Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File:                     JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier:          5gWCj4j2Xr5ubZJ6l0AKaKQVQPmbmSeLlaHJs4tComM=
Subject key identifier:   08:2F:AC:4C:78:90:E9:32:B6:D8:59:69:32:C7:D8:08:C9:4A:66:45
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer:       /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial:       71
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number:          70
Signing time:             Sun 19 May 2024 02:31:41 +0000
Manifest this update:     Sun 19 May 2024 02:31:40 +0000
Manifest next update:     Tue 21 May 2024 02:31:40 +0000
Files and hashes:         1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: fKu+AjuE+PkqsWe7J/zhXk5DOYSb9imeqP9L2iLzbHk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
        Validity
            Not Before: May 19 02:31:40 2024 GMT
            Not After : May 21 02:31:40 2024 GMT
        Subject: CN=6649648d-31b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:1f:0e:f2:60:db:1a:7a:5c:4b:16:73:ab:
                    03:fe:46:85:52:52:f3:9a:30:b3:d9:c2:42:5c:3d:
                    f9:e4:5e:bd:fd:22:83:f9:6c:99:b9:ff:2d:19:da:
                    15:b7:b4:75:fe:16:bd:12:89:b1:b5:f0:a2:4c:91:
                    f6:70:9d:f6:32:c7:cd:ea:75:0c:66:f0:28:16:bd:
                    2d:e9:9b:a0:e6:eb:6a:9c:56:f6:7d:5d:f5:2c:da:
                    ba:82:ab:1a:6d:a6:71:00:23:49:2e:9c:37:fd:aa:
                    f0:a5:e0:cb:ef:bb:2d:47:27:57:05:76:d3:af:20:
                    70:6b:e1:d0:cf:c0:4a:05:b4:82:77:e1:78:e5:0a:
                    56:dd:e7:bf:d6:20:32:81:39:97:e9:42:08:64:70:
                    fe:32:52:09:ef:59:cc:55:32:4b:38:d9:67:85:31:
                    84:f7:e7:ed:cb:2e:95:be:9a:41:2f:2f:12:be:ee:
                    fc:c1:b3:21:ad:6d:3c:a2:80:e5:67:38:79:60:72:
                    41:4d:95:de:bb:ea:08:80:4e:75:90:17:90:31:d3:
                    52:de:ce:a6:81:91:c7:13:8f:2d:c3:fa:46:50:d0:
                    08:a4:74:c0:8e:65:60:90:9c:68:20:32:b5:45:d5:
                    e4:3a:b5:be:4c:26:5b:4b:cf:3b:80:0b:a7:a2:d1:
                    8e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2F:AC:4C:78:90:E9:32:B6:D8:59:69:32:C7:D8:08:C9:4A:66:45
            X509v3 Authority Key Identifier:
                keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:35:a9:c9:ce:44:39:60:9e:44:2f:28:2e:12:39:75:db:5e:
         3f:a8:1a:eb:62:3a:c2:fd:01:86:ae:b3:42:42:a2:61:e1:c1:
         fa:6b:d3:0a:61:ff:67:15:aa:be:bd:a7:9c:06:93:af:f0:fa:
         8c:9e:e8:63:9f:2b:00:8a:65:4a:4e:cb:a4:3e:97:5a:55:51:
         e1:be:ec:2a:46:d1:9a:7e:b9:47:f9:fb:88:56:9a:9d:28:bc:
         f1:36:aa:8d:b3:c8:a8:cb:bd:9b:1a:2d:08:35:8b:74:a4:cd:
         5e:bd:09:f0:3b:4d:a4:b2:a0:c7:7e:f8:cf:f4:59:3b:95:ca:
         cc:f3:6e:4b:6c:d5:64:56:38:5e:69:72:64:13:92:ce:9b:93:
         8d:88:75:af:6a:e9:1c:47:e9:ac:72:e6:d7:8f:cc:98:ab:b4:
         83:cb:b0:a0:45:a1:30:d7:5b:66:2a:d6:76:17:0f:b8:31:15:
         c1:cd:2e:44:8f:34:ef:c9:9c:6f:0c:35:87:47:dd:07:13:5f:
         b6:07:e5:17:53:60:a1:d8:0e:11:c7:0e:e5:71:ed:bc:58:5e:
         bc:80:33:63:0b:90:9b:bd:07:f6:29:38:65:1d:2f:39:04:42:
         51:17:f3:fb:dd:2f:36:8e:73:c5:21:41:16:92:22:1b:ec:fc:
         81:1a:de:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:12 2024 by rpki-client on console-ams.rpki-client.org