Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
File:                     ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft (raw, json)
Hash identifier:          XL/O5GXPTk5W2ptl2H5ZSOU0DNWeZeIlGDLoh/aTCQM=
Subject key identifier:   5F:EF:E7:01:AD:32:6C:9C:FB:3F:CF:CA:7E:23:02:96:B5:16:6E:CA
Authority key identifier: CA:94:1F:10:D8:01:0F:95:C8:04:9E:01:02:DC:CA:A8:83:D9:A0:DB
Certificate issuer:       /CN=F36F6A4DAF/serialNumber=CA941F10D8010F95C8049E0102DCCAA883D9A0DB
Certificate serial:       1F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
Manifest number:          1B
Signing time:             Thu 21 Nov 2024 02:57:21 +0000
Manifest this update:     Thu 21 Nov 2024 02:57:20 +0000
Manifest next update:     Sat 23 Nov 2024 02:57:20 +0000
Files and hashes:         1: ypQfENgBD5XIBJ4BAtzKqIPZoNs.crl (hash: 2eJFTvFjpp1a0mNO5WLjAz3XmoD6BSkAaFmD/gbMWA0=)
                          2: 68314CFA9E6711EF831C3572762E951A.roa (hash: +2OyFRy+2ufdlClFPPFiOYpBXJw/swztJHB2roxpChk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6A4DAF/serialNumber=CA941F10D8010F95C8049E0102DCCAA883D9A0DB
        Validity
            Not Before: Nov 21 02:57:20 2024 GMT
            Not After : Nov 23 02:57:20 2024 GMT
        Subject: CN=673ea191-8068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:be:07:6f:2c:57:2d:7d:83:7c:f1:2a:3b:c1:
                    73:e4:ff:f7:71:2c:37:af:5b:3e:b8:ba:79:4d:e2:
                    89:18:72:35:69:a9:83:95:b2:4b:b3:91:27:37:46:
                    ab:8a:66:6d:62:b0:6c:78:a5:47:bf:c9:ed:39:6f:
                    de:b7:34:3e:72:b1:49:ea:e2:da:91:2f:c7:f4:6d:
                    0a:5a:29:45:71:db:e1:f4:bc:d3:66:5a:62:04:18:
                    93:57:76:d3:69:4e:24:69:4e:54:6d:c6:2b:69:b4:
                    57:1c:56:a3:63:ef:74:51:a5:0b:23:2d:48:8b:f5:
                    f7:75:9f:a4:83:3e:64:f9:4d:6e:3a:c4:83:6b:b1:
                    4a:69:46:63:65:98:3a:ac:51:35:d1:d8:48:a4:af:
                    a3:0c:19:17:f6:ff:0e:79:f1:76:7c:9d:43:58:15:
                    12:18:06:aa:8c:82:ec:ec:a3:e5:59:c6:06:cd:cc:
                    89:3f:cc:e3:30:99:3c:64:70:2d:58:9d:b5:88:0e:
                    2a:a4:88:71:c0:ea:50:fd:c3:8b:7c:7c:0a:e1:23:
                    5c:8b:d3:ac:15:95:f3:86:0f:d3:1c:8e:2b:1f:14:
                    9e:91:b4:d7:f6:33:99:5a:3a:b2:92:68:3e:91:ce:
                    7a:79:59:ab:e6:64:a6:69:1c:cf:e1:43:4c:d4:aa:
                    17:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EF:E7:01:AD:32:6C:9C:FB:3F:CF:CA:7E:23:02:96:B5:16:6E:CA
            X509v3 Authority Key Identifier:
                keyid:CA:94:1F:10:D8:01:0F:95:C8:04:9E:01:02:DC:CA:A8:83:D9:A0:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e6:46:67:62:7f:39:cc:b9:d0:de:51:26:c0:c6:2a:37:3f:
         83:cc:4c:91:a6:25:cb:9d:ef:4a:c7:96:d7:e4:57:d7:c5:71:
         cf:b7:df:da:7f:ed:59:5b:ac:4c:c7:c4:2b:75:7f:d7:03:aa:
         86:05:01:20:22:49:e4:79:c8:c8:5d:cd:7c:a1:4b:40:8e:eb:
         64:20:17:ad:37:49:75:fb:77:2a:f1:53:ef:bf:b0:d2:3c:47:
         6b:4b:28:95:83:f6:04:6c:92:d9:a7:0b:f2:c6:86:98:a2:63:
         00:c0:cc:af:0a:12:78:8d:f1:ef:18:9c:34:d3:15:57:64:d1:
         59:27:e3:04:00:8c:cc:e6:ad:2a:a1:47:2f:55:84:3d:a0:34:
         19:81:53:c2:32:8a:5d:85:8f:e8:72:22:04:ad:4a:30:81:58:
         11:5c:9a:8b:2a:ac:8c:ef:ec:1d:83:aa:da:b9:07:ab:83:fd:
         85:dd:f7:8d:7b:13:b3:0f:fb:b6:c6:22:57:2d:99:35:ed:9d:
         b0:9c:03:19:87:3d:89:52:84:c0:cf:d6:ad:57:64:9f:c0:0d:
         ed:64:0d:2d:d2:34:e6:a0:11:a5:9f:41:82:2e:cb:bb:fd:c8:
         0a:76:3e:6d:30:e2:a1:46:29:72:03:75:8d:4c:10:eb:c3:e6:
         07:8c:c4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:52 2024 by rpki-client on console-fra.rpki-client.org