Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
File:                     aL00PB2fcEbGL5VfhnMZ2FKxShA.mft (raw, json)
Hash identifier:          YM0eqZWTWWSdcMCFZCDwQx/fDGtdULRW+yoJaZpV3Eo=
Subject key identifier:   08:D3:B6:85:8D:37:82:D5:DF:53:A3:F4:4B:E7:A7:A8:F4:CC:D8:BC
Authority key identifier: 68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10
Certificate issuer:       /CN=F36E6802AF/serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
Certificate serial:       3D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
Manifest number:          3C
Signing time:             Wed 23 Oct 2024 02:59:24 +0000
Manifest this update:     Wed 23 Oct 2024 02:59:23 +0000
Manifest next update:     Fri 25 Oct 2024 02:59:23 +0000
Files and hashes:         1: aL00PB2fcEbGL5VfhnMZ2FKxShA.crl (hash: cx3bPNz/G7eKbzvkoA56Nw+ijhGPzvT5DnpGmxEdcck=)
                          2: 10CA293E653F11EF8C440393762E951A.roa (hash: nhNLmRsBHLhK6LTWVHLzqZimVfw7FMGqSN9TfNAWHoE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6802AF/serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
        Validity
            Not Before: Oct 23 02:59:23 2024 GMT
            Not After : Oct 25 02:59:23 2024 GMT
        Subject: CN=6718668b-f273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:15:7b:90:a5:23:ee:5c:13:cd:30:fb:f0:9c:
                    e4:ac:c6:d2:6d:98:06:c5:f2:9e:36:cc:fb:7a:22:
                    55:0f:e8:45:cf:1e:8e:89:c9:17:ba:5b:3d:82:f2:
                    d6:4e:b6:0c:5f:71:02:10:00:f7:1d:72:81:30:c2:
                    fd:27:e8:33:d4:75:ca:61:bc:c1:cf:ae:b0:f0:97:
                    0a:59:76:80:b0:8f:0f:ed:3e:35:c1:72:27:e3:78:
                    0c:5e:9f:da:c1:26:15:33:fe:c9:68:11:2c:34:bf:
                    76:83:92:66:36:1d:6b:61:c8:99:5b:65:7f:f8:2d:
                    ad:de:0a:04:7e:8e:57:f6:23:c6:2f:67:f7:8d:38:
                    68:34:bc:2e:ad:b5:c6:d7:1c:4e:80:29:50:a6:44:
                    95:b9:64:55:78:b2:0c:7a:72:98:3a:f4:97:be:5a:
                    38:01:3d:cc:32:7e:bb:b7:88:d6:94:86:98:71:6a:
                    a0:07:48:a0:7d:0f:1e:da:18:2b:3b:77:b1:4a:7a:
                    21:19:cd:34:88:eb:42:fd:15:cf:db:fd:41:ea:e5:
                    97:29:19:a2:01:1b:60:57:5c:dc:32:18:0e:31:33:
                    61:63:7d:94:5e:9d:10:e3:41:67:51:bc:ea:5c:05:
                    32:a5:8a:c0:ee:85:0b:9c:30:fa:c9:27:42:9c:21:
                    e2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D3:B6:85:8D:37:82:D5:DF:53:A3:F4:4B:E7:A7:A8:F4:CC:D8:BC
            X509v3 Authority Key Identifier:
                keyid:68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c5:a7:db:e9:86:0e:59:7a:7a:de:b1:ae:10:0f:29:c2:ef:
         d3:31:1a:45:6c:fc:b7:de:fe:74:09:07:e4:34:19:bb:30:bd:
         1f:3f:8f:b2:83:12:49:ca:77:41:aa:13:18:2c:d1:d2:61:cb:
         49:4f:48:59:6d:cb:d3:f5:2f:00:8b:7a:1b:73:cb:11:50:2c:
         d6:f2:97:46:f4:6b:f7:19:e3:6b:ed:9b:cf:9c:3e:8c:13:77:
         ca:59:1e:35:69:84:29:65:cf:da:4c:eb:5a:62:84:58:da:6a:
         4f:af:dc:87:76:73:de:87:d4:ba:51:39:c0:7e:36:bb:01:1e:
         02:db:1a:31:2e:c8:34:cc:dc:a9:0d:b6:27:31:98:73:78:1c:
         7d:47:c6:24:87:cd:85:62:ee:b1:05:69:96:03:fb:49:27:0c:
         48:71:d9:a7:53:29:97:e8:ad:ca:8b:cd:a8:49:01:41:7c:ee:
         5b:3f:45:32:2e:1d:e1:c0:e8:52:4d:40:8b:19:aa:81:81:af:
         c3:df:4b:ad:15:17:b5:20:46:11:1a:e5:43:11:69:30:39:f5:
         a8:86:15:c3:de:5f:fe:5a:d7:2d:cb:12:c8:11:c4:42:2a:f3:
         f7:86:cc:5a:49:46:aa:44:18:fe:5b:b1:18:24:22:e8:41:2b:
         7c:87:12:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:41:26 2024 by rpki-client on console-ams.rpki-client.org