Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
File:                     ZsmzRf1S4DCcordufO0LUGyNAZs.mft (raw, json)
Hash identifier:          ieUdM9G9adpP6gFXpCpiTie7RMDW+teLDpjoxoWI9C0=
Subject key identifier:   D4:95:97:99:02:C5:BE:51:02:4D:F9:6B:FC:F2:23:C3:79:EE:4E:E9
Authority key identifier: 66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B
Certificate issuer:       /CN=F36A2F84AF/serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
Certificate serial:       042E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
Manifest number:          042E
Signing time:             Mon 03 Jun 2024 01:29:58 +0000
Manifest this update:     Mon 03 Jun 2024 01:29:58 +0000
Manifest next update:     Wed 05 Jun 2024 01:29:58 +0000
Files and hashes:         1: ZsmzRf1S4DCcordufO0LUGyNAZs.crl (hash: tX194pwg/WI0AN6Wr2wZ5wC3qYEOvvlfEso70KRvnAU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AF/serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
        Validity
            Not Before: Jun  3 01:29:58 2024 GMT
            Not After : Jun  5 01:29:58 2024 GMT
        Subject: CN=665d1c96-8f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:9b:05:33:46:0a:73:35:ed:a7:17:a0:2a:
                    6b:57:2a:f6:7a:63:22:0b:7c:dd:63:95:69:71:cc:
                    85:12:d8:13:d9:6b:0c:57:af:4a:95:c4:af:5f:23:
                    ef:8f:00:b8:44:a9:99:cb:a2:49:9f:44:71:3f:2b:
                    f4:83:23:e2:47:06:81:c2:7c:74:13:3c:1d:32:73:
                    09:25:17:d9:52:a3:9a:32:eb:81:e5:6b:b8:2a:a2:
                    00:69:2a:3a:96:45:cd:55:52:61:c0:ac:9f:5b:ab:
                    b2:d4:8f:12:91:61:5c:7e:df:70:06:31:6e:a9:96:
                    45:34:3f:71:af:3b:63:55:7e:b9:c5:26:b9:ae:67:
                    04:3f:b8:62:42:83:47:4f:30:23:29:f2:0c:55:ef:
                    66:ce:52:15:40:b9:77:a6:17:74:d4:61:d0:b5:2d:
                    7c:f7:2a:9d:40:26:60:3b:82:e1:5a:14:fa:02:21:
                    14:3b:70:76:0f:9c:7c:9e:b7:69:b2:71:6f:9d:a4:
                    36:0f:dc:94:a4:f5:60:5d:2b:db:e3:84:e8:d1:16:
                    78:10:44:3d:40:05:7d:29:b5:88:13:2a:46:24:be:
                    d7:f6:f3:02:fb:88:3c:2a:95:7f:bf:33:04:10:b8:
                    d6:9b:fc:5b:b5:52:91:af:cf:27:c4:ce:64:9e:9f:
                    5d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:95:97:99:02:C5:BE:51:02:4D:F9:6B:FC:F2:23:C3:79:EE:4E:E9
            X509v3 Authority Key Identifier:
                keyid:66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:84:fa:b5:0b:ba:08:e9:37:fa:6a:4e:3b:dd:5e:c0:e8:d7:
         ec:48:47:e4:dc:28:67:e2:c7:98:ac:30:60:ff:0a:f4:e6:6c:
         8b:f7:b6:90:4b:8c:e8:04:c7:12:78:65:8f:80:26:7e:e0:2f:
         d9:cc:c3:1e:ec:b0:e3:3f:11:e8:7a:4a:2e:7c:c8:04:a4:da:
         9b:82:f3:e1:4b:bd:9e:de:f1:27:f8:b2:5b:ce:ed:1d:71:09:
         bc:fd:c0:10:6d:5e:4f:cd:5d:e6:a3:8e:93:b0:40:15:91:ed:
         ea:1f:6e:11:4c:62:2d:98:8c:98:6c:7b:65:1e:da:33:8f:6c:
         e1:09:16:92:27:32:dd:58:8f:79:1f:7d:55:18:48:aa:57:77:
         b4:ca:27:3b:a2:84:67:04:37:f8:09:3e:e9:66:cb:5a:d6:e1:
         07:68:1e:f2:0f:14:f5:9d:62:33:46:ac:e5:0e:46:e2:9b:76:
         aa:ec:da:3a:ac:c3:ef:f9:9d:b1:28:21:b6:55:05:9e:30:57:
         cc:c4:d5:64:ee:f1:9b:3f:69:76:97:bc:0f:d5:82:61:24:be:
         3b:a8:37:b0:d9:57:bf:ce:b5:39:55:c5:d6:1c:be:66:59:0e:
         72:d4:86:76:10:f3:e9:11:1e:e2:45:2e:81:26:18:af:02:e3:
         78:9d:9d:87
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTJGODRBRjExMC8GA1UEBRMoNjZDOUIzNDVGRDUyRTAzMDlDQTJCNzZFN0NFRDBC
NTA2QzhEMDE5QjAeFw0yNDA2MDMwMTI5NThaFw0yNDA2MDUwMTI5NThaMBgxFjAU
BgNVBAMTDTY2NWQxYzk2LThmNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/5ZsFM0YKczXtpxegKmtXKvZ6YyILfN1jlWlxzIUS2BPZawxXr0qVxK9f
I++PALhEqZnLokmfRHE/K/SDI+JHBoHCfHQTPB0ycwklF9lSo5oy64Hla7gqogBp
KjqWRc1VUmHArJ9bq7LUjxKRYVx+33AGMW6plkU0P3GvO2NVfrnFJrmuZwQ/uGJC
g0dPMCMp8gxV72bOUhVAuXemF3TUYdC1LXz3Kp1AJmA7guFaFPoCIRQ7cHYPnHye
t2mycW+dpDYP3JSk9WBdK9vjhOjRFngQRD1ABX0ptYgTKkYkvtf28wL7iDwqlX+/
MwQQuNab/Fu1UpGvzyfEzmSen12DAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1JWX
mQLFvlECTflr/PIjw3nuTukwHwYDVR0jBBgwFoAUZsmzRf1S4DCcordufO0LUGyN
AZswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEyRjg0Lzg3MDAxNzA4RUVBRjExRUI5QTdFM0UyQUQ4QTAxNENFL1pzbXpS
ZjFTNERDY29yZHVmTzBMVUd5TkFacy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1pzbXpSZjFTNERDY29yZHVmTzBMVUd5TkFacy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTJGODQvODcwMDE3MDhFRUFGMTFFQjlBN0UzRTJBRDhB
MDE0Q0UvWnNtelJmMVM0RENjb3JkdWZPMExVR3lOQVpzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLhPq1C7oI6Tf6ak473V7A6NfsSEfk
3Chn4seYrDBg/wr05myL97aQS4zoBMcSeGWPgCZ+4C/ZzMMe7LDjPxHoekoufMgE
pNqbgvPhS72e3vEn+LJbzu0dcQm8/cAQbV5PzV3mo46TsEAVke3qH24RTGItmIyY
bHtlHtozj2zhCRaSJzLdWI95H31VGEiqV3e0yic7ooRnBDf4CT7pZsta1uEHaB7y
DxT1nWIzRqzlDkbim3aq7No6rMPv+Z2xKCG2VQWeMFfMxNVk7vGbP2l2l7wP1YJh
JL47qDew2Ve/zrU5VcXWHL5mWQ5y1IZ2EPPpER7iRS6BJhivAuN4nZ2H
-----END CERTIFICATE-----
Generated at Mon Jun 3 02:23:39 2024 by rpki-client on console-fra.rpki-client.org