Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
File:                     gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft (raw, json)
Hash identifier:          ZBqf7TNHw/uwv1SGodk0fefIwY1thLylf6XCyukS6cE=
Subject key identifier:   A2:22:BD:47:3A:33:5C:80:FF:F3:DE:A4:BB:76:58:05:10:AC:31:E3
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Certificate issuer:       /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial:       01E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
Manifest number:          01DE
Signing time:             Sat 04 May 2024 02:05:34 +0000
Manifest this update:     Sat 04 May 2024 02:05:33 +0000
Manifest next update:     Mon 06 May 2024 02:05:33 +0000
Files and hashes:         1: gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl (hash: 91WNHwjRJDsjXqJf10g1+bmcrFnXba0yH6O78oO4c74=)
                          2: 98A7885C8DDF11EE856E001B4AD9E6FC.roa (hash: TrALYequ4gbamTwRj8gCMuUP9BJ+K7+H8Khcj3l43ng=)
                          3: AB725E028DE011EE9520701E4AD9E6FC.roa (hash: 7fwPCumSJFs34OrhghTo8l+HdWqKbq+1hmCpmK0WZcE=)
                          4: 22934508A60D11EDB81041C4F1222468.roa (hash: iIIKmZv0hW8wlHoV6xZsUe6KFdRjuYNOIqMfAgHd9Rk=)
                          5: 0845198C8DDF11EE841826194AD9E6FC.roa (hash: RjAkig7q9LVsQiCR96gKwlxjshut4m5EhwHTV6qeAo0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
        Validity
            Not Before: May  4 02:05:33 2024 GMT
            Not After : May  6 02:05:33 2024 GMT
        Subject: CN=663597ed-9c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:9c:ea:43:94:bf:be:e3:d4:1d:5a:dd:46:
                    e4:ad:d5:76:25:9c:27:70:47:52:37:33:50:9e:59:
                    b6:d8:bc:0f:04:a0:1a:60:3b:ab:a3:16:fb:64:00:
                    25:94:1e:27:2e:53:08:45:9b:e6:6b:b2:8e:45:61:
                    02:30:58:eb:ad:cf:0a:74:51:1f:1a:c5:3a:fe:01:
                    dd:9e:96:ed:0e:2a:4f:8e:82:74:bc:6d:53:38:81:
                    d2:77:d3:23:a2:13:d1:8a:36:65:7e:e3:11:31:3d:
                    54:7b:94:1a:2d:44:24:ea:fb:3e:5f:0f:55:5b:dd:
                    59:19:f6:bc:ba:91:bd:76:2a:46:0a:2c:25:c5:70:
                    83:19:ee:01:b1:2f:b8:40:1b:50:12:2b:e9:88:90:
                    53:d7:d6:06:9c:58:07:c0:5d:c9:3b:af:f4:1f:6f:
                    d8:19:ce:6e:30:44:72:07:cd:44:b4:19:f7:73:aa:
                    35:c0:6d:5f:58:1c:f3:7e:a7:a0:34:96:49:a5:2c:
                    3b:0e:d6:64:7f:29:1f:51:96:19:6e:3e:b5:fe:de:
                    58:e8:22:17:00:67:f4:2b:6d:c7:69:42:bb:77:ef:
                    d1:75:06:d9:48:75:d9:1a:37:bb:5a:e7:91:e2:68:
                    46:6a:d6:5e:c6:73:56:3a:0a:f0:6c:eb:c1:b3:d7:
                    65:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:22:BD:47:3A:33:5C:80:FF:F3:DE:A4:BB:76:58:05:10:AC:31:E3
            X509v3 Authority Key Identifier:
                keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:22:25:55:cb:75:60:06:5c:af:cf:4d:69:b1:a4:a3:ab:dd:
         ce:8a:6c:41:59:88:a5:7b:a0:3f:31:57:45:97:a1:60:55:96:
         ad:a7:9e:d2:29:3c:a7:4a:84:45:61:99:73:56:a0:b4:5b:de:
         9f:7c:e6:92:ed:28:6a:a9:82:32:16:83:0b:55:25:fa:f9:d9:
         b8:3b:85:73:38:1c:96:62:2a:a2:78:48:32:c9:c8:46:81:22:
         a0:de:1d:44:01:45:c9:f7:ed:9d:8f:52:d2:c6:e0:d3:a3:24:
         6e:17:89:20:a0:ee:1a:d7:7c:b7:50:5c:6b:3c:ef:4b:41:da:
         b5:52:76:d2:37:50:8d:fa:d5:46:4a:69:9c:71:ae:3c:e5:81:
         d7:93:51:56:e5:41:db:33:5e:c6:13:35:e7:a4:7b:2f:ee:48:
         d3:d3:8f:98:1f:dc:33:18:c4:37:f8:37:71:63:9b:24:b5:73:
         f4:94:10:13:dc:6b:34:5a:12:ae:eb:65:e5:5a:b3:11:7d:dc:
         2e:53:8c:ec:f4:43:0e:24:f8:c0:b5:a6:a5:5a:b0:bb:31:f9:
         7d:92:c6:4d:3a:22:d3:f3:2c:e5:06:10:45:c5:28:48:22:b9:
         75:0b:06:59:e7:50:86:fd:dd:b2:0b:26:73:ee:39:3d:d4:85:
         46:8b:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:56:08 2024 by rpki-client on console-fra.rpki-client.org