Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
File:                     RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft (raw, json)
Hash identifier:          IX+BOA4Eok/m71Cpfep2HBQPZGZhIzv41QzmY04l1bg=
Subject key identifier:   F3:EB:7C:3D:9A:81:72:35:A7:47:70:2D:A1:D1:F4:6E:E6:69:5B:32
Authority key identifier: 45:69:31:50:19:64:CD:B8:84:B1:47:5B:56:D6:8F:30:69:C2:2A:F2
Certificate issuer:       /CN=F36E3941AF/serialNumber=456931501964CDB884B1475B56D68F3069C22AF2
Certificate serial:       0123
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
Manifest number:          0120
Signing time:             Mon 27 May 2024 02:19:59 +0000
Manifest this update:     Mon 27 May 2024 02:19:58 +0000
Manifest next update:     Wed 29 May 2024 02:19:58 +0000
Files and hashes:         1: RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl (hash: BD3V8ZyKTBegFBCIPpApTz73muUHSVfZwKziBkxXXYc=)
                          2: 0C2FE94C570611EEAC1023344AD9E6FC.roa (hash: 7/VCkuO1MJrUrePvzuQCDljF/ayH1j149oaeTB6AkuI=)
                          3: 90BC8EA4FEA911EEA69C406E017001B1.roa (hash: UwU5AHQOAS7CU+i+ADd/wfQ4IXSkFtvjT7nzo/QGiMQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 May 2024 00:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3941AF/serialNumber=456931501964CDB884B1475B56D68F3069C22AF2
        Validity
            Not Before: May 27 02:19:58 2024 GMT
            Not After : May 29 02:19:58 2024 GMT
        Subject: CN=6653edcf-42ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:7c:f7:98:97:9e:59:34:de:7e:8d:ab:35:
                    f2:cf:6c:03:4f:e7:94:c8:82:f5:81:98:b1:ba:2d:
                    b6:1a:b7:37:ed:9c:52:a7:a8:55:0c:70:e4:f1:2d:
                    8c:0c:38:1d:94:23:17:47:60:6d:ba:78:de:3a:0e:
                    69:05:db:ea:9f:3b:a2:9a:33:e3:21:ec:c5:dd:b3:
                    48:14:dc:0e:a3:08:b9:9a:21:01:83:37:c2:4a:28:
                    b8:56:b7:ce:66:6d:b3:98:f6:f0:19:4a:fc:f6:f0:
                    09:d6:e8:b5:4d:16:74:13:35:06:f2:64:8e:a2:e7:
                    2d:39:95:9a:7c:ac:1d:bf:1b:bd:fb:e4:f7:64:9b:
                    00:08:c7:6e:76:6c:c7:ca:1b:75:0d:e4:6c:5e:26:
                    b7:a7:4b:2b:a4:d2:d7:eb:3d:54:57:1f:87:4f:aa:
                    4e:25:9f:f1:43:83:a7:61:84:a9:d0:d8:e7:a4:62:
                    b6:4c:47:b7:88:35:c2:35:39:06:fd:90:59:00:9e:
                    df:9d:98:53:90:f1:ea:f0:d3:68:8d:ff:c7:f0:8e:
                    e0:91:a2:1b:9f:2f:5a:df:66:7f:fc:07:f1:a3:c3:
                    bc:55:9f:95:a5:6a:49:94:05:9a:f6:e6:ab:0b:c2:
                    6e:af:dd:4f:87:ee:de:ae:54:1a:95:5f:37:e8:cc:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EB:7C:3D:9A:81:72:35:A7:47:70:2D:A1:D1:F4:6E:E6:69:5B:32
            X509v3 Authority Key Identifier:
                keyid:45:69:31:50:19:64:CD:B8:84:B1:47:5B:56:D6:8F:30:69:C2:2A:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RWkxUBlkzbiEsUdbVtaPMGnCKvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3941/5818052445D111EE8A5CA6574AD9E6FC/RWkxUBlkzbiEsUdbVtaPMGnCKvI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7a:4c:aa:96:1f:d4:a1:38:be:05:ae:aa:77:3c:a7:c7:7c:
         37:c0:0d:56:79:5c:ee:27:e3:b7:a7:b1:71:57:46:a4:02:cc:
         9a:c8:50:d3:5c:19:73:ca:1e:9d:49:66:61:ac:10:9a:99:7a:
         bb:22:fb:a1:04:64:36:4d:ac:67:ae:67:c7:64:a2:a8:7c:20:
         c0:b5:b6:1c:18:97:c3:14:43:fb:b0:27:69:3e:06:1c:8c:0c:
         fd:98:9c:b8:dd:7d:47:b3:8a:26:02:b7:81:3b:bd:86:d7:cc:
         77:76:b2:54:df:fd:70:bf:6e:97:c9:50:89:88:ae:dc:a2:38:
         ca:ca:db:16:9b:54:5b:92:3b:d8:b1:81:3a:79:62:f6:b0:e4:
         75:b2:ac:80:49:2d:e1:e4:58:cb:c0:67:64:1a:cb:3d:0b:62:
         3d:60:60:96:e3:9a:53:9e:c3:ed:82:fc:5e:4a:ac:79:22:1e:
         71:0e:59:27:34:4d:ad:d1:98:c7:f4:76:bb:8a:84:ce:80:18:
         d4:f1:47:ca:db:da:a0:b3:d4:6a:47:d3:c0:31:b0:95:6e:de:
         13:15:b1:86:32:a9:50:6c:38:9c:46:64:c1:7e:f3:8c:2d:b5:
         08:b0:d3:ed:d4:30:78:1f:f1:38:6c:7d:82:86:85:ab:8e:05:
         7d:2a:03:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----