Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
File:                     S7AyYfFNBLALJrKXJeQg7lOe-sE.mft (raw, json)
Hash identifier:          3FyConTfguv6ZuHpWrGQP/U9nsg/z4+VWWBgt1nqyGQ=
Subject key identifier:   70:4D:1E:97:08:7B:42:3D:A0:6A:D9:4E:F1:61:D6:38:C8:BB:11:43
Authority key identifier: 4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1
Certificate issuer:       /CN=F36F62C3AR/serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
Certificate serial:       0D70
Authority info access:    rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
Manifest number:          0D6D
Signing time:             Sun 24 Nov 2024 00:43:03 +0000
Manifest this update:     Sun 24 Nov 2024 00:43:02 +0000
Manifest next update:     Tue 26 Nov 2024 00:43:02 +0000
Files and hashes:         1: S7AyYfFNBLALJrKXJeQg7lOe-sE.crl (hash: VQJX+JruYcvWHae6UR55j4DhsuRKQHf0mSFu0XgijNc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
                          rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3440 (0xd70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F62C3AR/serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
        Validity
            Not Before: Nov 24 00:43:02 2024 GMT
            Not After : Nov 26 00:43:02 2024 GMT
        Subject: CN=67427697-18a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:e8:fa:20:77:b5:42:43:11:88:ef:41:6a:
                    11:65:c5:76:eb:7f:83:41:7a:1f:2e:ff:77:75:0d:
                    ed:94:c0:86:52:97:9d:50:4b:65:10:37:f6:98:7a:
                    e5:c9:e2:dd:4e:0c:af:5a:14:7e:56:c3:05:17:8b:
                    be:11:69:6f:e0:99:73:b1:8e:89:1c:99:5a:13:11:
                    0c:6a:6d:02:2b:e7:a8:d6:76:83:25:0d:84:fa:f1:
                    5a:1e:6a:9f:97:e2:e4:92:70:03:73:24:63:c4:18:
                    0b:1b:79:d1:1d:e0:6e:a6:af:d2:5f:64:f5:5f:36:
                    ac:ed:87:b5:0b:4a:fa:85:14:79:1b:b4:4e:43:20:
                    1f:5a:5b:db:e3:b7:76:46:1b:99:69:b0:1b:15:f5:
                    4f:aa:c2:48:a0:23:73:ef:0b:56:05:81:69:66:d2:
                    5b:ef:92:71:ce:fd:6e:b1:00:39:df:d1:28:9f:ba:
                    53:9d:3f:86:77:8e:b7:98:d5:c9:60:50:d3:2d:53:
                    0c:25:73:3b:40:e0:6f:b3:9a:6f:0e:90:27:68:e2:
                    ee:31:f8:73:64:1b:55:d0:fc:07:6e:1a:62:3f:88:
                    2d:1d:49:57:00:b3:90:78:9f:53:fd:56:e6:3a:67:
                    61:46:c0:49:cc:81:03:aa:03:6c:8a:d9:15:8b:98:
                    b8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4D:1E:97:08:7B:42:3D:A0:6A:D9:4E:F1:61:D6:38:C8:BB:11:43
            X509v3 Authority Key Identifier:
                keyid:4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:a4:79:d6:53:54:ee:02:d6:a4:9e:96:89:ec:ca:3b:d9:a0:
         fe:b6:36:b7:09:76:fb:4f:bc:2b:97:44:26:d1:19:b1:2a:34:
         b2:20:af:e1:4b:3a:03:40:fd:d5:84:d8:b5:fd:78:c9:b6:b0:
         33:78:31:4c:e2:e7:4b:de:58:3f:42:a1:45:d8:3e:ef:f0:31:
         ed:18:99:60:7a:78:49:f3:12:eb:54:3a:88:d0:34:be:e3:fd:
         58:06:fb:52:78:a2:bb:9f:4d:54:e2:4b:44:a5:4f:17:c7:cf:
         22:35:f5:3e:64:ef:a6:82:9a:2b:51:be:b7:ed:f2:e6:2c:c7:
         1d:ff:e9:61:aa:88:11:d3:ea:a8:a7:ad:66:e5:1a:52:a1:10:
         c0:77:c1:a8:44:e5:07:79:f8:7b:be:15:ce:65:d9:54:60:38:
         c7:0b:e4:40:ef:bc:c1:6f:a7:c6:e7:36:b0:83:6b:21:11:d0:
         fc:7b:4b:d1:55:18:bf:c4:db:1c:4e:2e:e5:91:e7:55:08:ed:
         f8:32:60:fa:26:a3:a6:34:44:14:82:f8:b3:03:ad:f0:b6:48:
         0b:b4:8d:71:15:1b:b9:f6:c3:b3:8b:b3:d7:32:b4:d3:b7:52:
         22:75:08:0a:42:23:ed:52:7e:f5:1d:16:de:69:70:2e:04:29:
         cd:d3:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:37:50 2024 by rpki-client on console-fra.rpki-client.org