Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
File:                     YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft (raw, json)
Hash identifier:          +JQDfARuLzRqmiICBqi32E7Vbq/SKFqjZXFLrvzv8K4=
Subject key identifier:   54:6D:F7:ED:28:FD:21:8B:3C:55:97:FC:49:AE:1D:8C:9B:B7:61:38
Authority key identifier: 62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
Certificate issuer:       /CN=F36FAF9BAF/serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Certificate serial:       0453
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
Manifest number:          044D
Signing time:             Tue 07 May 2024 01:29:07 +0000
Manifest this update:     Tue 07 May 2024 01:29:06 +0000
Manifest next update:     Thu 09 May 2024 01:29:06 +0000
Files and hashes:         1: YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl (hash: iqj+a9U3fMYtCADusXQRwTSR/0tcf9bsY/7XfzvQs0s=)
                          2: 2D2708F6CC2A11EB97CFD22AF8AEA228.roa (hash: XeVu0P9Nd9zY+QntGG6Z2ZTJviS6Sz4HHhq7O1QS9sw=)
                          3: C54E19D822A311EC90664B16D8A014CE.roa (hash: S4ZF6FWOA8WU+IlkBebTTGuItZqjsyF/6HiGxB7bOuM=)
                          4: 954F64EAFFC811ED8FCE30624AD9E6FC.roa (hash: dfhGabIAAHxuN6e18OQhuqwD7Wt4GKbIL/xRCP/tZwE=)
                          5: 5561B7F8DAED11ECA54A8396F1222468.roa (hash: vLjSdhCmLer54968GqLaX3fP0+rzPHJ4Ex+Bjc7yIXY=)
                          6: BB347E28DAEB11EC81FC9691F1222468.roa (hash: 6gsgx7DxEzqoXkYw7Xs1C83YWv7zKqmZvViXYneFQZg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FAF9BAF/serialNumber=627533ECBAB7D89BD9570B20054666053669A759
        Validity
            Not Before: May  7 01:29:06 2024 GMT
            Not After : May  9 01:29:06 2024 GMT
        Subject: CN=663983e3-e1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:16:e3:ed:e2:be:0d:9b:e8:21:4b:9e:2a:
                    90:dc:bc:81:9c:b6:23:44:17:4d:00:96:a0:8f:5d:
                    cf:1f:3a:f8:89:f9:7f:45:9f:9b:ec:15:69:bd:d0:
                    18:2a:ca:d1:79:f8:8a:59:7d:09:52:45:81:a6:a7:
                    5d:4e:c6:72:66:b6:b9:4f:9c:2c:50:58:4f:2e:24:
                    c3:37:71:e6:78:f2:6c:3a:cd:cc:56:81:e8:28:53:
                    27:17:88:55:e4:09:34:90:b6:4e:18:5d:08:31:18:
                    af:77:a1:cc:bb:49:4c:2e:9f:95:94:8c:fd:8f:51:
                    66:1f:c0:72:92:04:83:e5:c7:bf:8b:fa:e8:e2:5e:
                    0f:6c:06:a6:e5:d3:67:47:56:eb:09:57:b7:46:ef:
                    07:c5:d7:a2:eb:4b:e6:d9:d8:f1:a3:4a:df:ba:3a:
                    f6:bc:64:9a:ee:f5:e6:23:47:40:3f:55:3f:3f:15:
                    04:20:ca:e3:6a:77:22:b7:a0:7c:43:c9:e2:94:4a:
                    80:65:c4:9f:4e:50:22:3e:ff:db:74:8e:88:22:93:
                    86:5c:e2:70:27:7f:cc:c3:7c:6e:d3:3c:6a:59:90:
                    fc:57:12:dc:c9:6c:3c:1e:ba:c7:19:45:18:a4:48:
                    02:50:fe:b1:4e:9a:5c:29:a1:9a:27:09:6a:6e:4e:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6D:F7:ED:28:FD:21:8B:3C:55:97:FC:49:AE:1D:8C:9B:B7:61:38
            X509v3 Authority Key Identifier:
                keyid:62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:00:a5:94:d3:46:0d:13:80:4d:53:0a:fb:f7:e8:1f:66:26:
         e4:0f:e1:05:6b:17:79:5f:9b:f8:f6:21:aa:34:85:3e:f4:44:
         25:8b:35:73:86:c8:81:78:2a:87:23:fb:a8:f4:49:04:66:e9:
         44:97:ba:e3:e7:e3:14:f9:74:d2:27:42:04:57:3e:1b:6d:8c:
         6f:dd:18:41:4a:49:c0:8b:47:3c:ce:9c:70:0a:26:73:7d:e4:
         63:28:cf:95:56:1b:2c:fa:a0:d1:bc:ef:6a:16:39:9b:fd:2a:
         fe:e6:be:0a:9a:ad:f8:46:13:d2:12:ff:7a:b4:cd:ae:bb:57:
         bc:e0:ae:93:7a:a6:27:95:6f:da:cd:ce:52:d2:55:8f:27:ef:
         09:c1:b8:94:b3:3c:8e:d9:09:23:57:70:a3:4d:f4:57:64:4e:
         c3:06:17:93:d3:48:02:f0:17:f0:75:a5:3c:99:bd:bd:0e:09:
         3d:39:fe:1d:98:c6:88:0b:36:0d:6d:da:af:92:d9:65:66:4d:
         dd:04:f1:70:98:37:26:50:50:67:07:b1:fb:be:ac:36:60:d2:
         3e:a3:3d:84:04:0d:7e:bb:4a:a0:c3:7f:2c:88:d0:d6:58:e7:
         7c:6b:56:85:ce:1f:aa:55:ba:2d:57:3b:8d:7f:69:99:92:37:
         92:9e:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:16 2024 by rpki-client on console-fra.rpki-client.org