Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
File:                     U0PDi98uSRgxOaWKxC8Rb6mWc80.mft (raw, json)
Hash identifier:          X7Q6jIok8nC1b/VZPEyUjvanFN9Qn39QjSz+cgNu/8M=
Subject key identifier:   A2:B2:4E:F5:FD:3C:99:4C:E0:0F:C2:5A:FC:1C:3F:F8:26:36:AB:46
Authority key identifier: 53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD
Certificate issuer:       /CN=F36EADB7AF/serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
Certificate serial:       02A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
Manifest number:          029D
Signing time:             Thu 02 May 2024 01:52:21 +0000
Manifest this update:     Thu 02 May 2024 01:52:21 +0000
Manifest next update:     Sat 04 May 2024 01:52:21 +0000
Files and hashes:         1: U0PDi98uSRgxOaWKxC8Rb6mWc80.crl (hash: Q+0alq4oy257VgsUPzwNHvCZgeuRkLSH55bWvIbXS94=)
                          2: 391A826E132311ED89F578F7F1222468.roa (hash: f4iDvOghIvvKoUP+uwLCDZEkbK2gOJxg1Mz+fV118HQ=)
                          3: 8EDD8A98132311EDA5DBA8F8F1222468.roa (hash: NC2uz7SGVEzPm4cOqmNgoejzxjyFF2dCIW3kwBubs0A=)
                          4: 442E54A0698611ED8D98369BF1222468.roa (hash: v9qpDczOM2omGAxHNgOZ2CM78LXieRY5BCkv9MbsQT8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EADB7AF/serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
        Validity
            Not Before: May  2 01:52:21 2024 GMT
            Not After : May  4 01:52:21 2024 GMT
        Subject: CN=6632f1d5-bcd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:f7:8f:d6:2b:82:1a:a6:67:16:14:21:77:
                    f8:be:56:09:7d:1d:df:44:e9:02:04:9e:c4:43:8c:
                    37:44:55:b9:01:e3:49:48:ae:cc:59:d2:8b:0f:5f:
                    df:3f:10:8a:5b:bf:24:c3:d1:5f:73:5c:2c:36:c4:
                    2b:bf:ab:3b:37:b7:5a:8c:2c:63:a2:2d:66:6b:47:
                    13:47:bc:d4:75:ee:6b:f5:6d:fe:0c:aa:1e:c0:ad:
                    da:32:fd:62:f1:18:e6:6b:b3:83:ae:0a:28:92:5e:
                    2f:fe:47:b8:ed:48:1b:9a:9a:35:f5:f0:28:a5:f4:
                    0e:6d:0a:6c:21:db:7f:cb:b2:04:7e:ae:89:ac:d3:
                    b2:e4:c8:dd:f5:d4:ec:9f:06:8b:90:8a:7b:4b:1c:
                    f9:90:95:ab:62:87:19:43:36:84:27:35:3f:3a:e5:
                    ae:1b:0c:82:4e:66:c9:f3:d5:72:14:98:1b:a1:b8:
                    c4:1b:f3:6d:9e:12:18:8d:52:32:ba:cb:bb:09:df:
                    31:93:b3:67:5e:c1:bc:05:2c:e8:fc:82:12:71:f8:
                    0f:f3:3e:8b:77:a2:47:20:31:f6:e2:76:2d:c4:ae:
                    7e:76:0f:0c:a2:4a:e9:b1:da:f3:38:d6:cd:be:8f:
                    bb:64:af:10:cd:d0:d4:09:3d:7d:15:94:65:a2:e7:
                    e3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B2:4E:F5:FD:3C:99:4C:E0:0F:C2:5A:FC:1C:3F:F8:26:36:AB:46
            X509v3 Authority Key Identifier:
                keyid:53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6e:d9:96:ab:7d:9a:49:60:db:b7:ed:18:ba:83:87:58:c3:
         51:f9:09:c1:65:b9:8b:bb:ab:78:c2:e0:3e:f7:0a:58:ad:52:
         ad:1a:54:0a:53:5a:2e:01:43:ac:21:ea:81:4d:37:dd:52:ca:
         31:48:dd:08:d6:be:27:61:f2:7a:8a:65:e0:2f:f9:a1:94:87:
         71:56:3e:f1:fc:b1:a8:43:4d:24:cb:79:e6:17:08:0b:c7:94:
         b5:7d:ba:02:66:9d:be:ed:f4:a2:e9:c8:76:2c:61:c0:02:91:
         5e:be:b3:3b:53:75:fd:bb:98:63:e7:ab:32:b2:53:ff:51:2e:
         0b:b9:89:b8:7e:a5:1c:c7:a2:0a:8f:a3:c3:5d:3e:95:e5:a6:
         58:f6:c0:5f:3a:71:f9:cf:26:fe:bf:8d:a8:b7:95:93:68:3a:
         91:63:98:ae:4f:b0:a5:05:89:8b:af:07:1a:1c:6b:8d:ce:4e:
         2d:f4:48:f3:ef:93:ee:55:9c:39:73:ce:c0:3b:8e:4b:0b:53:
         eb:6b:2d:46:76:8e:68:63:33:d9:38:16:31:d5:9d:76:4f:58:
         c6:81:31:d8:8b:d5:84:22:cf:28:78:72:d4:21:b6:4b:ed:5a:
         3c:00:6b:7e:9e:8f:d6:08:ed:dd:77:6f:f0:52:b1:0e:8e:43:
         f2:e2:49:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:52 2024 by rpki-client on console-ams.rpki-client.org