Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
File:                     ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft (raw, json)
Hash identifier:          OW/1EXdL+GyuAVbfgKK+GfzM0491csqoADK5WrwXnwg=
Subject key identifier:   9B:95:A7:D1:58:68:33:95:26:1E:D9:21:C3:C0:57:C9:11:5B:A4:87
Authority key identifier: 66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D
Certificate issuer:       /CN=F364A0C9AF/serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
Certificate serial:       AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
Manifest number:          AB
Signing time:             Mon 03 Jun 2024 02:31:11 +0000
Manifest this update:     Mon 03 Jun 2024 02:31:10 +0000
Manifest next update:     Wed 05 Jun 2024 02:31:10 +0000
Files and hashes:         1: ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl (hash: X8iA4jxN3+Vv/Z3bkBYxk6m0NRjWTcncy8pmYTMLQOU=)
                          2: 66456C5EA97711EE82772DA2775412E6.roa (hash: nnv2wC9302+3Jy3xrrAKkIS0rIVeajmhrACjCN0mcQM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364A0C9AF/serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
        Validity
            Not Before: Jun  3 02:31:10 2024 GMT
            Not After : Jun  5 02:31:10 2024 GMT
        Subject: CN=665d2aef-c0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:89:95:68:ed:15:eb:bc:2d:c3:87:32:78:60:
                    e1:b4:f7:90:df:d3:5c:92:13:2b:8d:d9:56:51:4d:
                    f9:9a:41:53:de:b1:72:ee:cc:e0:59:f0:6b:d7:79:
                    f1:7a:72:78:ba:4d:a0:8c:99:c4:ed:53:14:ce:e5:
                    52:da:98:fb:b8:09:8e:92:4f:70:ea:04:86:f7:0b:
                    27:4a:05:75:45:60:e0:ac:99:e3:31:33:73:ad:c8:
                    00:11:78:81:6f:4e:b2:fb:5c:72:d7:f7:b7:bc:a1:
                    f0:29:66:db:a7:7b:00:fc:91:dc:16:38:5a:83:77:
                    24:3b:7e:a1:90:b8:bc:7a:81:b8:eb:af:0b:d1:f8:
                    07:51:2c:3b:fd:f2:cf:18:e7:9f:33:a1:54:1f:ef:
                    5c:2a:ef:91:ff:3b:7f:1a:38:25:7c:ff:c4:c8:88:
                    b2:64:02:fc:bc:0c:be:1c:c1:c9:f2:76:75:8f:db:
                    a0:ed:da:40:3c:97:51:02:58:39:ef:3c:58:a1:17:
                    3e:ca:63:04:d0:8c:ef:9f:70:e0:5c:c5:44:75:c7:
                    dc:64:97:f4:95:a0:22:db:31:54:3e:13:58:87:30:
                    b4:5c:6e:9a:5d:bd:6a:89:38:de:5b:cf:db:a3:01:
                    2c:67:88:da:3c:29:b2:99:7f:08:12:79:77:c5:82:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:95:A7:D1:58:68:33:95:26:1E:D9:21:C3:C0:57:C9:11:5B:A4:87
            X509v3 Authority Key Identifier:
                keyid:66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e1:70:98:cf:8c:f5:ae:b5:56:7e:de:30:9a:8e:59:ac:50:
         d5:c2:25:8d:8d:52:0b:42:a0:b4:3e:b8:0f:3d:97:2c:5c:3b:
         61:7c:fc:73:e1:92:1a:61:7e:3c:06:c7:4c:45:e5:68:59:d9:
         69:da:b7:ca:1d:f1:f4:e0:4e:73:69:10:dc:3a:53:2e:12:3d:
         99:c5:58:b1:8b:13:82:54:09:86:8b:47:6a:fb:84:3e:11:fe:
         0e:09:d4:75:31:5c:a1:a9:e2:eb:2c:47:ae:f4:9e:e7:ed:5a:
         82:a7:4d:ce:cb:99:d7:f1:41:8a:30:dd:e2:87:96:c5:fb:f9:
         ae:5f:53:4e:63:35:27:8e:37:14:75:84:2a:eb:f4:61:6f:2c:
         db:2c:6f:d8:fa:93:5a:8d:16:6a:5f:70:aa:68:c9:c6:2e:e7:
         dd:8b:fc:60:42:ba:5b:cc:be:4d:59:8a:df:fe:73:7d:c5:62:
         fc:ba:a6:d9:6b:ed:0c:3f:db:f8:f6:2f:a2:e2:65:c9:e1:29:
         7a:b6:b3:eb:e7:ba:d8:8e:30:0c:db:30:cc:56:51:e4:4b:7f:
         60:6a:eb:55:85:d2:cb:5b:93:b7:c3:5b:c2:67:a2:85:6c:9d:
         62:db:25:8f:77:dc:74:25:7a:2b:4b:00:02:4c:a8:ff:9c:b9:
         ce:87:18:89
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEEwQzlBRjExMC8GA1UEBRMoNjY0MUY2QjY2MDU0NEVEMTUwMUJDQzA5NUFBMDdG
OUNCMEZCNUM0RDAeFw0yNDA2MDMwMjMxMTBaFw0yNDA2MDUwMjMxMTBaMBgxFjAU
BgNVBAMTDTY2NWQyYWVmLWMwZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgiZVo7RXrvC3DhzJ4YOG095Df01ySEyuN2VZRTfmaQVPesXLuzOBZ8GvX
efF6cni6TaCMmcTtUxTO5VLamPu4CY6ST3DqBIb3CydKBXVFYOCsmeMxM3OtyAAR
eIFvTrL7XHLX97e8ofApZtunewD8kdwWOFqDdyQ7fqGQuLx6gbjrrwvR+AdRLDv9
8s8Y558zoVQf71wq75H/O38aOCV8/8TIiLJkAvy8DL4cwcnydnWP26Dt2kA8l1EC
WDnvPFihFz7KYwTQjO+fcOBcxUR1x9xkl/SVoCLbMVQ+E1iHMLRcbppdvWqJON5b
z9ujASxniNo8KbKZfwgSeXfFgonzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUm5Wn
0VhoM5UmHtkhw8BXyRFbpIcwHwYDVR0jBBgwFoAUZkH2tmBUTtFQG8wJWqB/nLD7
XE0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRBMEM5L0I4OTcxNDRBQTY2QTExRUU4QTgyQ0U4Qzc3NTQxMkU2L1prSDJ0
bUJVVHRGUUc4d0pXcUJfbkxEN1hFMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1prSDJ0bUJVVHRGUUc4d0pXcUJfbkxEN1hFMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEEwQzkvQjg5NzE0NEFBNjZBMTFFRThBODJDRThDNzc1
NDEyRTYvWmtIMnRtQlVUdEZRRzh3SldxQl9uTEQ3WEUwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCv4XCYz4z1rrVWft4wmo5ZrFDVwiWN
jVILQqC0PrgPPZcsXDthfPxz4ZIaYX48BsdMReVoWdlp2rfKHfH04E5zaRDcOlMu
Ej2ZxVixixOCVAmGi0dq+4Q+Ef4OCdR1MVyhqeLrLEeu9J7n7VqCp03Oy5nX8UGK
MN3ih5bF+/muX1NOYzUnjjcUdYQq6/RhbyzbLG/Y+pNajRZqX3CqaMnGLufdi/xg
QrpbzL5NWYrf/nN9xWL8uqbZa+0MP9v49i+i4mXJ4Sl6trPr57rYjjAM2zDMVlHk
S39gautVhdLLW5O3w1vCZ6KFbJ1i2yWPd9x0JXorSwACTKj/nLnOhxiJ
-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:06 2024 by rpki-client on console-ams.rpki-client.org