Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          SYGLzFkdPrEnTfrwH7XPLYFORUrIF2vy7YoaEXDppMA=
Subject key identifier:   92:83:DE:E6:7B:C0:CF:CF:91:5B:0A:59:31:8A:66:95:98:41:2D:75
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       018F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          018B
Signing time:             Sun 19 May 2024 02:10:44 +0000
Manifest this update:     Sun 19 May 2024 02:10:44 +0000
Manifest next update:     Tue 21 May 2024 02:10:44 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: D8bI9X00yG3XrrqDpljRKqP9LIkfzmXamMHJiLs9h6I=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: May 19 02:10:44 2024 GMT
            Not After : May 21 02:10:44 2024 GMT
        Subject: CN=66495fa4-42b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:3c:74:cb:10:8c:ca:eb:90:43:36:ef:66:
                    11:16:71:1e:c3:e3:04:46:f2:52:77:04:e5:02:19:
                    17:eb:59:c6:cb:3e:99:78:2e:ad:2e:99:97:d1:75:
                    b9:fb:07:b1:bc:c3:38:45:c2:42:8c:b6:9e:1f:8c:
                    d7:de:9e:62:a1:ed:96:8e:01:b6:33:ab:ac:1d:36:
                    00:dd:23:82:8a:c3:d6:7c:cb:c6:09:2e:42:da:1c:
                    ca:ac:48:9c:68:c5:d8:22:46:a0:c8:76:63:72:35:
                    45:0a:1e:5d:be:8a:33:c9:6d:69:56:18:e7:03:44:
                    48:58:14:c9:0e:40:bf:67:92:58:c7:23:83:64:76:
                    69:5b:8d:20:6d:a8:dd:93:78:90:9b:a6:45:c6:2c:
                    e4:1f:3e:5a:ae:bf:b9:b7:08:b3:ec:07:70:7f:dd:
                    da:f8:32:c4:55:ba:2d:b0:28:65:f3:4c:8f:f8:1b:
                    c7:1a:e3:ee:1e:03:1f:39:bc:a8:31:1d:4a:fa:13:
                    45:a8:db:31:c5:8f:74:b2:82:25:8c:a9:6d:aa:1f:
                    f0:4e:c0:7c:23:46:98:07:bd:35:0e:fd:bb:f1:a6:
                    0e:c0:41:d6:ba:bb:35:01:d2:43:39:ba:0b:dc:ab:
                    c0:cb:b8:47:a7:42:4d:17:35:a4:d1:dc:5e:b4:06:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:83:DE:E6:7B:C0:CF:CF:91:5B:0A:59:31:8A:66:95:98:41:2D:75
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a9:6d:6d:1f:00:25:2a:8f:f4:ac:50:0d:35:76:2a:1d:44:
         37:00:cd:6d:0f:57:49:63:e3:50:25:3a:ee:3b:01:d0:37:dd:
         e8:cc:0c:a6:0a:ea:0e:27:93:99:dc:f6:3e:b8:53:bc:42:ce:
         19:19:a9:91:03:4a:e8:5a:6f:df:5a:7f:55:61:3f:92:f7:5d:
         b0:00:ac:ba:e3:5e:52:40:71:9d:76:ff:e5:89:29:ba:57:9e:
         b4:00:32:4f:75:66:e5:b1:6b:6b:7a:ec:dc:f6:fc:2c:8a:6d:
         4a:cc:66:57:31:a6:ec:0e:d8:c3:e7:e9:6f:b4:e8:25:b9:13:
         b0:c6:99:4a:1f:96:ec:01:f7:7d:d2:9f:b1:7d:8a:8a:9e:f1:
         f6:16:d3:31:63:d4:b9:d7:0b:1f:3b:98:db:0d:b5:03:cd:6b:
         36:be:6d:90:d3:75:93:d1:4e:64:f0:d0:1a:b7:da:3e:ef:82:
         18:1c:d7:0b:c2:cd:f7:17:09:2b:99:e4:99:b4:58:52:ba:0d:
         69:e2:8f:d6:01:ec:46:74:cc:4a:72:21:6e:ca:35:af:a1:ac:
         15:96:1a:45:b0:a1:4c:f8:96:63:70:7e:55:6c:a6:a1:30:05:
         ab:83:5e:de:df:81:d8:88:5e:93:7e:fd:4e:0e:90:fc:00:1a:
         55:7e:8b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:59:03 2024 by rpki-client on console-ams.rpki-client.org