Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
File:                     DmdFN0vlZOXm1eI_aockyL53qVI.mft (raw, json)
Hash identifier:          RgyyDxyCAGtbpgDI+5+vw+rh7vcSs8WFUPFRHQ02gG4=
Subject key identifier:   D3:F0:EB:AF:83:68:F6:0F:BF:4C:10:3E:FF:55:8D:BF:A9:BB:B3:34
Authority key identifier: 0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52
Certificate issuer:       /CN=F36FB628AF/serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
Certificate serial:       0AFC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
Manifest number:          0AFB
Signing time:             Thu 21 Nov 2024 00:50:53 +0000
Manifest this update:     Thu 21 Nov 2024 00:50:52 +0000
Manifest next update:     Sat 23 Nov 2024 00:50:52 +0000
Files and hashes:         1: DmdFN0vlZOXm1eI_aockyL53qVI.crl (hash: NN/aQziJ60F/ie/gpxhJGw3s8N/ehk8LhAH2YyMPkh4=)
                          2: D550D09C037F11EDA40460C2F1222468.roa (hash: 9wZBqedJVTgdGdUQ5S31jykjUra1rcqD+ULApifCF68=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2812 (0xafc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB628AF/serialNumber=0E6745374BE564E5E6D5E23F6A8724C8BE77A952
        Validity
            Not Before: Nov 21 00:50:52 2024 GMT
            Not After : Nov 23 00:50:52 2024 GMT
        Subject: CN=673e83ed-b920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:63:47:e9:d8:2e:ac:ee:a2:a5:f9:e5:1f:
                    ec:95:62:c3:66:f2:8e:2c:bd:61:7b:64:2c:37:7f:
                    81:02:97:71:2d:0b:23:9f:37:17:5b:d3:40:2a:5a:
                    d2:5a:92:4d:d9:33:fd:27:46:8d:7d:68:c7:df:7e:
                    72:50:e5:a5:f1:97:fb:c0:cf:3d:a2:8e:43:c3:77:
                    9d:51:20:97:81:72:da:3d:6f:00:a0:a9:4d:5b:bd:
                    1a:70:5b:e5:de:76:da:b4:b4:0f:c2:cd:54:e2:27:
                    d4:c4:88:60:64:03:9e:8d:a6:37:10:44:32:df:1a:
                    35:23:0a:6a:70:d9:28:2a:73:56:08:a5:46:50:12:
                    ba:a4:8a:5f:1f:ec:65:72:b6:1e:fd:10:a9:28:03:
                    ca:b2:46:13:d1:b0:84:02:6e:96:22:30:94:78:d5:
                    de:56:f3:c3:6d:83:67:0e:61:b5:4d:88:3f:0b:5d:
                    30:40:e9:00:ad:b0:bd:00:df:49:97:e7:5a:ab:ba:
                    90:88:06:7e:19:f4:b1:76:0a:2c:d8:73:23:70:be:
                    b9:7b:21:40:14:39:db:fc:a8:e0:6b:b8:f0:1c:bc:
                    aa:41:e6:12:e8:cb:d4:f8:e1:09:58:ce:74:22:af:
                    51:d3:8e:58:3e:f2:c0:d4:65:5b:c8:cb:0d:c1:af:
                    b6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F0:EB:AF:83:68:F6:0F:BF:4C:10:3E:FF:55:8D:BF:A9:BB:B3:34
            X509v3 Authority Key Identifier:
                keyid:0E:67:45:37:4B:E5:64:E5:E6:D5:E2:3F:6A:87:24:C8:BE:77:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DmdFN0vlZOXm1eI_aockyL53qVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB628/2535C52034C011E7BDE4355EF8AEA228/DmdFN0vlZOXm1eI_aockyL53qVI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:40:74:d5:87:45:5e:8c:ef:ba:e6:89:b5:d4:ce:ff:8d:5e:
         0d:ca:6c:1d:64:6e:30:13:70:f8:0e:68:23:e7:3d:db:01:e7:
         b6:36:59:1c:c6:95:f7:58:e3:2b:b6:4e:0d:54:91:42:6d:bb:
         bd:b3:ec:ef:5f:8f:f9:21:13:cb:c7:48:3f:de:ab:e0:87:f1:
         2e:f9:ba:2f:7e:0f:f4:5d:dd:6b:ab:b2:b1:b3:61:e9:d5:df:
         79:b1:c2:e3:04:fe:0c:45:62:28:e9:da:40:98:3b:e6:04:d8:
         a5:1b:ac:aa:34:7a:4e:66:82:15:72:66:27:bf:76:5b:34:25:
         ac:35:89:7c:b3:10:bb:01:48:d9:56:d3:3b:e8:19:71:d2:52:
         d5:10:bd:23:b6:48:34:f0:0a:3d:34:e8:4d:24:14:e9:50:e4:
         61:55:da:a2:50:35:c6:a5:59:a9:78:64:c6:b1:81:00:4b:54:
         bf:d8:16:e5:1a:b8:b3:6d:16:51:b4:b8:f2:6c:86:ff:8a:c9:
         1f:54:6b:96:aa:3a:08:49:65:9e:cb:04:f7:8d:fb:a6:5b:b8:
         38:d1:64:6a:b8:f9:19:1a:66:b4:5e:5a:ea:1d:74:e5:05:a3:
         68:55:2e:67:28:d2:2d:5c:41:bf:55:5a:f9:67:a9:75:c0:18:
         d2:7d:67:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:29 2024 by rpki-client on console-ams.rpki-client.org