Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
File:                     NokmebLgyF9VbZR98hkWGboqv-Y.mft (raw, json)
Hash identifier:          M4LvxHZElQfxk2sSZFVzIdCXWZFpzRKUW1LUIk2DxRM=
Subject key identifier:   CF:B4:59:7F:CA:E7:EF:64:C3:23:CC:3B:99:0F:FF:FB:96:5C:78:D2
Authority key identifier: 36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
Certificate issuer:       /CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Certificate serial:       0397
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
Manifest number:          038F
Signing time:             Thu 21 Nov 2024 01:55:21 +0000
Manifest this update:     Thu 21 Nov 2024 01:55:21 +0000
Manifest next update:     Sat 23 Nov 2024 01:55:21 +0000
Files and hashes:         1: NokmebLgyF9VbZR98hkWGboqv-Y.crl (hash: JCEAWGtpruJ0o/xBEL0pOGshkKjo4IVog6QwlEA18+o=)
                          2: 4E341B66638F11EEAE8F3A334AD9E6FC.roa (hash: u8+tUOrRrY4s158s9cBRWpl8atAcZbRDPn+y7aqq15Q=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
        Validity
            Not Before: Nov 21 01:55:21 2024 GMT
            Not After : Nov 23 01:55:21 2024 GMT
        Subject: CN=673e9309-d5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:99:83:72:33:d7:e6:a5:3a:dc:5d:5d:b4:
                    98:c6:6a:23:6c:ae:8c:a4:88:85:92:5b:7a:e5:d4:
                    69:34:c1:f7:f4:3c:f6:0c:91:1d:76:04:ac:6e:c7:
                    d6:e2:d1:81:3c:67:20:1e:82:25:4d:fe:7c:4c:21:
                    12:95:4e:12:20:65:f1:6d:fe:e2:2d:e1:1f:3a:d8:
                    92:8b:8a:c8:08:7b:e4:f1:32:1b:43:a2:16:b7:04:
                    09:6e:a0:18:d4:f7:84:b5:52:b3:b6:42:2f:fe:03:
                    b7:4e:56:4b:c1:b3:7f:ff:49:16:83:54:f0:f3:9a:
                    91:a9:d5:82:21:e8:6c:ed:a1:70:a1:2f:42:42:ad:
                    e4:b7:7b:ae:45:0f:ad:e9:c8:d0:6e:53:92:98:b6:
                    fd:4e:9a:7b:66:26:63:2e:8e:09:7a:f0:a2:54:99:
                    9e:5a:b7:c3:ec:9e:43:b9:0b:3e:c5:f0:b7:f9:0d:
                    15:d2:6d:71:98:6f:e1:04:2d:5b:54:ef:fb:01:df:
                    26:57:db:18:10:27:8d:8f:1a:7b:c3:c6:a1:de:88:
                    2c:f2:5a:92:8b:85:2c:7d:a6:9f:db:19:46:fd:d1:
                    ec:2a:f8:f4:18:21:98:ce:e4:87:87:1b:b3:10:c6:
                    96:92:8d:54:07:52:cf:3b:61:95:57:cf:2d:5a:64:
                    4b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B4:59:7F:CA:E7:EF:64:C3:23:CC:3B:99:0F:FF:FB:96:5C:78:D2
            X509v3 Authority Key Identifier:
                keyid:36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b6:cf:f3:ed:fc:ba:4f:e1:34:00:e1:ec:f6:18:c3:88:ff:
         ac:98:26:f8:8b:98:f7:75:dc:ea:90:ec:a1:06:9f:4c:54:d8:
         c5:8e:98:06:02:54:47:89:08:da:b7:46:4d:05:37:41:c9:d5:
         17:0d:b9:04:69:9b:5c:50:7b:46:2a:32:56:0f:52:7c:ec:65:
         ac:5f:9c:21:63:38:f9:e3:df:7a:d2:6d:bd:d3:7e:6a:3a:4f:
         20:4e:e1:15:6a:df:46:ba:43:f3:11:97:28:1b:33:30:6f:26:
         24:6a:1a:07:c0:57:90:00:15:a9:24:26:6b:7a:f7:40:91:0b:
         f8:70:16:07:b9:01:78:e9:aa:df:5f:07:32:cf:74:b6:46:a6:
         cd:b9:ad:ec:c7:42:c4:a9:ca:9d:1f:e1:1e:85:d3:40:a6:7e:
         a5:29:94:c8:59:e4:a7:a6:92:d9:25:cd:e9:14:a9:80:f7:e1:
         de:f1:17:e3:fc:a7:aa:9f:1a:73:98:37:34:18:88:d4:49:4b:
         2b:3e:f2:a3:55:db:b5:cb:15:24:df:cc:e9:b3:c1:ef:6b:58:
         5e:c5:c9:d9:5c:37:66:96:0a:0c:81:bf:cb:09:ef:49:b5:41:
         a0:9a:8c:d9:e8:18:c9:b8:7a:47:3a:48:89:d6:dd:8e:dd:7f:
         01:96:62:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:27 2024 by rpki-client on console-ams.rpki-client.org