Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.mft
File:                     83fU1Cj5RlsVRJxq_UUyxCJEaWQ.mft (raw, json)
Hash identifier:          558VUeveYJoHDiQDmfc0QL4ky2zRXXyYhz7y/5c1BNY=
Subject key identifier:   41:97:80:6E:11:E1:E6:7B:D1:F4:E7:01:00:56:15:71:70:7C:BE:F2
Authority key identifier: F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64
Certificate issuer:       /CN=F36EF186AF/serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
Certificate serial:       01D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.mft
Manifest number:          01CB
Signing time:             Thu 21 Nov 2024 02:25:39 +0000
Manifest this update:     Thu 21 Nov 2024 02:25:39 +0000
Manifest next update:     Sat 23 Nov 2024 02:25:39 +0000
Files and hashes:         1: 83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl (hash: GiZLjtNEIvGDoqkHGneG2tUXQPEPkWhNjlhxIic7/MA=)
                          2: 35A2C592548111EEAEE811314AD9E6FC.roa (hash: 1eoXmWir/ADjiH6P13xfXbD6DlCaylmbXJCS83eS52M=)
                          3: AC37AA5E548311EE8AD04F384AD9E6FC.roa (hash: gb0i7J3iBZcItd28/LaTSsogIfZ7oZGJSPN8MJDY/Uo=)
                          4: F903F252A40011EF8200A35C762E951A.roa (hash: tBB1cOVLK36+SCNz3F2FnndL4LmMxtR0GIy/eGhb/nQ=)
                          5: 6B17F2325F1711EFB38E4896762E951A.roa (hash: CZswUFn6B6vQWRX08nLoA4Apncj/pZiESlbochmE4Jo=)
                          6: 2512C0E08AD811EF90DC88A7762E951A.roa (hash: qUW1NKzzbm6VrZyHXGTmIByGwNH0s2gHrRXn4IvpjsA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF186AF/serialNumber=F377D4D428F9465B15449C6AFD4532C422446964
        Validity
            Not Before: Nov 21 02:25:39 2024 GMT
            Not After : Nov 23 02:25:39 2024 GMT
        Subject: CN=673e9a23-b5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:1d:ec:e7:2f:f0:87:4d:0c:2b:a3:59:9e:
                    06:a5:17:c5:08:d5:1a:9f:ff:e0:77:d7:3a:9d:03:
                    65:42:c8:ae:58:8c:96:f5:f1:fc:e1:79:32:57:cd:
                    ad:af:99:02:ef:8d:ef:3c:5c:2f:36:97:a2:dd:e9:
                    12:83:f5:0f:ac:b7:8b:4b:e5:8e:d3:72:c3:81:30:
                    09:3c:bd:e2:03:c3:59:a2:cf:bf:38:06:5e:2d:dc:
                    2d:c4:b2:25:76:25:20:2e:2a:2c:ea:c0:c1:cc:88:
                    25:b8:a0:2e:c7:f4:c3:a8:0d:e8:41:a5:16:27:6d:
                    89:96:05:b1:f8:4b:ef:1c:89:4d:b3:89:5b:4d:57:
                    5d:05:a2:47:84:56:73:06:c0:70:38:91:a3:7c:a2:
                    a0:58:55:cb:c2:ae:d1:b0:17:e4:41:f0:d7:38:82:
                    d7:05:2a:8d:06:47:2e:c5:e4:06:c1:02:70:6e:79:
                    e8:9b:99:88:33:6e:ec:2c:4d:da:80:b7:92:92:cd:
                    e3:09:e5:cd:9f:20:62:b1:78:67:5e:a9:24:d8:4c:
                    eb:8d:db:f1:1a:33:b1:23:6f:d2:3c:83:43:5f:d1:
                    56:13:2b:20:61:f8:9b:3e:70:ec:13:28:ec:42:19:
                    52:dd:06:9e:23:2d:94:45:d7:59:72:da:2d:fc:60:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:97:80:6E:11:E1:E6:7B:D1:F4:E7:01:00:56:15:71:70:7C:BE:F2
            X509v3 Authority Key Identifier:
                keyid:F3:77:D4:D4:28:F9:46:5B:15:44:9C:6A:FD:45:32:C4:22:44:69:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF186/095B7A2A548011EE8C8F332D4AD9E6FC/83fU1Cj5RlsVRJxq_UUyxCJEaWQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8e:c3:48:2e:53:90:36:d7:27:1e:05:8f:0e:74:45:cc:2a:
         ad:5f:02:dc:fe:54:b1:b2:29:7d:ef:5f:25:17:d6:7e:1b:72:
         c1:82:25:41:9f:e8:c2:ee:d6:c8:21:44:f6:8f:3f:40:28:3a:
         8d:f0:40:a6:ee:75:13:d6:e2:3d:db:32:bd:00:0a:9f:12:7d:
         99:a1:b2:1b:f1:6b:de:74:02:58:17:88:ae:9d:e6:0e:2e:2f:
         00:30:7f:cf:ef:04:3c:12:82:4b:dd:96:62:1b:0e:cf:81:84:
         bb:bd:03:a8:b5:4a:6d:35:2b:24:69:cc:a9:6e:32:08:20:ad:
         6d:7d:73:7e:41:7b:6d:b4:ec:2f:4c:43:7c:32:eb:8a:fb:b9:
         24:a5:e5:05:3d:e2:21:97:f5:2f:0b:0c:7a:dd:96:6f:3b:85:
         8d:60:0b:63:6e:9f:fb:7d:f1:81:53:f1:b3:e0:5d:35:96:96:
         02:a1:1d:91:70:a3:e4:1c:4b:83:1a:ba:0a:3e:ca:4c:8f:59:
         ba:66:75:f8:78:99:63:f4:60:9c:7f:45:c7:56:69:7e:59:1c:
         99:ca:77:58:23:67:b3:bd:97:ec:7f:6f:ad:16:b8:55:25:03:
         ac:d0:88:42:9f:46:e5:f2:96:7f:41:7e:c5:e9:ea:92:c1:c4:
         75:06:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:46 2024 by rpki-client on console-fra.rpki-client.org