Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
File:                     aFg2dgHVM90hnMnjOq3p4BLA070.mft (raw, json)
Hash identifier:          hxsNz8klT+5scWJOdkkBKSqO5DeGuFrVVVqNEShBMGM=
Subject key identifier:   CE:A7:AB:C7:4B:C0:94:78:2F:7B:5F:E2:36:A4:26:DA:7E:88:53:F1
Authority key identifier: 68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD
Certificate issuer:       /CN=F36F0522AF/serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
Certificate serial:       0351
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
Manifest number:          034F
Signing time:             Thu 21 Nov 2024 01:57:17 +0000
Manifest this update:     Thu 21 Nov 2024 01:57:17 +0000
Manifest next update:     Sat 23 Nov 2024 01:57:17 +0000
Files and hashes:         1: aFg2dgHVM90hnMnjOq3p4BLA070.crl (hash: 9XNF7tUv097XhtvAIcfapIkgXPONP/MsxIAbiyiDPgI=)
                          2: F8655580279C11ED8AC3E690F1222468.roa (hash: x+l5je5hrDHkIdSRJfbUPuD6coe8HjIrW/1dz5GPwZg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849 (0x351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0522AF/serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
        Validity
            Not Before: Nov 21 01:57:17 2024 GMT
            Not After : Nov 23 01:57:17 2024 GMT
        Subject: CN=673e937d-bc5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a1:13:dc:be:0b:f0:ee:10:bd:a3:14:65:6a:
                    d9:01:26:f5:87:93:1d:a8:6e:8d:4b:d2:d2:e3:69:
                    94:bc:06:52:09:ce:bd:f0:c4:54:21:c6:76:9b:6c:
                    d3:4a:f1:0d:82:c8:44:16:3a:b3:a0:36:9b:12:95:
                    4a:ab:7a:88:4d:33:f8:b5:92:0e:44:77:c2:e1:18:
                    31:94:dc:82:55:3b:2b:e0:73:06:e7:fb:5a:8b:e1:
                    83:a1:88:b9:23:44:2b:63:f0:14:e8:7d:94:9e:55:
                    c6:a7:a4:93:fc:c4:2b:25:c7:d4:03:48:0e:86:6e:
                    b6:7d:3b:f1:b6:58:b9:31:fe:95:23:a4:ce:99:fb:
                    a0:59:4c:3b:f5:33:b4:83:ea:51:d0:de:f8:50:f1:
                    ba:53:dd:67:b5:cf:1f:c2:98:9c:60:ef:9d:1e:b5:
                    cd:12:e9:8f:60:40:de:1d:b2:f3:10:f6:d4:f9:81:
                    d1:b4:e5:da:10:d4:47:a9:3f:eb:d9:76:68:26:6f:
                    57:41:6c:9a:b9:ca:06:f7:04:cd:9f:a6:93:02:93:
                    b1:8d:54:03:85:cb:f4:51:5d:99:4a:2a:fc:c5:3b:
                    94:75:19:05:97:e5:c9:cd:73:22:19:33:71:f3:e0:
                    2b:55:60:ae:c8:30:97:73:29:b8:29:1c:22:fc:dd:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A7:AB:C7:4B:C0:94:78:2F:7B:5F:E2:36:A4:26:DA:7E:88:53:F1
            X509v3 Authority Key Identifier:
                keyid:68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:26:ba:e7:75:b8:23:f5:b2:dd:08:fa:7e:87:9d:2a:18:f0:
         4e:37:ae:48:3b:3a:36:d6:62:24:be:4b:28:d1:dc:74:4e:14:
         f2:60:d2:e1:58:3e:d6:fd:01:d7:a3:42:b9:7d:ca:3d:77:51:
         4c:1b:cc:b5:6c:df:1a:8f:92:a3:94:99:2a:09:fd:39:a0:82:
         2a:d9:a0:de:ed:47:9f:1c:76:9a:63:de:97:df:ee:5e:a0:a8:
         70:86:1d:7b:3f:25:ea:1e:15:09:d0:a1:76:c6:d1:a5:de:fa:
         fc:39:99:39:84:79:3b:7c:2c:04:4d:b9:52:af:24:30:53:c6:
         e2:43:db:38:bf:90:7c:82:0a:5e:2e:eb:a3:87:c3:f7:7f:1d:
         3f:af:bf:c5:79:82:3d:64:15:84:59:67:ef:21:82:05:aa:e7:
         d2:4c:de:98:fa:ae:a0:b6:39:b1:c2:81:4d:ef:43:2d:78:43:
         80:a3:d9:0a:cc:d6:23:10:e1:07:dc:2e:ab:75:2d:c1:51:ac:
         3c:52:70:95:ef:07:4f:07:af:4f:42:dd:4a:c2:09:a2:5e:d9:
         63:c6:32:12:41:14:37:7d:cd:c8:24:b8:42:e0:82:35:cb:fd:
         04:df:47:3c:83:ca:14:00:a8:79:6c:7f:a7:45:ab:fc:cd:67:
         a8:07:22:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:47 2024 by rpki-client on console-fra.rpki-client.org