Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
File:                     19cqZIe9d2qLv61POGE8OxU1CYM.mft (raw, json)
Hash identifier:          kDFbc8PVPbOrtAJ0X7Ec03JEFVBsldf/HHZ47weaYJg=
Subject key identifier:   B9:CA:1F:E9:40:71:FB:9E:B3:F8:EC:73:9D:FE:B5:E4:CA:ED:0B:CF
Authority key identifier: D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83
Certificate issuer:       /CN=F36F62C3AF/serialNumber=D7D72A6487BD776A8BBFAD4F38613C3B15350983
Certificate serial:       0C9D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
Manifest number:          0C99
Signing time:             Tue 30 Apr 2024 00:38:05 +0000
Manifest this update:     Tue 30 Apr 2024 00:38:05 +0000
Manifest next update:     Thu 02 May 2024 00:38:05 +0000
Files and hashes:         1: 19cqZIe9d2qLv61POGE8OxU1CYM.crl (hash: ixUEEH8DesRF1HcDf78skqwpzqcLCKHXG1VIVjxJObI=)
                          2: A1F0AD6EFD4711ECBB09B984F1222468.roa (hash: e40ucQ5X1K1jJnr0HcR4cj3IgkbrgCfKLITSFD67Sh0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 01 May 2024 09:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3229 (0xc9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F62C3AF/serialNumber=D7D72A6487BD776A8BBFAD4F38613C3B15350983
        Validity
            Not Before: Apr 30 00:38:05 2024 GMT
            Not After : May  2 00:38:05 2024 GMT
        Subject: CN=66303d6d-c1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:76:b7:70:c9:2f:a1:42:66:98:44:c7:86:63:
                    16:f8:a5:a3:db:dc:ea:b6:37:f5:81:5a:43:d3:7b:
                    19:70:9d:e9:88:02:7b:7a:d1:98:8b:ec:13:1e:29:
                    98:4e:ec:fd:3f:99:a8:06:b5:59:37:8b:64:f5:d8:
                    24:ba:b4:7e:f2:be:d7:f6:de:c7:16:bc:fb:21:0c:
                    ea:88:1a:e6:81:c4:b3:33:f0:40:f1:b8:c7:fa:9b:
                    b5:02:81:17:2a:01:e0:17:79:94:f5:05:bd:2a:5a:
                    d6:2a:ee:fa:53:1b:4a:b9:b4:f7:34:c4:b5:5e:70:
                    6d:44:ba:1a:a9:83:6c:bb:b3:59:bb:8e:b2:ee:f0:
                    57:59:99:b0:b2:66:44:bd:9e:5a:ab:a0:be:ed:02:
                    85:f7:05:f3:e7:71:d3:86:e3:a3:d6:d8:3b:70:65:
                    f9:ee:3c:e2:1d:98:14:f0:0c:ee:5c:44:30:30:b3:
                    2f:66:3e:c6:ae:5c:3b:b0:b9:30:d1:4d:ce:50:9d:
                    4c:d3:39:2a:33:f0:0c:b0:ff:28:2f:48:23:b0:28:
                    a7:2b:6e:c1:a7:62:8f:d0:46:a6:98:01:55:d5:54:
                    91:52:ee:c3:de:5c:78:83:85:13:98:ef:1e:ff:e0:
                    e7:23:98:24:08:a3:15:93:35:5e:53:8d:ea:25:57:
                    09:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CA:1F:E9:40:71:FB:9E:B3:F8:EC:73:9D:FE:B5:E4:CA:ED:0B:CF
            X509v3 Authority Key Identifier:
                keyid:D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7c:b3:43:ad:9c:d9:87:ee:25:ea:54:8d:31:b5:72:e6:7f:
         8a:a4:d9:af:41:6a:3e:ee:d7:2b:2a:df:45:f8:c6:00:4b:2b:
         9e:2d:c2:a4:e3:f8:c5:55:5f:1e:57:fe:7b:c2:b5:dd:5c:c2:
         4a:d7:72:6f:cf:a3:62:24:9e:30:66:b4:02:a3:ef:4a:59:7a:
         95:f5:fb:16:23:2e:20:16:a8:05:7d:dc:7c:8f:b9:4b:05:29:
         f8:6c:e7:ae:1e:2a:75:f6:8e:dc:3d:d7:5d:cf:f6:63:70:eb:
         53:59:84:23:8f:28:87:2a:86:d9:37:26:2a:44:08:ce:7b:84:
         f0:3f:27:b5:a0:e9:3d:ef:13:e7:28:4b:a7:1c:c3:76:47:4a:
         50:b2:23:91:17:9b:dd:d6:04:7f:36:61:df:c6:3d:a5:ab:53:
         fb:27:86:53:57:77:27:41:82:18:6d:cb:5c:76:76:ab:5b:75:
         2e:d0:e4:a9:7d:21:ff:2f:6f:24:84:2e:40:28:af:c9:38:ea:
         d6:7a:ea:d8:ac:54:91:f8:45:6d:c4:2a:31:e9:48:97:67:4f:
         24:0d:49:f5:18:7b:61:4e:ab:df:bc:6b:47:3e:b7:b2:e0:88:
         d4:83:16:87:23:40:82:9b:c0:43:85:0b:ff:9c:ac:f3:e8:d9:
         7f:0d:15:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:12 2024 by rpki-client on console-fra.rpki-client.org