eb:f6:3b:7e:e0:
                    c4:ae:b9:78:7d:2c:fe:75:ac:33:5b:86:d5:a4:c6:
                    57:74:38:e3:42:f4:2f:3f:42:07:be:10:c7:06:09:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:61:50:21:C7:76:F6:52:7E:6A:28:52:88:04:BD:3A:9A:7A:90:DA
            X509v3 Authority Key Identifier:
                keyid:01:A3:71:D4:87:B5:D5:52:E4:4D:4B:BE:C9:56:AB:96:C3:25:81:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AaNx1Ie11VLkTUu-yVarlsMlge0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DCAE3/830D63FAF08C11EC92201A8EF1222468/AaNx1Ie11VLkTUu-yVarlsMlge0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e4:93:3c:69:77:fc:7c:58:44:b9:99:ba:d2:a1:1c:2b:2b:
         c8:b0:3c:ae:a4:95:45:40:17:a7:e9:9f:a8:db:cc:38:d3:60:
         90:82:13:74:26:a5:58:0d:b6:8f:69:19:8c:c3:db:78:12:fc:
         8a:3e:b6:08:ad:3f:02:ac:b5:2e:fa:22:2b:62:34:31:9e:98:
         0a:ca:c6:d1:8e:d7:05:a9:44:86:62:e9:25:a5:cd:a3:66:ea:
         7b:0e:86:40:16:60:26:4f:7d:18:14:89:47:1a:26:c7:0c:4f:
         4b:cb:f6:cc:ca:4f:bf:b5:c8:46:7a:33:9a:c0:c8:01:e9:e9:
         b8:2f:da:b7:0c:fe:32:40:8d:88:b9:b3:34:b6:39:c6:35:c1:
         5b:65:11:a3:dc:d8:80:ae:6d:10:7e:a5:99:e4:12:5e:09:4a:
         56:ab:01:21:95:fd:54:76:b4:c8:61:39:81:de:1d:a6:72:1c:
         0c:95:52:c3:0e:64:e0:a0:05:8e:0f:96:b1:13:c6:91:32:33:
         1f:10:b3:9f:b4:4c:ee:15:02:6f:10:35:ff:ae:b5:2c:69:d9:
         aa:a4:d9:94:1d:d5:0b:6b:46:2c:9d:dd:0b:30:3c:51:0c:aa:
         00:7c:9d:28:eb:7a:f5:0b:1b:fa:40:94:32:50:ec:db:45:08:
         37:e7:6d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:08:42 2024 by rpki-client on console-ams.rpki-client.org