Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          G5je29IJdKvhbVge0ROcKQQhnnMmeRuepFHvxbaQN/o=
Subject key identifier:   34:4A:F0:99:82:CD:A4:5B:8F:B8:22:A4:F8:36:2A:7E:A5:B0:D0:33
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       026D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          026C
Signing time:             Mon 06 May 2024 01:57:33 +0000
Manifest this update:     Mon 06 May 2024 01:57:32 +0000
Manifest next update:     Wed 08 May 2024 01:57:32 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: jkpLvXoQsF/2EphEtE0aYM0m+guk98Pl3tTzwbT1ycI=)
                          2: 8FD98C2038B311EDAAA5E7DFF1222468.roa (hash: UXAWeOCC1criU7XL7P2zWbiZAhjMbu4dS0oFzWgmmoM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: May  6 01:57:32 2024 GMT
            Not After : May  8 01:57:32 2024 GMT
        Subject: CN=6638390d-8574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:f4:b9:b5:6c:b8:65:92:ed:fe:47:10:35:
                    30:15:4a:ce:a5:e6:2e:7a:7c:09:da:06:ae:11:7d:
                    6e:00:4c:36:7c:b2:96:e2:a1:ef:bc:c7:61:c6:2d:
                    a4:20:b7:97:87:eb:c8:93:66:1c:f9:ca:29:7b:de:
                    93:cd:2f:35:78:de:dd:ac:da:a8:f2:9e:58:13:e6:
                    59:53:d0:e9:7c:f9:e6:77:86:fb:d0:3b:b2:ce:91:
                    f9:63:96:48:fa:cb:c8:ec:e1:b8:18:50:b8:2b:9b:
                    c1:80:b1:a4:33:e6:09:96:54:10:30:8b:c7:15:a8:
                    74:de:8c:d8:74:51:09:9d:1c:55:c9:b8:61:b5:5d:
                    34:5a:78:7d:20:a4:3c:e4:93:7b:ac:ee:bb:05:b0:
                    c5:19:b1:99:5f:89:54:ec:4b:df:89:94:1e:4c:3e:
                    a2:5b:d1:4a:5b:79:79:1d:f8:f5:10:dd:a1:fd:e6:
                    00:1c:5e:2b:e1:52:98:e1:02:ca:24:98:58:73:26:
                    8f:61:4e:88:b0:43:9a:40:53:15:9f:99:59:23:07:
                    92:3a:00:4c:00:ba:a0:60:0c:04:b5:66:8c:ee:99:
                    aa:a6:af:d7:b8:c9:c6:e0:f6:5a:cc:70:fc:43:89:
                    1b:5b:8f:6d:e6:e6:d7:0f:23:85:d5:fb:ee:8f:74:
                    16:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4A:F0:99:82:CD:A4:5B:8F:B8:22:A4:F8:36:2A:7E:A5:B0:D0:33
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:71:b0:59:ae:7e:6d:96:31:d3:1a:96:7f:d2:6e:61:03:11:
         d9:80:9a:6d:fb:97:f8:64:1e:7f:71:a0:52:4c:4c:ff:bc:07:
         0f:91:c8:05:9c:37:ed:9c:bb:35:7e:9a:a0:39:02:4b:92:68:
         c7:52:c2:f6:b9:cf:9b:61:63:10:f1:84:87:88:79:aa:19:51:
         03:f1:af:f4:46:84:e5:18:d2:43:9b:03:5d:d1:6a:3a:91:69:
         49:06:a0:9b:44:eb:ca:20:2a:17:20:b2:18:6e:3e:16:f1:f2:
         6a:7d:78:75:a8:34:04:99:96:98:9a:1d:13:2e:27:19:7d:78:
         52:04:2b:34:c2:36:f6:27:0e:ee:47:83:fd:f3:c4:58:39:45:
         7b:9b:14:63:d9:07:9c:28:0a:be:26:bc:b7:9f:f0:d9:fd:9b:
         0b:31:c3:14:73:ce:98:a0:f4:b7:03:f7:2c:40:57:69:b4:f2:
         81:e2:92:8f:2d:15:57:bf:e7:59:cf:5a:8b:3c:7b:9c:24:3a:
         62:49:10:03:5f:10:cc:2c:d1:8f:15:e8:86:ff:3f:b3:91:e2:
         98:85:d7:f4:ed:17:33:ef:99:b5:bb:7b:bb:9d:d9:10:e9:a8:
         10:34:3c:ea:36:4a:d8:71:c2:40:71:44:f8:3d:9e:58:e4:d4:
         d8:89:ba:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:08:44 2024 by rpki-client on console-ams.rpki-client.org