Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File:                     nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier:          L5q3QePQM/2zns3a6lfw7n3ddiBGP1uxc7HYdV6mlJI=
Subject key identifier:   7B:4B:51:C6:E1:26:F6:4B:D7:4E:60:09:7B:38:A7:9D:A9:63:97:32
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer:       /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial:       011A
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number:          0119
Signing time:             Sun 19 May 2024 02:20:12 +0000
Manifest this update:     Sun 19 May 2024 02:20:11 +0000
Manifest next update:     Tue 21 May 2024 02:20:11 +0000
Files and hashes:         1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: /zOr8hn3hc6N7BzuIp0NLOyqOtJYA1Rgx9xt66h4v2k=)
                          2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
        Validity
            Not Before: May 19 02:20:11 2024 GMT
            Not After : May 21 02:20:11 2024 GMT
        Subject: CN=664961dc-f18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a6:02:b2:fb:7d:f1:b7:67:5a:fe:b5:33:39:
                    ef:ea:72:52:12:42:dc:b5:eb:fd:52:ef:fb:84:e0:
                    05:af:cd:c5:25:54:f0:85:b1:1b:5e:14:41:e1:a1:
                    0f:dd:7f:b0:80:2f:b3:a3:39:7e:19:06:4e:24:0e:
                    fe:00:5b:e0:21:ad:b6:1e:52:6a:a9:f8:e5:6a:35:
                    a0:7d:c7:e4:d4:f2:03:db:4c:94:3c:40:aa:40:16:
                    70:52:95:f8:83:55:5e:38:d4:b5:fd:69:4b:86:d4:
                    bd:67:08:a4:17:2c:86:7b:14:46:63:38:1e:15:e9:
                    d7:4a:5d:31:1c:ca:b5:ed:40:f2:2b:ee:50:e9:fa:
                    ec:1f:b1:78:b7:52:1b:81:78:11:9d:ba:74:45:58:
                    a0:3f:95:c3:c2:46:4e:88:3d:90:f3:53:f5:59:64:
                    cf:22:7c:6c:d6:83:38:af:d8:bb:77:e0:6c:e4:c1:
                    0b:89:1b:6f:d2:3f:a6:1c:0e:84:7a:7c:c4:52:fa:
                    7f:4b:fe:20:10:63:33:98:01:ea:f7:ea:96:f8:ea:
                    30:e4:82:98:05:a1:13:f3:8f:6d:07:6e:d0:58:6d:
                    30:f4:74:be:91:1e:4d:4b:cb:7e:17:f2:66:f5:ac:
                    9d:93:4a:e8:09:f3:41:5b:8c:2e:d3:ca:e7:23:9a:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4B:51:C6:E1:26:F6:4B:D7:4E:60:09:7B:38:A7:9D:A9:63:97:32
            X509v3 Authority Key Identifier:
                keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ac:45:64:6e:11:3e:71:d1:ad:42:86:78:22:cb:fc:e7:d9:
         08:5a:f9:d8:b0:2b:96:89:e1:07:2c:3b:ac:59:32:aa:19:a9:
         22:15:4b:ea:81:ad:78:04:7d:f4:a1:92:10:60:1e:b7:57:1b:
         82:9b:a6:c3:f0:2d:01:f1:74:4f:9c:76:cb:f6:c0:31:7b:f2:
         cc:ad:d9:c4:07:a7:a1:94:c4:c4:d0:1d:22:15:5c:cd:6b:e0:
         9f:50:23:cc:1b:fe:3b:37:34:9a:8d:0e:c3:8f:29:85:0b:73:
         1d:84:78:19:32:6c:a7:ea:32:f7:52:2f:1a:b6:6a:af:96:53:
         df:55:8e:c9:0e:e1:b7:f5:67:31:58:ad:cb:4b:04:63:17:60:
         a2:35:d5:37:57:ac:7a:eb:ec:d8:e4:d7:0a:2b:a4:ae:c4:7a:
         e2:f9:90:c3:5e:f9:4b:97:ad:71:84:54:d0:22:2b:e1:94:f8:
         d4:5e:e7:84:da:c9:6d:c5:71:ca:08:a3:38:c4:5c:f1:7e:cd:
         ef:b1:d2:d2:2f:b5:68:07:c4:aa:42:58:9d:ac:24:96:f2:21:
         44:26:c8:a5:a4:58:85:fe:7b:bb:87:3d:19:e9:81:57:8d:8e:
         50:19:c3:68:7c:45:2e:18:53:d0:b7:54:f2:3e:a6:20:64:28:
         9c:d8:a7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:59:02 2024 by rpki-client on console-ams.rpki-client.org