Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
File:                     Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft (raw, json)
Hash identifier:          As/+JI4VskgD01OKb6CkZVJqV21L5314pEO7S2iIYBE=
Subject key identifier:   17:9F:48:FF:4C:FE:DC:DD:16:05:B4:05:0B:69:3B:D6:E1:03:02:42
Authority key identifier: 0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE
Certificate issuer:       /CN=F36F8434AF/serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
Certificate serial:       0104
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
Manifest number:          0104
Signing time:             Thu 21 Nov 2024 02:38:27 +0000
Manifest this update:     Thu 21 Nov 2024 02:38:27 +0000
Manifest next update:     Sat 23 Nov 2024 02:38:27 +0000
Files and hashes:         1: Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl (hash: Z3dJB9sHpQPyeodFw76gthUhqmaQI8rYxSRu+SYnHqI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8434AF/serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
        Validity
            Not Before: Nov 21 02:38:27 2024 GMT
            Not After : Nov 23 02:38:27 2024 GMT
        Subject: CN=673e9d23-b1c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:28:9c:f6:3d:7c:f6:da:36:5b:44:3b:81:
                    6d:09:d1:50:b1:d4:89:f5:0b:ad:aa:34:12:1a:07:
                    4e:5e:98:49:6c:99:98:a4:fe:69:55:a4:d3:96:41:
                    de:39:56:f7:97:33:e8:fc:9e:cc:f8:65:a0:09:26:
                    6a:c3:89:66:ba:b8:a4:72:83:88:29:4b:c6:0b:d4:
                    bd:03:d1:e5:84:2a:f5:36:f6:25:79:ad:b0:e6:7e:
                    10:da:b6:e5:65:45:09:78:79:31:c0:49:55:d9:a4:
                    1a:cb:34:0e:19:15:3b:b6:7b:96:ac:10:37:46:12:
                    3e:8f:de:48:67:22:27:6b:5a:6f:c2:b4:62:c3:32:
                    64:e7:60:d8:af:f2:cb:d4:a7:02:3c:47:1c:23:d4:
                    07:c3:91:6a:f2:a8:70:80:38:5f:2e:94:46:19:4c:
                    49:80:09:b5:ce:c8:a9:bc:c5:06:0c:b4:2a:38:47:
                    cf:d7:54:0d:4e:a4:d0:51:e1:c3:72:53:b2:ef:47:
                    99:ac:09:13:f3:2b:7e:2c:0c:52:c1:9d:22:eb:81:
                    79:dc:ce:c3:88:c8:1b:9c:81:02:6f:8f:24:23:cc:
                    b3:94:dd:71:42:52:a6:b7:89:fe:3e:4f:00:3c:76:
                    be:60:47:97:41:a3:30:de:02:73:47:ca:70:ed:57:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9F:48:FF:4C:FE:DC:DD:16:05:B4:05:0B:69:3B:D6:E1:03:02:42
            X509v3 Authority Key Identifier:
                keyid:0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e0:6a:d9:ba:34:66:6e:4a:ec:3c:7e:68:2b:b1:4b:15:c2:
         f5:68:7c:5a:5b:c2:2e:ca:4f:cc:9c:12:ad:75:93:eb:0f:61:
         20:6d:ad:a9:29:88:1e:1d:7e:ee:7e:06:44:75:d7:41:09:35:
         a1:59:66:da:ca:d4:c1:33:e8:b9:c6:40:54:dc:28:a7:11:a2:
         f2:21:c7:5e:d8:63:ad:60:4e:50:03:20:04:48:73:f9:de:32:
         9b:bd:16:6f:da:fe:3c:3a:cf:4c:7f:a4:56:50:33:88:96:2c:
         76:64:9b:64:0c:78:b0:12:f7:16:24:c6:ac:44:a4:cd:22:63:
         c0:ee:a7:6e:69:29:84:45:5b:1c:cb:c8:29:62:3a:32:38:2d:
         1e:fb:09:8c:d4:7f:3b:e5:e8:0e:db:de:3d:8d:76:2f:0d:38:
         96:90:20:51:9b:4d:a5:ec:b0:0a:df:32:38:03:7e:e7:e4:e2:
         b0:02:86:5d:0f:c0:f4:b7:ab:12:2b:a4:02:70:c7:62:9c:77:
         00:ae:58:49:32:13:62:64:4c:c8:bc:a9:7c:cf:9f:d4:c5:b3:
         35:5a:6c:31:ed:52:72:13:7a:0c:ca:72:a9:e4:b5:f8:9a:9c:
         57:c3:7c:b0:c9:cc:b9:c1:69:5e:a7:fa:7d:89:1e:2b:39:eb:
         86:e4:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----