Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
File:                     Rh3mXlosn0bNsVRHChQs6rACo-g.mft (raw, json)
Hash identifier:          L3ECAy+vDyWZXbAiJR913N2Ih0TaIw1pFJ9+t44xyu4=
Subject key identifier:   ED:96:7F:E1:2E:85:D6:91:4D:A8:BE:36:0E:C4:0D:03:CC:A1:4A:0E
Authority key identifier: 46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8
Certificate issuer:       /CN=F36E0C57AF/serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
Certificate serial:       73
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
Manifest number:          72
Signing time:             Wed 23 Oct 2024 02:52:19 +0000
Manifest this update:     Wed 23 Oct 2024 02:52:18 +0000
Manifest next update:     Fri 25 Oct 2024 02:52:18 +0000
Files and hashes:         1: Rh3mXlosn0bNsVRHChQs6rACo-g.crl (hash: 1OTYPgnwyyzSZFmX4OYDsjazuXQHGs0m+XwORqYVhRQ=)
                          2: C398885E3AC311EF90F6DF67762E951A.roa (hash: ul3nn21hDO7UgXCYkLGPryVSInddXUiuHuE7QBhZSgU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0C57AF/serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
        Validity
            Not Before: Oct 23 02:52:18 2024 GMT
            Not After : Oct 25 02:52:18 2024 GMT
        Subject: CN=671864e3-5d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:84:b2:5d:71:91:12:66:ac:a6:ce:19:27:
                    81:56:ff:d6:2c:f0:8d:dd:b6:5a:37:85:73:a0:4b:
                    80:18:77:ce:c4:2b:28:36:17:fe:66:da:8a:ff:ba:
                    3e:a4:dc:ea:a4:0d:e3:e4:d7:b0:97:e5:88:fa:14:
                    6b:c1:f3:a8:f7:5f:51:d5:40:17:de:76:b0:17:cd:
                    e0:fd:c9:07:85:c3:f9:23:aa:f8:6c:eb:9d:e1:9a:
                    7f:96:5b:2a:ca:b7:58:d5:2b:b4:8d:d5:37:37:9e:
                    b6:9d:3c:ce:25:61:72:b3:ee:68:e5:69:91:80:c4:
                    fc:30:49:1b:cc:b4:f2:be:f1:9e:67:24:49:9c:a6:
                    74:f1:61:71:d8:6e:1a:ed:45:74:1d:1b:3c:f5:69:
                    86:eb:bf:d0:de:c0:05:af:25:ab:bc:fa:38:2e:e1:
                    6e:b0:70:10:61:6d:2b:21:b5:a6:0e:1d:fe:df:70:
                    1e:91:df:7b:30:42:34:ec:1f:cb:f2:97:da:43:b9:
                    f3:51:38:a8:7b:dc:ac:01:db:69:e9:d1:95:35:9b:
                    cf:ee:4a:ff:c1:6e:bd:58:a1:88:42:9b:37:4b:a2:
                    45:ef:6a:fb:b3:31:ab:18:ac:78:ad:d9:6f:53:23:
                    68:eb:12:80:0b:ee:f4:61:8c:b4:68:0d:98:cc:ff:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:96:7F:E1:2E:85:D6:91:4D:A8:BE:36:0E:C4:0D:03:CC:A1:4A:0E
            X509v3 Authority Key Identifier:
                keyid:46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:65:92:6f:c1:ff:ce:f0:02:5f:72:b8:9b:73:81:ba:0f:c0:
         a7:ac:27:28:2d:67:90:1a:e3:70:4a:cc:e7:ac:19:20:ad:31:
         0a:5b:08:7a:ee:7f:75:91:37:76:48:83:53:70:7a:4b:6b:b3:
         96:bf:77:6b:da:29:97:d1:bc:b5:5e:c8:e0:bd:46:3c:37:e0:
         04:c6:17:95:1e:2e:be:62:a6:4a:34:bf:52:5d:ed:ab:a1:2d:
         6f:c5:c9:93:a6:b5:9a:11:30:2a:83:e0:db:67:bd:23:cc:11:
         58:c9:ff:2d:60:7c:d6:b1:4f:7d:d1:13:02:03:d5:b3:64:b4:
         b5:cc:4a:ca:ca:92:10:a0:b5:f5:91:4e:fe:5a:02:1d:57:66:
         96:cf:5c:72:57:be:4d:5b:52:a5:36:8c:5a:3d:af:d5:b4:b5:
         29:22:bf:15:24:a2:62:a1:11:61:bb:9f:4c:93:16:81:ed:b8:
         0d:12:36:68:cf:0c:81:c4:00:6d:ba:c6:ba:90:8a:42:23:4a:
         59:91:a3:43:67:21:91:92:8a:ea:5b:50:34:e4:15:60:94:35:
         3d:a5:40:4d:50:59:5c:23:bc:6e:52:1e:45:b0:8a:95:f7:69:
         42:4c:a5:e3:59:1d:5b:30:fd:73:f9:62:7a:0a:75:39:e6:90:
         0f:a2:05:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:01:01 2024 by rpki-client on console-fra.rpki-client.org