Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
File:                     aFg2dgHVM90hnMnjOq3p4BLA070.mft (raw, json)
Hash identifier:          Ja3ClmpgdkrvT1HoAx8dvB8WpE1fAwjFlfV0PUAwhKk=
Subject key identifier:   FD:D0:2F:DC:51:DD:F1:A7:45:8F:3C:8D:8A:FA:50:CC:15:74:63:75
Authority key identifier: 68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD
Certificate issuer:       /CN=F36F0522AF/serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
Certificate serial:       029D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
Manifest number:          029B
Signing time:             Wed 29 May 2024 01:54:36 +0000
Manifest this update:     Wed 29 May 2024 01:54:35 +0000
Manifest next update:     Fri 31 May 2024 01:54:35 +0000
Files and hashes:         1: aFg2dgHVM90hnMnjOq3p4BLA070.crl (hash: /UG073bu1t39AUm1iB19AhR2Qppa5DDSnwhRVyAxMtc=)
                          2: F8655580279C11ED8AC3E690F1222468.roa (hash: x+l5je5hrDHkIdSRJfbUPuD6coe8HjIrW/1dz5GPwZg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669 (0x29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0522AF/serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
        Validity
            Not Before: May 29 01:54:35 2024 GMT
            Not After : May 31 01:54:35 2024 GMT
        Subject: CN=66568adc-3f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:87:9e:98:54:2f:ef:2a:d3:08:90:ad:6d:
                    d3:3e:4f:bd:2b:94:1a:46:8d:18:1a:53:75:9d:d1:
                    cf:fe:34:bd:45:f9:17:0a:ec:31:43:6a:ae:a9:83:
                    c5:dc:f6:e6:b6:19:58:65:b2:50:29:f6:89:9e:61:
                    5c:5e:25:4b:11:ee:31:ac:a5:f3:85:0f:b8:37:24:
                    33:b0:42:54:5b:42:03:ec:03:9d:aa:55:cd:6f:82:
                    2e:fd:e3:f6:2b:b7:36:bb:d3:a8:ee:a1:b6:cf:e6:
                    3f:8d:d2:8f:38:cb:75:c0:a5:7f:f2:7c:62:bd:44:
                    42:85:36:67:fe:a9:16:52:aa:1a:53:b4:a0:05:95:
                    67:bc:9e:ac:57:55:af:c8:62:b5:b4:0d:f4:d8:30:
                    bf:86:eb:23:c9:76:29:93:a8:45:0b:db:55:69:fe:
                    72:92:d8:a7:8a:d0:47:65:27:e1:ff:05:c7:ad:2a:
                    e7:ab:ba:c1:18:0a:cd:2b:bd:84:86:80:bb:f7:b4:
                    34:fb:31:10:2c:cf:bd:09:a3:2f:2b:7b:90:8a:4b:
                    19:c7:3e:cb:43:7c:37:cf:97:78:33:15:a9:38:9f:
                    a1:cc:05:67:cc:ce:36:8a:83:00:f9:f7:b2:df:19:
                    e4:1b:6e:3d:19:52:49:0c:a2:de:57:22:41:39:a4:
                    f3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D0:2F:DC:51:DD:F1:A7:45:8F:3C:8D:8A:FA:50:CC:15:74:63:75
            X509v3 Authority Key Identifier:
                keyid:68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:53:27:3f:5e:78:91:36:24:34:77:30:2b:49:e3:17:56:e9:
         31:0b:88:6d:aa:d9:45:d8:12:f1:6a:19:74:5b:ad:93:75:be:
         a4:39:4f:3a:67:b7:af:c9:51:67:37:8b:29:1f:cd:25:1e:42:
         de:fe:1d:94:af:7a:24:1a:73:0d:bb:da:3a:8d:64:1e:5a:25:
         6e:cd:58:da:71:5d:3a:11:a5:88:a3:9a:84:ce:63:ec:98:62:
         5f:f8:5a:bf:c1:54:63:bb:92:74:3e:ba:25:89:c1:54:ea:82:
         5b:81:80:0a:dd:e0:4e:39:19:c8:54:e3:e0:1b:08:c5:95:34:
         3a:e5:13:84:41:3e:a9:b2:6e:07:63:21:ec:3c:1a:8b:74:d6:
         ae:9d:4c:a6:65:ad:9d:16:e4:e8:d5:2a:ce:a2:1b:10:c9:f1:
         c6:99:27:01:f5:ef:c4:02:db:28:54:d7:8c:7a:83:35:e8:c4:
         af:71:d3:e4:52:30:40:8d:74:a1:da:26:b1:e9:53:22:67:11:
         e7:a9:ae:2d:6b:0b:d8:e4:b8:a9:68:4c:e1:fa:0c:66:8e:00:
         33:c8:e2:5f:1b:c2:09:02:18:1e:5c:4f:6b:a0:57:5a:c6:df:
         62:ea:53:9c:08:b7:c0:89:54:c4:fd:d8:47:b7:cf:1f:17:e0:
         60:5c:fb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 06:12:02 2024 by rpki-client on console-ams.rpki-client.org