Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
File:                     Upl4cSNfYM1xWncQ_9bi6kyI0po.mft (raw, json)
Hash identifier:          KYxEnheQH/NTOmlHNkUC/Z4h7zcSf7voolHWC2xBeFE=
Subject key identifier:   83:8F:F6:A6:47:CE:C4:96:14:51:DD:ED:1E:99:9E:56:98:12:4F:49
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Certificate issuer:       /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial:       02E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
Manifest number:          02DF
Signing time:             Mon 06 May 2024 01:48:33 +0000
Manifest this update:     Mon 06 May 2024 01:48:32 +0000
Manifest next update:     Wed 08 May 2024 01:48:32 +0000
Files and hashes:         1: Upl4cSNfYM1xWncQ_9bi6kyI0po.crl (hash: ER/rCve/Tkfqj8BE9f4oxKr2nVlwHAJIutA8Wl6Eu7c=)
                          2: A27E602082FF11EE8205C9864AD9E6FC.roa (hash: pv58iSJoNZfLF15J4awhKwcNzaZSo1gyn9KUtGLQf7U=)
                          3: 811B0F4682FF11EEAC9619864AD9E6FC.roa (hash: pPHAUOTt22hBeaB17IRburRyPCm6dJpRxd6TfErC+xI=)
                          4: 504C6FECEA3811EC884DB1F5F1222468.roa (hash: 2dT5xvQBi0tE9GzEX5D2/RqrdvgMzSxkzDaBAFZ3JCY=)
                          5: 40750D8E82FF11EEA9EF75854AD9E6FC.roa (hash: IfBtUMkbvyisKLp/KIr1N58P5Vt8K4q1zYyTPAWX8DY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743 (0x2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
        Validity
            Not Before: May  6 01:48:32 2024 GMT
            Not After : May  8 01:48:32 2024 GMT
        Subject: CN=663836f0-be9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:16:0e:f8:f2:bd:71:36:12:50:1e:fa:ca:
                    50:b5:d8:cf:3c:ed:d2:2a:83:43:33:3b:59:86:25:
                    63:f8:76:58:b3:4f:87:51:c1:35:56:cc:1f:4f:0f:
                    f3:0f:e3:0e:9b:1f:bf:18:15:1c:5e:08:d1:af:fa:
                    ea:58:56:53:85:ec:04:5a:76:3b:23:0d:0b:88:03:
                    d6:cf:a8:9f:ec:8b:39:2a:64:1e:18:b7:b1:a0:62:
                    94:76:2c:42:ee:a8:4a:30:69:68:c3:ac:48:0b:3f:
                    9e:ff:25:36:e0:bd:66:d9:6b:21:c0:57:98:00:db:
                    c4:e2:00:95:45:dc:72:a5:71:ce:aa:e1:f0:a6:94:
                    02:ca:c8:d5:d7:a7:40:70:dd:57:f8:95:29:f7:31:
                    c1:bf:f0:a6:7a:77:c2:1b:51:dc:3a:3a:f7:9f:68:
                    8e:00:8a:37:21:5a:fd:61:3a:88:9c:f2:d0:59:88:
                    9e:a6:a8:c9:24:e3:79:d0:5d:b9:73:d2:b3:95:83:
                    da:53:6f:92:66:dd:b4:c5:c0:3c:24:1e:62:82:2b:
                    50:dd:88:3b:f8:e0:62:f0:ed:0e:98:28:3a:e5:91:
                    f3:9b:bd:4a:a5:dc:de:6d:23:06:ea:ea:a6:00:62:
                    dc:66:81:a0:8b:e2:ba:36:88:23:05:55:21:16:3b:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8F:F6:A6:47:CE:C4:96:14:51:DD:ED:1E:99:9E:56:98:12:4F:49
            X509v3 Authority Key Identifier:
                keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:53:21:e0:ef:73:6c:64:d1:8e:c4:93:d9:73:20:f6:e8:f8:
         26:07:e4:d5:21:fd:66:2b:48:fb:67:d8:14:0c:7b:06:a8:a1:
         ef:0e:88:a8:1b:b9:d4:7e:99:66:26:18:99:b3:01:cb:5e:c1:
         45:3a:5d:1e:00:2b:7a:c6:7e:61:7b:4c:b0:ad:2a:98:23:8b:
         e3:bb:68:dc:a5:62:35:78:f0:48:55:36:75:59:f5:c4:50:d4:
         5c:f4:57:07:0a:79:64:97:c9:5b:92:28:fc:89:86:a4:cf:5d:
         8c:d3:05:49:34:79:13:4d:99:7d:6b:37:85:a7:4b:13:b1:bb:
         2a:45:f9:5f:56:76:c9:68:ec:72:fc:8d:62:92:16:10:b3:3d:
         88:ff:e5:6e:d5:b9:15:56:9d:b7:62:5e:b0:a2:34:02:c8:00:
         4f:1d:ae:d8:67:57:48:4a:e3:f7:8e:0f:10:64:a2:63:ef:cf:
         fd:3a:fe:fe:78:46:68:61:41:86:94:ea:7c:7a:ac:2e:f7:38:
         b5:9a:1e:ba:3f:50:f3:7c:54:23:3c:f9:88:72:5f:21:a2:de:
         45:45:c1:86:eb:a7:48:9b:c3:be:e6:fb:2f:e7:cf:6d:cd:4b:
         3e:57:a9:ec:79:d4:16:54:bd:b8:0c:95:0a:33:24:51:20:12:
         4a:6b:c3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:08:53 2024 by rpki-client on console-fra.rpki-client.org