Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
File:                     Po64WOYVOSGtsL9fC8lbTQbHw-8.mft (raw, json)
Hash identifier:          5iCrDFm23spGJhIj32O4gqo0ICXHGi5Di85Xm2JkYTw=
Subject key identifier:   D8:8A:45:06:1C:02:62:A3:97:48:84:56:D7:9B:E3:24:7D:88:0E:EE
Authority key identifier: 3E:8E:B8:58:E6:15:39:21:AD:B0:BF:5F:0B:C9:5B:4D:06:C7:C3:EF
Certificate issuer:       /CN=F36E8DA8AF/serialNumber=3E8EB858E6153921ADB0BF5F0BC95B4D06C7C3EF
Certificate serial:       0255
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
Manifest number:          0254
Signing time:             Fri 03 May 2024 02:01:23 +0000
Manifest this update:     Fri 03 May 2024 02:01:22 +0000
Manifest next update:     Sun 05 May 2024 02:01:22 +0000
Files and hashes:         1: Po64WOYVOSGtsL9fC8lbTQbHw-8.crl (hash: OAXz2+sXrNCCg1uc6sZmxEMCT8QINN39tiaR3PYflOY=)
                          2: 55A38D48495D11EDB19BAAEAF1222468.roa (hash: SZNSy5X2cBi0hD7/2UgPgs5N7piTYi+vUEEFastGQCs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8DA8AF/serialNumber=3E8EB858E6153921ADB0BF5F0BC95B4D06C7C3EF
        Validity
            Not Before: May  3 02:01:22 2024 GMT
            Not After : May  5 02:01:22 2024 GMT
        Subject: CN=66344573-2467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:18:3d:e3:24:4c:3e:9b:69:91:69:a2:49:33:
                    6e:ad:7f:e1:42:06:42:16:d1:32:fa:2b:7c:f7:b6:
                    1f:16:c5:03:a1:85:2e:19:de:d7:42:8b:b4:ab:2d:
                    87:93:14:a5:18:2d:0f:21:34:30:55:19:a2:3c:11:
                    0c:bf:a0:8d:3f:34:05:47:a5:11:3d:d4:72:24:93:
                    33:d9:7b:fd:9f:03:1d:ed:76:fb:1e:49:77:fa:73:
                    42:88:4e:5c:b4:a7:55:29:fe:a1:13:70:77:91:fa:
                    d8:bf:56:6e:64:57:e4:a3:bd:43:66:98:c0:67:17:
                    87:80:a5:e8:00:a3:e2:b3:0d:08:9d:ea:a4:9d:54:
                    95:e9:e4:15:c7:35:65:74:71:b5:3c:6f:bb:7d:31:
                    fc:88:ac:e1:1c:de:4a:6a:7f:7b:bf:00:47:2a:e8:
                    6d:00:ef:a2:24:a9:e8:2d:21:9e:f1:19:1d:d4:13:
                    20:3b:72:ea:35:d5:f7:97:a7:50:f6:50:f0:24:59:
                    54:ed:91:75:d7:ee:57:38:4e:29:6d:52:4d:34:dd:
                    cb:6f:13:f5:c1:dd:d5:4f:97:c0:d6:65:0d:a4:53:
                    bb:a9:8f:b8:d2:d1:19:68:85:82:ff:8c:b9:9b:9f:
                    44:a6:7a:b9:e8:e9:69:df:8d:1b:28:a8:89:6e:87:
                    e5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8A:45:06:1C:02:62:A3:97:48:84:56:D7:9B:E3:24:7D:88:0E:EE
            X509v3 Authority Key Identifier:
                keyid:3E:8E:B8:58:E6:15:39:21:AD:B0:BF:5F:0B:C9:5B:4D:06:C7:C3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:13:50:dc:30:9e:c2:c8:64:8b:4c:92:8f:8b:06:14:3e:e8:
         e2:82:ed:18:08:23:b8:28:e6:89:2f:d4:43:05:7b:d7:31:72:
         11:6f:76:b0:ee:bd:60:5b:21:04:23:31:7e:a6:56:9d:f4:10:
         1c:75:1c:26:0b:79:c8:e4:cb:97:b5:01:bd:b9:fe:b4:b1:f2:
         8b:68:cf:88:b8:62:26:bb:81:fc:82:f6:78:0f:0a:01:17:b6:
         d8:56:80:a1:3d:6c:06:79:c4:73:59:89:6c:58:b9:46:85:73:
         dd:aa:ed:d1:06:28:d2:2e:31:5f:a2:35:25:e7:87:d3:2a:12:
         bf:95:af:18:1e:95:4f:63:65:5e:05:fb:a8:4b:35:78:53:e8:
         6b:dc:31:e1:f7:88:cc:c2:23:f7:52:d7:60:b4:3f:67:1a:e3:
         76:fb:d2:2c:7e:67:bd:3b:4e:ba:8f:d3:70:97:2a:30:84:e2:
         e5:f7:20:dd:d5:67:a8:c2:2b:63:14:89:94:76:e2:5c:1a:4c:
         44:f7:57:9f:06:62:b8:c6:ba:a1:a2:a4:ce:b0:b7:e0:e2:98:
         b3:1b:d0:cb:1b:e3:ee:d2:c6:d7:bb:67:e5:a1:be:78:a7:ae:
         c3:6c:d4:29:31:38:ca:21:43:8b:76:14:08:41:cf:2c:34:00:
         23:9d:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:43 2024 by rpki-client on console-ams.rpki-client.org