Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
File:                     -sDqJCqAq1tZab-mHdXZlLIVbrU.mft (raw, json)
Hash identifier:          MeDDVyUW10Hsrlx6J5gc3WjwjWxpzjgJzarzswKiHMM=
Subject key identifier:   AB:78:F5:20:64:5E:B7:96:BC:02:68:4C:C0:07:62:9A:3E:AB:5C:22
Authority key identifier: FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
Certificate issuer:       /CN=F364379DAR/serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Certificate serial:       01D6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
Manifest number:          01D5
Signing time:             Mon 03 Jun 2024 02:09:04 +0000
Manifest this update:     Mon 03 Jun 2024 02:09:04 +0000
Manifest next update:     Wed 05 Jun 2024 02:09:04 +0000
Files and hashes:         1: -sDqJCqAq1tZab-mHdXZlLIVbrU.crl (hash: 46kSdEXjspp9PRPqQ3JCEs0BodrhmdI1KlZbNEKlDcY=)
                          2: 3E5464B4C23911ED988FECF5F1222468.roa (hash: /hp7kvSrcZNgp2PjQqGMre4rusrPNDhZ4t/WjMK1l7g=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                          rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364379DAR/serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
        Validity
            Not Before: Jun  3 02:09:04 2024 GMT
            Not After : Jun  5 02:09:04 2024 GMT
        Subject: CN=665d25c0-f6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:92:30:91:38:7d:5b:80:65:75:ff:b7:9b:60:
                    f8:2e:03:fc:15:f5:af:03:de:83:53:a2:64:be:3d:
                    2d:15:b6:df:3e:b3:ed:c6:7c:fb:a7:ec:de:88:d3:
                    62:42:d4:12:f8:b4:eb:4d:db:5c:6a:17:9d:8a:09:
                    fd:f6:70:79:ab:a1:fc:9c:1f:71:34:41:f0:ba:d0:
                    83:3a:cf:0f:50:e9:07:04:26:b0:82:bc:c7:d0:55:
                    a2:95:a3:55:7b:a0:40:2a:65:4b:56:d6:f5:a9:b3:
                    bc:ce:4b:3c:55:a4:15:c6:98:cf:28:8f:ec:c1:9d:
                    a9:b2:bc:54:64:44:af:4a:26:28:a7:5a:82:5a:73:
                    da:36:54:17:cc:51:38:d3:e0:1c:09:87:ba:9f:d4:
                    76:07:4e:c1:c8:f6:86:b6:59:30:ee:04:a3:61:84:
                    3f:60:aa:67:c1:db:43:8d:f8:64:99:2d:bc:32:cc:
                    3b:21:43:49:bc:d3:d1:bc:9d:24:cb:49:d8:6e:4f:
                    dc:1c:64:2c:bf:2d:24:d0:76:9e:20:00:c6:55:c8:
                    f6:e3:a7:ee:5a:b9:5f:3c:ad:98:f6:df:4b:93:f6:
                    9d:9a:be:01:a9:1c:03:fc:a8:19:e5:93:b2:d1:57:
                    3c:da:7d:98:ed:a5:96:a9:17:f0:c5:e0:da:8c:02:
                    31:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:78:F5:20:64:5E:B7:96:BC:02:68:4C:C0:07:62:9A:3E:AB:5C:22
            X509v3 Authority Key Identifier:
                keyid:FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5a:40:79:9c:8f:d9:57:1f:d1:8b:e4:4d:86:ff:69:e2:24:
         3c:6e:23:48:fb:56:41:d7:96:3d:47:91:47:5d:6c:85:9f:47:
         69:0e:88:1a:7e:08:d4:ff:21:79:46:ad:e4:ba:90:e0:85:14:
         d6:76:90:ae:86:b2:f2:ee:30:8d:4e:ff:8b:81:6d:dc:df:a6:
         fc:a0:67:e4:84:bc:36:71:f5:e0:d0:f5:b3:3c:c8:2f:08:2a:
         59:07:d6:40:7b:1f:46:2e:74:f1:fd:85:a6:5a:53:e2:0a:f0:
         30:26:97:93:f9:27:2b:94:c4:4d:e4:6c:c0:48:63:71:57:90:
         d6:23:31:9d:9f:2c:08:5d:f3:62:ce:61:bc:8d:7e:c5:3a:dc:
         43:b9:8a:1c:09:33:dd:12:55:27:37:70:eb:6a:a5:c6:a2:c5:
         ef:85:84:c7:b9:cb:bf:c7:f1:ed:bc:bd:9f:68:70:ad:a5:e0:
         62:25:5c:46:1c:a9:cf:71:fe:35:d5:35:87:54:a1:8d:7d:6f:
         fa:d1:03:ef:7a:b4:69:51:5d:13:e2:84:9a:b3:54:e5:2f:a8:
         e2:da:e2:2f:51:bb:dd:52:65:13:55:69:79:37:2f:33:10:32:
         54:98:1d:f6:3f:a9:55:34:07:be:55:5a:38:59:8e:9c:38:39:
         26:ec:2a:58
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDM3OURBUjExMC8GA1UEBRMoRkFDMEVBMjQyQTgwQUI1QjU5NjlCRkE2MURENUQ5
OTRCMjE1NkVCNTAeFw0yNDA2MDMwMjA5MDRaFw0yNDA2MDUwMjA5MDRaMBgxFjAU
BgNVBAMTDTY2NWQyNWMwLWY2YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLkjCROH1bgGV1/7ebYPguA/wV9a8D3oNTomS+PS0Vtt8+s+3GfPun7N6I
02JC1BL4tOtN21xqF52KCf32cHmrofycH3E0QfC60IM6zw9Q6QcEJrCCvMfQVaKV
o1V7oEAqZUtW1vWps7zOSzxVpBXGmM8oj+zBnamyvFRkRK9KJiinWoJac9o2VBfM
UTjT4BwJh7qf1HYHTsHI9oa2WTDuBKNhhD9gqmfB20ON+GSZLbwyzDshQ0m809G8
nSTLSdhuT9wcZCy/LSTQdp4gAMZVyPbjp+5auV88rZj230uT9p2avgGpHAP8qBnl
k7LRVzzafZjtpZapF/DF4NqMAjHTAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUq3j1
IGRet5a8AmhMwAdimj6rXCIwHwYDVR0jBBgwFoAU+sDqJCqAq1tZab+mHdXZlLIV
brUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzNzlELzUwMkE5N0Q0QkYzRDExRURCOERCNDBGMUYxMjIyNDY4Ly1zRHFK
Q3FBcTF0WmFiLW1IZFhabExJVmJyVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1zRHFKQ3FBcTF0WmFiLW1IZFhabExJVmJyVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDM3OUQvNTAyQTk3RDRCRjNEMTFFREI4REI0MEYxRjEyMjI0
NjgvLXNEcUpDcUFxMXRaYWItbUhkWFpsTElWYnJVLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPWkB5nI/ZVx/Ri+RNhv9p4iQ8biNI+1ZB
15Y9R5FHXWyFn0dpDogafgjU/yF5Rq3kupDghRTWdpCuhrLy7jCNTv+LgW3c36b8
oGfkhLw2cfXg0PWzPMgvCCpZB9ZAex9GLnTx/YWmWlPiCvAwJpeT+ScrlMRN5GzA
SGNxV5DWIzGdnywIXfNizmG8jX7FOtxDuYocCTPdElUnN3DraqXGosXvhYTHucu/
x/HtvL2faHCtpeBiJVxGHKnPcf411TWHVKGNfW/60QPverRpUV0T4oSas1TlL6ji
2uIvUbvdUmUTVWl5Ny8zEDJUmB32P6lVNAe+VVo4WY6cODkm7CpY
-----END CERTIFICATE-----
Generated at Mon Jun 3 03:36:58 2024 by rpki-client on console-fra.rpki-client.org