Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
File:                     3Y7gOV77NMQJjlduH6lWEvCuEIw.mft (raw, json)
Hash identifier:          aBZTh8OCmH9R0WuAySI4v2ISixC2C/e2nRCRk94xNDA=
Subject key identifier:   5B:41:D8:CA:21:89:4F:68:41:89:02:C9:88:9A:CA:02:3D:94:FD:E3
Authority key identifier: DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C
Certificate issuer:       /CN=F36EE14CAF/serialNumber=DD8EE0395EFB34C4098E576E1FA95612F0AE108C
Certificate serial:       55
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
Manifest number:          51
Signing time:             Sun 19 May 2024 02:34:12 +0000
Manifest this update:     Sun 19 May 2024 02:34:12 +0000
Manifest next update:     Tue 21 May 2024 02:34:12 +0000
Files and hashes:         1: 3Y7gOV77NMQJjlduH6lWEvCuEIw.crl (hash: epuu8ctLBuYe2EvzabGjtwiFEfmVDDkHnyIP2p3ga9Y=)
                          2: 41ED69D60D1511EFA8396400017001B1.roa (hash: x3aVslqCzMfioshN80Dla6JteewrsmH2GjIbIFA+j2M=)
                          3: 1A07CB8EDBEA11EEA45EFA81775412E6.roa (hash: Pkjs2jgzXCv29HKkqLFfvU1IeY4hITiyODVD/2YyWlE=)
                          4: A07BB004DBEA11EE8E03CC82775412E6.roa (hash: 5FeX+dqvUeIECgzm38Ru/fnBhkIsH4lq/tNWx1MCZM8=)
                          5: 6B9CD7800D1511EFB6A61201017001B1.roa (hash: ssvUYk5x0OzQ7Q0Xp7UErygVy3MmZIG7nazU7zgnCUM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE14CAF/serialNumber=DD8EE0395EFB34C4098E576E1FA95612F0AE108C
        Validity
            Not Before: May 19 02:34:12 2024 GMT
            Not After : May 21 02:34:12 2024 GMT
        Subject: CN=66496524-1dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:6f:c3:0b:51:1e:5e:14:54:6a:a1:29:f6:
                    e6:e6:15:ad:38:e6:15:99:bf:08:85:82:cd:bd:42:
                    43:95:5e:f7:09:95:8b:f7:8f:eb:3f:c6:f8:c3:8c:
                    81:cf:cf:cf:60:f1:79:0f:d1:fa:c5:4a:32:18:72:
                    01:6a:e7:0e:85:1d:92:74:a1:59:e2:2c:d9:35:8a:
                    cf:10:c6:e2:5b:0a:24:62:a7:95:a5:8d:a0:0c:34:
                    40:e0:78:73:5e:a6:08:6d:9f:ad:6f:8a:34:b1:0d:
                    95:d9:b7:d1:7d:bb:71:d7:1b:1d:ba:a9:16:ae:b9:
                    e3:32:d5:67:12:ba:25:f0:2b:bd:2a:56:c8:77:57:
                    db:20:e3:93:b8:8a:d7:1e:f1:46:16:e3:d4:80:99:
                    75:76:3b:c6:e7:ae:16:08:fb:77:ab:ed:2e:f5:f9:
                    1b:77:a0:a1:3f:bb:61:6a:ec:45:b1:52:da:19:57:
                    71:6c:a0:7b:f8:cf:c0:af:9f:fd:e9:5b:92:48:83:
                    a8:df:ef:ac:cd:34:b8:63:16:e3:57:e7:78:17:8f:
                    94:69:54:90:55:3c:f2:01:5e:b8:d8:10:b8:f9:27:
                    0c:c9:3f:c6:ba:68:07:67:0d:d2:d2:51:df:39:62:
                    2c:52:fe:56:6d:c5:2a:64:37:89:51:77:93:33:8c:
                    38:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:41:D8:CA:21:89:4F:68:41:89:02:C9:88:9A:CA:02:3D:94:FD:E3
            X509v3 Authority Key Identifier:
                keyid:DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b4:ee:c3:03:02:7f:23:b2:8f:37:f2:b7:8c:f2:23:9c:e1:
         61:29:f5:8b:c2:f7:50:cb:e9:05:01:ba:34:49:69:3b:76:a0:
         49:4e:a8:17:6d:55:fb:01:3b:67:d7:f6:ea:fa:ff:b0:e7:41:
         8b:4f:c9:99:8b:fe:6e:ad:3e:f0:40:20:3e:90:f8:2b:a5:e6:
         b6:7c:9b:b9:bb:bc:b6:4d:6f:73:b1:1d:8b:d2:44:15:e6:2f:
         7a:96:2b:c8:ac:12:fe:0b:2a:35:db:c0:d0:6b:ba:c8:c3:db:
         e9:58:7c:c0:3d:be:2b:b2:8d:23:8e:43:c1:7a:6f:1c:bf:15:
         1e:be:e2:ce:b6:67:20:f8:df:4f:fd:f7:d8:9f:ae:1e:57:11:
         ab:4a:43:10:be:56:65:42:d4:b2:95:b3:c5:3f:cf:c2:6e:49:
         ef:77:d6:c2:7e:bf:96:5e:c8:0e:c3:60:a8:3e:19:e1:0d:12:
         8a:df:64:a8:94:37:2a:4b:43:35:ae:cd:1e:6f:e7:d5:da:b0:
         ba:44:b9:af:54:7a:89:1f:ce:77:9a:e9:b7:f3:6e:45:75:c5:
         fa:77:a1:7f:63:99:61:e0:33:4c:6a:15:4c:5c:b7:4c:a3:de:
         cb:39:f0:9d:83:15:b2:2a:ed:a8:a8:c9:c8:52:e0:0e:cd:7d:
         92:dc:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org