Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
File:                     HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft (raw, json)
Hash identifier:          u+/iDM+QJmVUpCwlCkwebO2DmYDBd/wHNhtTDC9CyME=
Subject key identifier:   DC:2D:E8:FF:E3:04:4B:42:0E:70:98:72:93:23:B6:DF:F4:82:F1:E1
Authority key identifier: 1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D
Certificate issuer:       /CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
Certificate serial:       0135
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
Manifest number:          0132
Signing time:             Sun 19 May 2024 02:18:03 +0000
Manifest this update:     Sun 19 May 2024 02:18:03 +0000
Manifest next update:     Tue 21 May 2024 02:18:03 +0000
Files and hashes:         1: HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl (hash: ceV7p6uXnNoNhlCtK2omKEh78LEpAJuB2q1c8MJ5tAs=)
                          2: 146B2AA8374F11EE8C7415794AD9E6FC.roa (hash: ctcRoXeX+WjrHPxrmzGzA7un7tUh7u0StB40cjvt+SU=)
                          3: F145B322374E11EE8F129E784AD9E6FC.roa (hash: MBk8OyWgetmt/dAZbGXNZYY9i8llqzp1g5jqzySwP50=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F143FAF/serialNumber=1E894EC0B286A6EDD93117D7A3BDCD8F5771019D
        Validity
            Not Before: May 19 02:18:03 2024 GMT
            Not After : May 21 02:18:03 2024 GMT
        Subject: CN=6649615b-3cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:18:69:a0:20:b0:6e:0f:ad:8e:dd:64:56:
                    4e:9d:53:33:ce:86:60:3e:e6:9e:eb:10:3d:51:96:
                    94:b1:93:f5:fa:c7:21:dc:ae:c9:ab:41:2e:0f:38:
                    ac:0f:03:b2:ae:1a:ce:00:9e:c5:0d:fc:d5:fd:de:
                    33:28:66:85:fc:85:25:9d:85:dd:8b:9f:a9:0b:1b:
                    24:4b:77:1d:de:b5:28:e9:3b:ad:56:e8:84:a2:3d:
                    cb:50:c3:fc:65:41:97:a2:97:05:06:24:39:ea:ed:
                    cd:28:ba:b5:3c:9d:bb:af:4b:4f:b1:c7:52:89:bb:
                    86:65:e3:80:b2:b4:7f:d0:c7:ab:9c:21:88:46:47:
                    a7:35:61:74:2f:08:1f:f0:8a:44:26:16:69:ab:21:
                    ef:8c:9b:77:4e:f7:cd:0f:f2:e5:90:b1:29:5f:7b:
                    43:33:06:b0:ea:68:65:c6:67:e4:68:08:22:ac:ad:
                    3a:a5:3c:ff:91:21:33:72:6b:83:66:84:95:6f:b6:
                    9b:cc:79:0a:2c:e3:1b:95:b3:76:2a:da:01:a2:5c:
                    cc:1e:7a:3d:fe:9e:6d:7c:c0:bc:a3:9c:e7:0f:85:
                    74:a4:a2:fe:3c:53:30:61:27:25:be:ab:7c:3a:31:
                    2b:b1:63:2e:77:b8:c5:88:ec:31:25:3a:0d:94:79:
                    19:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2D:E8:FF:E3:04:4B:42:0E:70:98:72:93:23:B6:DF:F4:82:F1:E1
            X509v3 Authority Key Identifier:
                keyid:1E:89:4E:C0:B2:86:A6:ED:D9:31:17:D7:A3:BD:CD:8F:57:71:01:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F143F/54BBD744314411EEAD49313E4AD9E6FC/HolOwLKGpu3ZMRfXo73Nj1dxAZ0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d3:d1:f8:7a:16:e9:60:59:af:70:bf:53:c3:cd:6c:aa:3e:
         76:08:b7:2d:ec:8c:ec:9e:14:87:83:b3:94:dd:67:1b:8e:75:
         ca:c5:19:7e:3e:30:02:f1:2d:25:d0:ee:54:78:6b:d5:76:0a:
         c2:ef:9a:e1:63:2f:3b:3b:71:83:e8:b8:9d:14:d2:db:af:69:
         96:30:a4:a7:cc:e8:23:60:4c:1d:c3:52:d2:9e:8e:0c:f4:f8:
         ba:8c:b9:1d:5b:ca:03:89:c0:7c:46:b5:ce:d5:01:ca:66:87:
         e1:eb:57:0e:7a:0f:1a:6d:4d:48:10:46:fd:e3:0b:35:ab:c4:
         55:5f:86:9c:42:4d:66:d5:36:a3:ee:c8:97:3b:2f:54:72:27:
         85:19:91:4e:a1:07:42:2d:88:54:b5:97:a6:48:ef:76:98:d7:
         f3:c6:c9:f0:51:36:ca:f2:19:e6:47:fe:fe:ab:c5:27:4e:95:
         07:c0:d4:aa:e0:db:5b:6c:c4:44:7b:62:21:1a:59:4c:42:4c:
         fb:b9:b9:a0:62:b1:a7:83:1d:d7:ab:81:70:50:48:c7:fe:b0:
         89:c4:7a:8e:0b:94:85:9b:4c:fd:8d:b2:bb:ec:26:0f:df:c2:
         9e:a9:ea:e5:40:89:14:42:55:65:9a:73:7c:d9:0e:54:36:31:
         15:26:58:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:48 2024 by rpki-client on console-fra.rpki-client.org