Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File:                     QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier:          pix3DzpXVoWD9Y9Z2UFlcIWo5RdFUEnvIgwFk51+5Qc=
Subject key identifier:   9B:17:00:AC:C1:9A:CC:10:E7:74:61:5D:7E:E3:C4:BE:85:47:9F:25
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer:       /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial:       0CC8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number:          0CC7
Signing time:             Mon 06 May 2024 00:36:55 +0000
Manifest this update:     Mon 06 May 2024 00:36:54 +0000
Manifest next update:     Wed 08 May 2024 00:36:54 +0000
Files and hashes:         1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: IASX3B6G9c+ZR9Or1MWxh9BNXNH7i1XnZUouxaIdjT8=)
                          2: 36DF01DC39AA11E59B5A3D32F8AEA228.roa (hash: KB4karfPnV5f0+SNVM+1NuYPsr7TtEZ+5kiyQgRzqTE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3272 (0xcc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
        Validity
            Not Before: May  6 00:36:54 2024 GMT
            Not After : May  8 00:36:54 2024 GMT
        Subject: CN=66382627-f607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:89:db:4f:7c:a6:32:78:b6:88:f1:84:ad:
                    35:3b:20:3b:c8:e8:80:b7:b6:85:df:d9:82:5c:b9:
                    59:01:ef:b9:78:ba:17:ea:3e:f5:49:84:1c:ba:29:
                    5c:cd:8d:be:75:74:42:3d:80:cd:a0:c4:fc:a0:c3:
                    22:ab:06:ee:f8:6e:b5:29:74:74:3c:0a:b2:3c:73:
                    92:3d:d7:c7:86:05:05:12:1b:f0:bc:1c:a0:e6:b4:
                    8e:ec:69:36:b9:97:34:28:fb:58:2b:13:46:36:7f:
                    6b:fd:35:67:83:08:5a:4b:d8:ad:0e:6d:a3:28:4c:
                    87:90:8e:6a:c8:bb:9b:86:40:56:0e:06:2c:bc:61:
                    03:b4:62:17:25:b1:0f:c4:87:9a:51:72:f8:07:1b:
                    7c:68:c9:3b:01:98:2c:14:bd:b1:ae:4f:a5:b3:cc:
                    16:46:4f:47:00:47:c8:b8:8f:c5:0c:f4:65:70:6f:
                    3b:ef:32:fc:7e:69:b2:86:36:26:8e:94:50:a8:15:
                    9d:4b:bc:96:87:98:4d:af:79:e3:f9:a1:55:c0:95:
                    d6:2a:d9:ea:db:ea:da:92:db:03:fa:18:81:fd:dd:
                    d0:e4:75:54:10:73:11:1a:a8:2c:a9:74:b0:05:8d:
                    c2:c8:6e:74:a1:b8:d5:44:3b:31:10:9a:4b:77:95:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:17:00:AC:C1:9A:CC:10:E7:74:61:5D:7E:E3:C4:BE:85:47:9F:25
            X509v3 Authority Key Identifier:
                keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1e:29:11:2e:c7:7d:3f:66:0d:53:a1:3d:0c:c8:7d:60:e3:
         7d:8c:44:ff:7c:67:63:9e:13:9d:ad:cf:94:05:6f:88:08:44:
         9b:f3:4b:9e:cd:3a:0e:ba:91:e7:36:bf:16:04:96:67:b2:98:
         3a:eb:5c:88:b1:51:24:a0:92:ec:c6:8a:85:d5:24:6d:3d:65:
         95:fc:bc:65:7c:d8:e3:48:58:bb:d6:09:8f:63:99:29:1c:8f:
         d5:bb:86:75:9f:a7:fe:61:b0:af:e9:f3:1b:9a:ad:0b:a3:e2:
         d6:ed:f7:d6:6e:e2:e3:43:3b:f6:0c:d9:bb:42:d5:62:0e:fb:
         8c:46:c7:11:68:64:dc:59:35:fe:74:aa:7f:32:f2:e2:bf:fe:
         b7:bc:d2:47:be:f0:c2:b3:2a:40:ba:8b:a5:4b:3a:34:41:e2:
         95:35:77:fd:da:4e:cc:90:ab:e9:f0:b2:aa:41:64:65:51:41:
         88:1b:59:89:d5:bd:26:ec:76:8a:da:a1:3a:5d:49:0f:8f:40:
         af:bf:26:db:0e:8a:41:d5:a8:dd:e5:cf:a6:06:19:bf:d7:4b:
         c1:18:03:a0:d4:59:f2:52:3f:a6:8f:e5:c1:0d:72:0e:d1:0d:
         15:1b:83:42:c2:85:34:c6:88:5c:90:28:30:24:61:27:93:7e:
         82:db:8d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:28 2024 by rpki-client on console-ams.rpki-client.org