Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
File:                     Rd8OHH-lNNrKIJKaup5jKPur-1E.mft (raw, json)
Hash identifier:          TKJKGh24Iva6wk3BPNpmr/vmOVZhs+xkGZLXxZM+rFs=
Subject key identifier:   DE:F7:19:97:26:DA:0D:B6:14:50:44:41:CC:71:3F:03:3E:6D:C9:0A
Authority key identifier: 45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51
Certificate issuer:       /CN=F36EE1C1AF/serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
Certificate serial:       0340
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
Manifest number:          0353
Signing time:             Fri 22 Nov 2024 02:00:47 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:47 +0000
Files and hashes:         1: Rd8OHH-lNNrKIJKaup5jKPur-1E.crl (hash: 6iagH2GMNiWlp69zZH8frXXewUFDjc5K7f0WkwkilvU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832 (0x340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE1C1AF/serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
        Validity
            Not Before: Nov 22 02:00:47 2024 GMT
            Not After : Nov 24 02:00:47 2024 GMT
        Subject: CN=673fe5cf-a0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d4:65:4f:2a:da:66:c9:e1:18:c3:54:30:65:
                    d2:95:3c:c0:fc:f8:e9:b7:f1:fb:b7:9b:76:ac:d8:
                    73:b5:93:9e:cc:d6:54:16:c4:88:93:2f:8f:f0:4b:
                    3d:7f:54:00:73:12:0f:03:bb:9e:88:b6:5f:63:9a:
                    cb:2f:f1:c7:53:b3:8b:f8:00:fd:ec:64:83:64:0c:
                    ac:66:6f:ec:15:66:c9:83:22:d2:4c:93:3e:25:bb:
                    9a:8c:24:ac:2a:56:76:ad:a4:c1:56:0b:3b:92:a4:
                    5d:b6:91:e2:15:5f:25:df:8f:83:0b:60:b5:69:8e:
                    4b:ae:a8:61:44:7e:a1:33:40:61:61:35:64:66:46:
                    1c:39:05:4e:65:84:6f:81:52:c3:99:a0:ea:5d:6f:
                    92:83:73:64:89:6b:3d:da:c0:a5:d9:e8:82:76:87:
                    58:89:ce:9a:69:20:c4:89:b9:73:e4:5f:cb:75:66:
                    f2:03:fc:64:d5:98:de:91:ad:71:a1:26:b2:a9:c6:
                    3a:2b:13:03:9b:2f:c2:ab:36:7e:58:b5:32:26:e0:
                    c7:30:95:ea:cd:70:d1:89:27:94:be:e0:e7:97:ca:
                    8a:28:f2:99:8e:2d:ff:32:90:76:f9:8c:47:aa:c3:
                    68:7a:5a:71:1a:af:6f:6c:29:4c:d8:fe:34:81:87:
                    db:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F7:19:97:26:DA:0D:B6:14:50:44:41:CC:71:3F:03:3E:6D:C9:0A
            X509v3 Authority Key Identifier:
                keyid:45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:14:14:1b:92:c3:9c:ea:d1:c2:31:8c:a3:f7:59:68:09:ab:
         9e:02:24:60:65:43:f9:aa:2e:a9:c0:7b:3f:2e:66:6e:2e:e1:
         4a:a1:61:1e:32:17:94:32:9c:63:c6:0b:55:ed:cc:73:31:56:
         16:44:06:26:05:67:28:13:91:68:b1:a9:d2:bf:b2:f5:94:74:
         5d:e4:f9:3a:d8:35:49:bc:a0:15:2b:31:18:99:ba:ab:ed:f8:
         9b:22:7d:aa:05:a1:cf:f5:cc:9f:76:3d:5e:0f:95:99:48:61:
         18:42:83:2b:27:e3:ca:7c:29:5c:e2:fa:3e:61:fe:8f:67:ae:
         94:d7:e4:f5:26:1e:17:ef:32:ee:a9:d0:db:d7:59:1f:26:4b:
         18:8d:51:94:00:ac:20:6b:c4:04:e7:67:ed:45:b9:ab:f0:54:
         73:74:f4:4d:a2:11:21:b2:f2:b6:d6:12:39:31:e2:7d:c4:0f:
         de:62:3f:9d:a5:43:68:6f:dd:a5:38:a0:f5:1c:93:32:e3:1e:
         81:a9:ff:17:dc:34:02:4f:bb:a1:90:6c:be:1a:a4:2a:bc:11:
         71:74:6c:bb:b0:60:b2:e1:13:4b:12:88:e8:0b:cb:78:8d:f0:
         af:42:c1:32:78:5f:3e:7a:ff:6e:4a:25:7c:0c:63:bb:97:7a:
         5f:a0:79:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:31 2024 by rpki-client on console-ams.rpki-client.org