Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
File:                     X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft (raw, json)
Hash identifier:          i7UeqrJxYsYOk28ywVNHBreYAAPmZZG258uJsEnSqRE=
Subject key identifier:   64:D7:33:CC:4E:24:BD:CE:29:46:63:3A:B4:2C:E3:DE:42:FB:8B:68
Authority key identifier: 5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6
Certificate issuer:       /CN=F362A252AF/serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
Certificate serial:       02CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
Manifest number:          02CE
Signing time:             Mon 03 Jun 2024 01:52:04 +0000
Manifest this update:     Mon 03 Jun 2024 01:52:03 +0000
Manifest next update:     Wed 05 Jun 2024 01:52:03 +0000
Files and hashes:         1: X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl (hash: hySTUua7YRccblUbKpdNdlpDaI2IlD+O+OUfvOqqod8=)
                          2: 07EE873A020211EDAC199783F1222468.roa (hash: YfCMAg3Y9dxZRfFftpeSFNVqy74lmtcSUOaH6LHRzXE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A252AF/serialNumber=5F91E37E17C4A58715A01AFF09298BB16F2382C6
        Validity
            Not Before: Jun  3 01:52:03 2024 GMT
            Not After : Jun  5 01:52:03 2024 GMT
        Subject: CN=665d21c4-4ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:6b:fd:7b:ce:2f:f5:58:cc:dc:a2:e0:b1:
                    b3:39:cd:8f:29:0d:a4:f4:88:a9:24:65:80:21:da:
                    fb:d5:54:b8:26:71:75:6f:53:0a:70:62:4b:9f:97:
                    0f:59:92:8f:ca:65:a4:c6:9c:eb:7c:c1:d1:2f:3b:
                    91:1e:19:6a:68:3c:15:bb:78:f2:2e:f3:5f:43:cf:
                    f4:66:89:6f:81:44:05:fe:f5:77:32:3f:00:c9:2e:
                    3b:d1:b6:98:b4:2d:01:dd:e3:ff:15:6b:b9:83:f0:
                    64:a6:9f:c6:54:4c:38:bd:cc:e1:7a:bd:30:14:01:
                    36:c2:38:d9:68:ff:9e:ec:78:2d:6d:a5:3c:55:c4:
                    3d:51:1f:ba:02:9d:c5:cb:01:c4:85:6b:82:a4:10:
                    dd:4e:13:1d:81:60:93:b5:0c:8f:e1:a6:6a:33:85:
                    7a:84:81:4a:33:46:97:e8:e2:c2:d4:42:97:40:38:
                    08:d4:34:8f:93:30:52:cf:08:ba:4b:3d:2a:38:ac:
                    35:5f:ab:b8:f6:dd:cd:79:2f:f5:13:41:55:53:67:
                    d7:21:16:fc:a8:4e:91:88:01:ce:6a:26:a8:0a:28:
                    73:32:c6:21:99:59:21:3d:34:61:32:9b:3c:94:86:
                    fd:08:5d:7b:25:ee:18:64:8d:1f:14:03:b3:2a:65:
                    7e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D7:33:CC:4E:24:BD:CE:29:46:63:3A:B4:2C:E3:DE:42:FB:8B:68
            X509v3 Authority Key Identifier:
                keyid:5F:91:E3:7E:17:C4:A5:87:15:A0:1A:FF:09:29:8B:B1:6F:23:82:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X5HjfhfEpYcVoBr_CSmLsW8jgsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A252/78E7D528020111EDB680DB81F1222468/X5HjfhfEpYcVoBr_CSmLsW8jgsY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:93:89:44:5c:e0:af:c0:87:13:9f:fb:fe:7f:4c:1a:bc:5f:
         78:a3:47:0d:2e:a2:17:2b:55:61:de:1c:0e:4b:38:21:9c:9d:
         5f:67:e3:cb:8c:d2:a8:66:92:47:be:1a:1d:5b:b6:06:38:aa:
         da:b1:61:4d:96:f2:97:43:a2:bb:df:cf:bb:86:23:11:6a:41:
         c6:8e:43:f3:35:33:45:04:4b:16:75:51:4c:a9:ba:34:59:73:
         a7:52:9c:a8:1b:fd:d9:0a:c7:06:2e:7d:b5:49:80:a8:e4:de:
         2f:42:1d:8f:0e:30:97:52:e9:5a:5e:85:09:70:90:f4:dc:c1:
         a6:88:2f:eb:6d:ed:da:bf:f1:2e:72:f5:02:23:a3:8f:7e:d6:
         30:f3:8d:03:bf:27:4b:55:61:55:c3:87:05:1c:49:7e:5c:98:
         5e:ae:9f:95:af:77:9a:76:f5:ec:a0:2b:f1:6c:50:42:70:0f:
         ec:6a:69:33:70:f7:ff:a5:d4:5f:15:32:43:19:e3:9f:4d:64:
         99:c8:24:f0:c3:b2:41:70:c4:e6:fd:1d:75:84:b5:44:45:e0:
         e0:3d:f6:8d:61:94:1d:85:49:dc:d9:8d:e7:73:4a:5d:f1:1c:
         92:fa:fa:32:7a:d3:44:d5:5f:83:0f:34:d8:1c:41:f9:02:ac:
         3c:7a:a8:cb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkEyNTJBRjExMC8GA1UEBRMoNUY5MUUzN0UxN0M0QTU4NzE1QTAxQUZGMDkyOThC
QjE2RjIzODJDNjAeFw0yNDA2MDMwMTUyMDNaFw0yNDA2MDUwMTUyMDNaMBgxFjAU
BgNVBAMTDTY2NWQyMWM0LTRlZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBk2v9e84v9VjM3KLgsbM5zY8pDaT0iKkkZYAh2vvVVLgmcXVvUwpwYkuf
lw9Zko/KZaTGnOt8wdEvO5EeGWpoPBW7ePIu819Dz/RmiW+BRAX+9XcyPwDJLjvR
tpi0LQHd4/8Va7mD8GSmn8ZUTDi9zOF6vTAUATbCONlo/57seC1tpTxVxD1RH7oC
ncXLAcSFa4KkEN1OEx2BYJO1DI/hpmozhXqEgUozRpfo4sLUQpdAOAjUNI+TMFLP
CLpLPSo4rDVfq7j23c15L/UTQVVTZ9chFvyoTpGIAc5qJqgKKHMyxiGZWSE9NGEy
mzyUhv0IXXsl7hhkjR8UA7MqZX6RAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZNcz
zE4kvc4pRmM6tCzj3kL7i2gwHwYDVR0jBBgwFoAUX5HjfhfEpYcVoBr/CSmLsW8j
gsYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJBMjUyLzc4RTdENTI4MDIwMTExRURCNjgwREI4MUYxMjIyNDY4L1g1SGpm
aGZFcFljVm9Ccl9DU21Mc1c4amdzWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1g1SGpmaGZFcFljVm9Ccl9DU21Mc1c4amdzWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkEyNTIvNzhFN0Q1MjgwMjAxMTFFREI2ODBEQjgxRjEy
MjI0NjgvWDVIamZoZkVwWWNWb0JyX0NTbUxzVzhqZ3NZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCMk4lEXOCvwIcTn/v+f0wavF94o0cN
LqIXK1Vh3hwOSzghnJ1fZ+PLjNKoZpJHvhodW7YGOKrasWFNlvKXQ6K738+7hiMR
akHGjkPzNTNFBEsWdVFMqbo0WXOnUpyoG/3ZCscGLn21SYCo5N4vQh2PDjCXUula
XoUJcJD03MGmiC/rbe3av/EucvUCI6OPftYw840DvydLVWFVw4cFHEl+XJherp+V
r3eadvXsoCvxbFBCcA/samkzcPf/pdRfFTJDGeOfTWSZyCTww7JBcMTm/R11hLVE
ReDgPfaNYZQdhUnc2Y3nc0pd8RyS+voyetNE1V+DDzTYHEH5Aqw8eqjL
-----END CERTIFICATE-----
Generated at Mon Jun 3 02:23:10 2024 by rpki-client on console-fra.rpki-client.org