Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
File:                     b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft (raw, json)
Hash identifier:          QmE/UYXPZytj2CR17USSPLZgxruWuc8x/rHm+Tisfbk=
Subject key identifier:   97:E2:12:A2:6E:91:9E:F0:C5:EE:9B:58:17:73:34:BB:23:8F:AD:60
Authority key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
Certificate issuer:       /CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Certificate serial:       03BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
Manifest number:          03BC
Signing time:             Fri 22 Nov 2024 01:50:15 +0000
Manifest this update:     Fri 22 Nov 2024 01:50:15 +0000
Manifest next update:     Sun 24 Nov 2024 01:50:15 +0000
Files and hashes:         1: b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl (hash: RTf1A+OV6SKNfuIkDSpPQLKP9WEMugZ9kloLkEF5Evk=)
                          2: B1A16132D28A11EC8F270DC0F1222468.roa (hash: 4TQRBmeOxAbF3KLeP0SF+V9s9RzwKR9Ie0C7o3vk0Oo=)
                          3: E3D5D52AD28A11ECB4D0B0C0F1222468.roa (hash: MgA7cMYgIRFHAgD+dSaQaOo5eOVm+neEzUW6GLOT448=)
                          4: 784AE4BCD28A11EC81ED62BFF1222468.roa (hash: CkuoR2/+F6JKHq8BKZH5DTfRvZh+LqHD0UlmcfmPCMw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
        Validity
            Not Before: Nov 22 01:50:15 2024 GMT
            Not After : Nov 24 01:50:15 2024 GMT
        Subject: CN=673fe357-f82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:67:aa:ea:30:e5:e8:6a:cf:ee:c9:ad:fd:87:
                    c1:b7:fa:5f:c5:d8:dc:bc:27:e6:32:a2:6c:60:c7:
                    37:f3:81:41:9d:e3:8e:63:07:fa:80:a6:88:b7:27:
                    bc:b9:a5:29:15:8e:cd:99:a9:06:b6:b2:fe:e3:9a:
                    03:f8:4e:06:c8:0f:d2:cd:76:23:f7:00:7c:bd:d4:
                    8d:c6:b2:b9:b0:bb:5b:b2:7d:95:3c:78:be:5b:1e:
                    a5:26:f5:76:8e:c5:30:5e:fc:a9:df:91:37:17:21:
                    5d:19:67:1a:36:82:8e:df:38:17:56:47:f6:b5:6b:
                    45:d8:d7:e2:38:eb:85:6a:59:3c:44:d9:51:6b:7e:
                    d6:00:1d:f1:9c:04:4a:9d:24:49:e8:66:cb:e9:b5:
                    e5:d9:40:8f:61:ed:a3:92:dc:a9:82:ad:e8:29:13:
                    54:98:8a:11:e8:b6:37:99:51:2a:f5:6e:be:7a:43:
                    2c:b8:b9:9b:7c:3d:c1:71:9e:2e:64:af:72:5d:46:
                    39:21:88:d4:63:9f:e9:dd:8b:5a:e5:61:a0:f8:bb:
                    fb:37:b7:c1:79:fc:d2:17:97:47:ae:09:79:33:23:
                    f3:e1:a8:9a:37:b9:86:8b:3f:7d:30:b0:a6:1b:77:
                    3c:a4:58:a1:ca:aa:45:eb:f3:35:d3:56:37:15:fe:
                    ef:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E2:12:A2:6E:91:9E:F0:C5:EE:9B:58:17:73:34:BB:23:8F:AD:60
            X509v3 Authority Key Identifier:
                keyid:6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3a:da:c9:5d:44:ee:57:35:85:e8:c3:a4:b3:f4:04:11:75:
         3e:ab:fd:9a:23:cf:c7:ac:e3:e5:47:db:ea:52:d9:22:db:ae:
         c4:16:1d:a9:25:8f:60:a7:a7:3b:1f:84:17:1f:fe:d7:2a:2d:
         f0:fa:ca:15:b3:e9:28:81:66:67:57:e5:77:57:e0:40:e2:93:
         6f:7e:2b:8d:57:4d:ed:83:fe:8e:13:bf:55:21:99:42:e7:82:
         c3:e6:b8:5e:b3:bf:a2:1d:d3:dc:f1:64:50:7a:be:84:e3:e2:
         b9:0d:3e:e4:ae:2d:9f:cb:b6:3e:a1:56:d3:db:d6:18:81:7b:
         7d:7d:d0:c6:28:d6:c2:31:6f:a5:57:6c:8d:ef:64:de:3b:c7:
         da:51:7b:37:3b:a6:f8:01:7c:ea:64:93:fb:67:27:8d:7d:96:
         8a:3b:e1:c4:54:93:1a:0c:dd:e9:38:64:9d:22:f9:5d:cc:0e:
         0e:6d:20:d7:64:56:80:aa:3b:c7:c2:b6:c0:a4:e3:f2:61:85:
         9d:68:91:79:cd:1a:8c:bc:6c:02:af:dc:08:20:e3:f0:9d:ea:
         f3:6c:79:91:0b:45:2b:a0:18:bb:c0:9c:dc:cf:3c:2b:09:d3:
         37:01:ba:d0:5f:bd:63:ce:7f:79:e4:cb:6f:18:4a:c0:30:75:
         b1:93:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:00 2024 by rpki-client on console-fra.rpki-client.org