Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
File:                     -fFqivVlH4qYTwMxRWULP55dioY.mft (raw, json)
Hash identifier:          0a/IS91A05NBWSbIzVZx7JEJNF7ftkxnOhRzkNOWMzQ=
Subject key identifier:   C4:76:BB:49:44:03:44:7D:96:CE:18:06:C2:F6:66:49:B1:A7:07:50
Authority key identifier: F9:F1:6A:8A:F5:65:1F:8A:98:4F:03:31:45:65:0B:3F:9E:5D:8A:86
Certificate issuer:       /CN=F36EC460AF/serialNumber=F9F16A8AF5651F8A984F033145650B3F9E5D8A86
Certificate serial:       036C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
Manifest number:          036A
Signing time:             Wed 29 May 2024 01:43:18 +0000
Manifest this update:     Wed 29 May 2024 01:43:17 +0000
Manifest next update:     Fri 31 May 2024 01:43:17 +0000
Files and hashes:         1: -fFqivVlH4qYTwMxRWULP55dioY.crl (hash: 721NaEincVsEixuzMbgbi6OKC3dPLWuAhAAFLmIxaeE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC460AF/serialNumber=F9F16A8AF5651F8A984F033145650B3F9E5D8A86
        Validity
            Not Before: May 29 01:43:17 2024 GMT
            Not After : May 31 01:43:17 2024 GMT
        Subject: CN=66568836-697b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:57:67:ca:45:a4:d5:e9:ec:be:29:2c:68:
                    f0:ee:86:0a:03:b3:b8:3e:22:72:17:5b:e6:af:90:
                    4e:51:87:88:c1:7c:ce:4e:d4:04:fa:3d:cd:a5:14:
                    54:a3:ac:55:e3:23:17:8a:24:0a:d3:ca:93:f1:2a:
                    30:54:c4:2f:6d:e1:7e:28:3a:fe:23:81:48:09:04:
                    4d:3c:1a:74:bf:2b:ce:ba:ec:bf:64:37:b4:aa:2e:
                    77:ed:52:48:c2:bc:bd:3e:73:d3:a4:bc:40:1b:61:
                    4f:1d:15:ab:8f:f0:76:30:2f:d4:c2:66:e7:75:c4:
                    2b:8e:71:0b:91:c9:26:43:93:5b:6b:51:90:f6:2b:
                    b8:cf:81:98:91:74:c2:4b:fe:cb:b4:1f:1d:a9:c9:
                    9b:59:56:11:0a:84:e0:87:df:35:08:44:25:11:0d:
                    d4:69:7b:84:69:d3:3e:10:15:53:64:2e:e4:0e:61:
                    2b:01:e4:ed:e5:37:0f:d1:ca:48:f5:41:5b:9f:a5:
                    bc:f7:e9:9e:17:73:ea:73:e4:f5:cc:64:87:99:c9:
                    73:61:ba:29:03:2b:fb:20:cd:6c:d9:8c:24:fc:60:
                    50:cd:bb:97:6e:91:2c:64:f8:bf:4e:15:e6:4e:62:
                    cc:4a:f1:e0:2e:fd:e5:41:50:57:b5:6e:c0:57:89:
                    d1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:76:BB:49:44:03:44:7D:96:CE:18:06:C2:F6:66:49:B1:A7:07:50
            X509v3 Authority Key Identifier:
                keyid:F9:F1:6A:8A:F5:65:1F:8A:98:4F:03:31:45:65:0B:3F:9E:5D:8A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:70:47:70:4e:4f:53:81:4c:87:dd:d5:68:9b:1a:9d:0b:0f:
         e0:f3:9c:89:47:99:83:9b:49:30:08:e5:5e:b3:4c:fe:5c:5b:
         2c:b4:dc:83:97:d4:b2:0b:d9:91:5d:cd:6d:06:b6:89:b1:28:
         36:cb:41:61:0e:a1:b1:b7:2d:2d:79:f8:44:d9:9b:cc:35:25:
         3e:4c:9d:10:64:96:89:6e:ad:db:b0:ea:a4:0a:f7:bf:8c:3c:
         a5:58:16:bb:dd:00:02:97:38:79:da:d5:a1:11:4c:72:85:31:
         24:21:bf:58:fb:f8:29:4d:3f:4d:c8:6a:83:6d:37:16:41:08:
         0d:93:26:cb:a5:dd:55:75:bd:6c:c5:76:e9:cf:61:19:65:58:
         fd:b8:74:50:78:c7:ee:53:e3:ff:97:57:dc:a7:b2:c2:bf:ff:
         c7:ba:72:6a:db:a6:38:17:2c:a3:b2:a5:03:d7:80:4d:ac:c1:
         51:bc:4a:25:d1:82:e4:33:08:42:ba:9e:a8:7f:09:90:a6:1a:
         53:87:67:63:dc:15:56:13:ac:5a:7e:97:eb:52:3f:12:6c:97:
         4f:61:df:75:cb:4c:fe:50:0f:ad:a0:a2:93:c8:ec:e9:7b:de:
         06:39:b7:09:cc:ee:d7:b9:23:ba:c0:25:64:db:c8:26:d6:eb:
         ef:43:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 02:49:51 2024 by rpki-client on console-fra.rpki-client.org