Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
File:                     opdOZzBDJDiMiIAucX1rkoGlJjI.mft (raw, json)
Hash identifier:          HzWmgZEeXFleBF61fEgOMWn0eXE+CXr3/KJ0LpMagKk=
Subject key identifier:   43:A9:A5:2E:1F:3C:36:DC:CC:56:54:EC:FD:A2:DD:BB:F2:75:7E:6B
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Certificate issuer:       /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial:       0296
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
Manifest number:          0287
Signing time:             Mon 03 Jun 2024 02:00:01 +0000
Manifest this update:     Mon 03 Jun 2024 02:00:00 +0000
Manifest next update:     Wed 05 Jun 2024 02:00:00 +0000
Files and hashes:         1: opdOZzBDJDiMiIAucX1rkoGlJjI.crl (hash: so74NIjT0dT75kuQlzAs0YWzZ+ll7uEYHuLaXKh3kt8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
        Validity
            Not Before: Jun  3 02:00:00 2024 GMT
            Not After : Jun  5 02:00:00 2024 GMT
        Subject: CN=665d23a1-3d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:9f:60:81:89:50:2e:07:3b:7a:58:14:c8:
                    02:50:7c:ca:4b:e1:84:e7:fb:d8:0f:b6:9b:01:4f:
                    9d:f7:1e:bc:c8:fb:c9:cc:43:32:5e:9b:41:df:fe:
                    8d:ca:e1:99:0b:31:93:e8:21:c4:fd:0f:d9:82:9d:
                    1a:33:05:d0:91:95:8e:7d:5b:72:ef:cd:d9:6c:4e:
                    35:6f:86:78:7a:b5:08:c4:59:92:09:c9:52:41:6f:
                    cc:d8:4d:c5:b7:d5:42:4c:bd:d1:e0:d2:9e:41:af:
                    dd:00:6e:7b:77:c2:21:aa:f9:3e:db:99:93:ca:6e:
                    ea:c1:89:b2:27:27:87:77:b3:be:95:98:41:a7:c5:
                    25:a3:47:98:32:91:5e:ae:df:ae:08:98:7c:2f:3f:
                    ca:46:a4:31:c4:e4:89:8d:4c:20:31:12:b7:ef:c8:
                    18:3a:f2:91:be:7a:01:ab:79:5e:c3:57:06:df:37:
                    e8:eb:b2:b3:a6:37:c3:df:40:27:4e:fd:d9:3d:9a:
                    12:79:fb:fb:43:7c:cd:f0:7d:28:b6:d8:68:54:6f:
                    38:43:cb:91:8c:d7:f5:0e:8c:15:1b:84:78:20:04:
                    0c:f2:48:e3:94:21:de:28:4e:ef:29:75:e2:a7:42:
                    d1:ac:61:3b:a2:cd:e5:e5:bb:c7:39:f2:b9:d7:e2:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A9:A5:2E:1F:3C:36:DC:CC:56:54:EC:FD:A2:DD:BB:F2:75:7E:6B
            X509v3 Authority Key Identifier:
                keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:5e:88:c2:d3:e2:db:20:f0:2a:05:7c:8c:85:07:30:8d:f8:
         42:5b:d1:d6:e3:07:6c:2e:34:3f:3f:eb:10:6b:5f:8f:c0:f2:
         11:f4:c9:8d:d9:a0:47:17:91:60:41:60:f4:4d:07:b1:ba:2c:
         58:10:3f:e3:9b:e6:03:82:e3:4c:e9:14:8f:91:12:8c:39:fa:
         a3:2d:77:62:a3:b4:82:29:3b:50:34:a2:28:a3:15:63:30:0a:
         4f:4f:76:f0:4e:f8:28:97:51:94:31:b2:bd:38:7a:d3:37:11:
         c7:cc:19:dd:09:62:94:40:9e:c6:48:20:f7:86:ec:10:7c:1e:
         a9:80:6b:98:31:20:33:2b:9f:66:89:de:42:fa:5d:a1:56:6d:
         8e:6e:79:3b:bd:4a:c8:8b:d2:59:12:d2:51:61:82:2c:03:1a:
         39:73:91:55:22:b6:84:0e:93:57:26:ad:9a:ad:f6:b7:a8:66:
         77:ac:b2:d7:82:45:a2:41:7e:b9:f6:87:94:77:97:e7:75:7a:
         1e:51:dc:07:34:36:8e:3d:a3:e9:ad:8a:30:42:35:c9:58:27:
         88:54:87:08:6b:cb:52:60:6f:37:f2:2d:ed:b6:d7:48:97:90:
         60:07:4c:dd:84:a5:0a:cf:15:50:58:03:04:89:b7:ef:95:bb:
         28:27:e9:e5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICApYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDgxOUNBRjExMC8GA1UEBRMoQTI5NzRFNjczMDQzMjQzODhDODg4MDJFNzE3RDZC
OTI4MUE1MjYzMjAeFw0yNDA2MDMwMjAwMDBaFw0yNDA2MDUwMjAwMDBaMBgxFjAU
BgNVBAMTDTY2NWQyM2ExLTNkMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCx+p9ggYlQLgc7elgUyAJQfMpL4YTn+9gPtpsBT533HrzI+8nMQzJem0Hf
/o3K4ZkLMZPoIcT9D9mCnRozBdCRlY59W3LvzdlsTjVvhnh6tQjEWZIJyVJBb8zY
TcW31UJMvdHg0p5Br90Abnt3wiGq+T7bmZPKburBibInJ4d3s76VmEGnxSWjR5gy
kV6u364ImHwvP8pGpDHE5ImNTCAxErfvyBg68pG+egGreV7DVwbfN+jrsrOmN8Pf
QCdO/dk9mhJ5+/tDfM3wfSi22GhUbzhDy5GM1/UOjBUbhHggBAzySOOUId4oTu8p
deKnQtGsYTuizeXlu8c58rnX4mZhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQ6ml
Lh88NtzMVlTs/aLdu/J1fmswHwYDVR0jBBgwFoAUopdOZzBDJDiMiIAucX1rkoGl
JjIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ4MTlDLzUxNUIwRjA0NEUwRDExRUQ4RkEyMDBBOUYxMjIyNDY4L29wZE9a
ekJESkRpTWlJQXVjWDFya29HbEpqSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29wZE9aekJESkRpTWlJQXVjWDFya29HbEpqSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDgxOUMvNTE1QjBGMDQ0RTBEMTFFRDhGQTIwMEE5RjEy
MjI0Njgvb3BkT1p6QkRKRGlNaUlBdWNYMXJrb0dsSmpJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKXojC0+LbIPAqBXyMhQcwjfhCW9HW
4wdsLjQ/P+sQa1+PwPIR9MmN2aBHF5FgQWD0TQexuixYED/jm+YDguNM6RSPkRKM
OfqjLXdio7SCKTtQNKIooxVjMApPT3bwTvgol1GUMbK9OHrTNxHHzBndCWKUQJ7G
SCD3huwQfB6pgGuYMSAzK59mid5C+l2hVm2Obnk7vUrIi9JZEtJRYYIsAxo5c5FV
IraEDpNXJq2arfa3qGZ3rLLXgkWiQX659oeUd5fndXoeUdwHNDaOPaPprYowQjXJ
WCeIVIcIa8tSYG838i3tttdIl5BgB0zdhKUKzxVQWAMEibfvlbsoJ+nl
-----END CERTIFICATE-----
Generated at Mon Jun 3 03:36:58 2024 by rpki-client on console-fra.rpki-client.org