Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
File:                     _wMoIAB4rDbwLXEB0DS3vll-oVg.mft (raw, json)
Hash identifier:          lvLF/KF4HtqLnxf83S6lO33b/0JwUqqBDxFwheb9hdY=
Subject key identifier:   7F:11:45:CB:AB:51:FA:FA:F7:83:EB:EB:43:02:46:6A:65:88:EE:C1
Authority key identifier: FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58
Certificate issuer:       /CN=F36EC712AF/serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
Certificate serial:       028C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
Manifest number:          028A
Signing time:             Mon 25 Nov 2024 02:12:22 +0000
Manifest this update:     Mon 25 Nov 2024 02:12:22 +0000
Manifest next update:     Wed 27 Nov 2024 02:12:22 +0000
Files and hashes:         1: _wMoIAB4rDbwLXEB0DS3vll-oVg.crl (hash: cjm32PZ1MEnTUGNwDFGHd7bYPZ0BCRwb3NhEgTsqIRc=)
                          2: A1A5CE94563C11EE88D6F1324AD9E6FC.roa (hash: saKiwJ8KKnppgVVbmjEBrSXoNu9lhnFM5zhR+5yMxKU=)
                          3: 70135CE8563C11EE84A463324AD9E6FC.roa (hash: FAzApSbefpRaVqlqwSbC+qhl5egdnzLXqnPgFd8tD84=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC712AF/serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
        Validity
            Not Before: Nov 25 02:12:22 2024 GMT
            Not After : Nov 27 02:12:22 2024 GMT
        Subject: CN=6743dd06-41d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:3f:52:68:1b:c7:bd:2f:49:2f:45:bd:83:
                    aa:39:72:41:fe:c0:e1:10:7b:dc:7b:58:bc:56:b3:
                    aa:e0:7f:06:68:c1:7c:e5:41:64:e9:f8:04:08:54:
                    7a:20:ca:c9:39:4d:2a:c0:7e:75:4e:e5:ab:bc:0b:
                    0e:08:7d:9c:33:53:54:3c:30:89:ab:28:4e:20:6c:
                    eb:fa:e8:f4:dd:2e:c7:4a:11:33:20:b0:34:cd:b3:
                    a7:4e:db:3e:10:ab:49:f1:54:00:36:e6:33:04:87:
                    6d:9b:06:0d:8c:a4:af:2d:75:e4:cc:db:ab:a7:80:
                    d4:e1:21:c5:f5:5b:7b:7c:50:e2:11:a4:2b:b4:91:
                    14:a7:00:5b:ac:17:66:50:5e:d7:a2:6e:65:c4:32:
                    5a:1f:09:8f:d1:c2:d7:c0:51:4a:ca:d6:b7:4b:81:
                    65:82:d6:4e:08:c2:13:81:f1:8c:f6:d6:a5:ba:16:
                    6f:51:5f:81:d3:c7:4a:40:22:da:8d:b4:60:45:62:
                    b0:10:a0:40:82:aa:9a:a9:6d:2f:a4:d5:26:2a:72:
                    18:9d:d0:cc:43:cd:ea:c5:1c:0a:22:ba:66:ec:4d:
                    9a:96:c9:99:64:02:ad:9d:15:69:31:60:2d:12:c2:
                    2d:6a:da:0d:b2:b1:c3:68:90:9d:ab:46:f4:df:1e:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:11:45:CB:AB:51:FA:FA:F7:83:EB:EB:43:02:46:6A:65:88:EE:C1
            X509v3 Authority Key Identifier:
                keyid:FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:5b:f1:6f:9a:c3:55:d6:42:40:64:3e:f2:02:42:0b:25:
         cb:a9:2b:fc:11:cc:35:1c:e0:b3:af:b3:18:6a:4b:28:23:31:
         b6:e1:ff:d9:2f:24:c5:0b:21:fa:db:b1:98:a2:4b:94:bb:59:
         ce:20:bb:23:4e:18:c3:bc:74:e8:52:0c:39:c2:e3:e8:5f:e8:
         66:78:8e:f2:33:b9:eb:50:35:69:fd:c9:8d:ed:ad:a7:dc:cc:
         aa:99:5c:0b:b0:b7:23:f7:94:89:75:d4:d9:ce:9c:7b:1c:cb:
         8c:b3:9b:18:e5:ae:32:e5:2a:ca:20:9f:52:98:75:b2:64:04:
         3f:88:e6:26:f9:7e:84:3e:f0:30:0f:f2:04:7f:08:d3:c0:9b:
         23:c1:96:87:15:08:0f:31:be:63:7d:eb:64:5e:3e:8a:57:09:
         c8:5b:9f:21:e0:94:f4:24:3f:1a:28:5a:c6:eb:25:f7:e2:de:
         8b:de:bd:42:50:1d:e6:a1:30:e1:f1:dc:67:ec:24:b5:e0:1a:
         bc:b0:0f:2b:bf:c7:2d:be:95:4e:e9:66:9b:13:7e:30:7d:98:
         4f:0b:f3:c5:9f:bc:49:e8:8e:02:f3:d2:e2:5f:ee:e9:66:a7:
         82:3f:bb:17:ab:c6:bf:16:76:88:df:ac:da:17:d4:d5:7b:c5:
         b6:c6:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:00:16 2024 by rpki-client on console-fra.rpki-client.org