Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
File:                     cJAIrccXkY_f_PFnQftbEwunxDA.mft (raw, json)
Hash identifier:          ILV9iuMgYGRsout73/bebd1RmGk3h8eywcPOJytejJU=
Subject key identifier:   7D:63:A7:5E:B1:FC:18:F2:5E:C4:16:13:78:04:0B:B0:D4:53:BC:5D
Authority key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Certificate issuer:       /CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Certificate serial:       67
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
Manifest number:          67
Signing time:             Mon 03 Jun 2024 02:35:58 +0000
Manifest this update:     Mon 03 Jun 2024 02:35:58 +0000
Manifest next update:     Wed 05 Jun 2024 02:35:58 +0000
Files and hashes:         1: cJAIrccXkY_f_PFnQftbEwunxDA.crl (hash: OicSoJblun6A6g6EAqEs2Jo0sB7uEoFi0k/SXx1iriM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
        Validity
            Not Before: Jun  3 02:35:58 2024 GMT
            Not After : Jun  5 02:35:58 2024 GMT
        Subject: CN=665d2c0e-4bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:68:56:2c:8a:8a:98:eb:c0:e2:bc:c1:7d:
                    d8:c8:30:3b:98:32:2c:79:ff:71:d1:75:23:08:5d:
                    54:1d:1f:94:70:a0:21:28:26:7d:38:52:07:49:b5:
                    2d:ab:5c:f3:2a:dd:8a:49:45:e3:a0:3d:bf:7c:4b:
                    a4:46:4f:76:29:bc:e9:01:56:5e:21:91:a3:b9:4c:
                    94:8f:42:55:df:32:c5:1b:d3:a3:14:67:e2:d4:58:
                    26:b2:8d:ee:ec:e1:58:c4:fe:26:00:74:37:a2:a2:
                    87:08:35:06:88:34:6e:f6:3d:31:6c:26:a5:9e:8e:
                    64:86:a2:cf:20:3d:a5:1d:07:46:cc:54:6b:fe:38:
                    12:26:72:3e:21:e7:ab:92:ea:68:ae:5a:ea:9f:ad:
                    2f:23:1b:16:09:da:11:c3:a9:da:23:61:c6:35:dd:
                    d8:32:c2:fe:fa:3f:94:75:b1:8c:ca:f5:06:ef:8f:
                    bd:45:e4:88:2a:21:df:c1:a2:53:6b:2c:7b:ac:7e:
                    2d:8e:a9:d5:2d:96:f9:0a:78:f3:33:f4:50:22:11:
                    6e:58:9d:1d:ae:b0:58:97:7a:cb:01:1f:d8:64:79:
                    df:47:23:77:d9:98:c0:eb:07:ed:d7:0f:3e:f7:1e:
                    eb:ee:fa:8e:48:3a:02:23:44:76:9c:9f:0d:c4:81:
                    be:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:63:A7:5E:B1:FC:18:F2:5E:C4:16:13:78:04:0B:B0:D4:53:BC:5D
            X509v3 Authority Key Identifier:
                keyid:70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:88:f8:8d:da:4c:07:11:ce:16:45:83:75:59:33:6b:5b:c6:
         ac:a5:da:cc:23:a1:c9:84:cd:bd:13:b5:a7:56:13:6c:16:eb:
         f6:41:ca:8e:fe:57:24:9a:69:cd:cf:9e:65:ef:dd:25:12:e1:
         01:93:66:85:52:5a:7c:e5:1e:9d:30:62:8e:ee:be:76:3a:82:
         9f:66:ad:50:e6:e2:f8:a4:1e:2a:b0:ad:7f:ef:83:b9:db:16:
         a8:dd:c8:92:4a:70:5e:2c:c9:d0:5d:e9:26:d8:39:d4:67:02:
         94:72:5f:25:b8:16:16:1b:f6:07:7e:52:2a:0c:5e:e1:20:0e:
         40:bd:83:57:a4:72:42:2b:df:2c:3c:c0:15:50:34:b7:95:1f:
         2d:ca:b1:ff:a3:98:d8:da:b2:42:0a:d3:47:d8:fa:e0:0a:b5:
         f3:67:08:6f:fe:d4:e2:54:05:5f:54:63:53:3f:f3:c3:8d:63:
         f6:83:e2:fa:ad:65:0a:ea:04:d0:3f:78:ef:e3:7c:5a:88:39:
         50:58:8a:e5:9d:d1:98:c0:72:3f:60:f8:43:83:cb:a7:d1:80:
         39:64:46:9f:32:db:44:0e:51:06:07:56:1b:69:ee:fb:91:cb:
         a2:65:7e:87:79:e0:60:03:80:1a:a4:ac:2c:9e:29:93:30:fc:
         f7:2d:a1:4a
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBZzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
MTFDNkFGMTEwLwYDVQQFEyg3MDkwMDhBREM3MTc5MThGREZGQ0YxNjc0MUZCNUIx
MzBCQTdDNDMwMB4XDTI0MDYwMzAyMzU1OFoXDTI0MDYwNTAyMzU1OFowGDEWMBQG
A1UEAxMNNjY1ZDJjMGUtNGJkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKMOaFYsioqY68DivMF92MgwO5gyLHn/cdF1IwhdVB0flHCgISgmfThSB0m1
Latc8yrdiklF46A9v3xLpEZPdim86QFWXiGRo7lMlI9CVd8yxRvToxRn4tRYJrKN
7uzhWMT+JgB0N6Kihwg1Bog0bvY9MWwmpZ6OZIaizyA9pR0HRsxUa/44EiZyPiHn
q5LqaK5a6p+tLyMbFgnaEcOp2iNhxjXd2DLC/vo/lHWxjMr1Bu+PvUXkiCoh38Gi
U2sse6x+LY6p1S2W+Qp48zP0UCIRblidHa6wWJd6ywEf2GR530cjd9mYwOsH7dcP
Pvce6+76jkg6AiNEdpyfDcSBvjMCAwEAAaOCArgwggK0MB0GA1UdDgQWBBR9Y6de
sfwY8l7EFhN4BAuw1FO8XTAfBgNVHSMEGDAWgBRwkAitxxeRj9/88WdB+1sTC6fE
MDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTExQzYvODZBREE4OThEMjJDMTFFRTg5NzIxMzZBNzc1NDEyRTYvY0pBSXJj
Y1hrWV9mX1BGblFmdGJFd3VueERBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvY0pBSXJjY1hrWV9mX1BGblFmdGJFd3VueERBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYxMTFDNi84NkFEQTg5OEQyMkMxMUVFODk3MjEzNkE3NzU0
MTJFNi9jSkFJcmNjWGtZX2ZfUEZuUWZ0YkV3dW54REEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBANaI+I3aTAcRzhZFg3VZM2tbxqyl2swj
ocmEzb0TtadWE2wW6/ZByo7+VySaac3PnmXv3SUS4QGTZoVSWnzlHp0wYo7uvnY6
gp9mrVDm4vikHiqwrX/vg7nbFqjdyJJKcF4sydBd6SbYOdRnApRyXyW4FhYb9gd+
UioMXuEgDkC9g1ekckIr3yw8wBVQNLeVHy3Ksf+jmNjaskIK00fY+uAKtfNnCG/+
1OJUBV9UY1M/88ONY/aD4vqtZQrqBNA/eO/jfFqIOVBYiuWd0ZjAcj9g+EODy6fR
gDlkRp8y20QOUQYHVhtp7vuRy6Jlfod54GADgBqkrCyeKZMw/PctoUo=
-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:04 2024 by rpki-client on console-ams.rpki-client.org