Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
File:                     5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft (raw, json)
Hash identifier:          rQck73c8yfgegdljsUdnxqhd+Eg8UHx9cc6inZkvodk=
Subject key identifier:   4B:EF:25:8D:69:13:67:9E:C1:5C:BC:3F:E4:01:AC:65:B7:2F:DF:37
Authority key identifier: E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC
Certificate issuer:       /CN=F36AA888AR/serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
Certificate serial:       0754
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
Manifest number:          0753
Signing time:             Mon 03 Jun 2024 00:58:15 +0000
Manifest this update:     Mon 03 Jun 2024 00:58:14 +0000
Manifest next update:     Wed 05 Jun 2024 00:58:14 +0000
Files and hashes:         1: 5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl (hash: h8WC2X+9d/VL/SQ/j+rzL0IwUhekuVnaXHMOkaGuqIk=)
                          2: 58B26BA4886211E99B31DD63F8AEA228.roa (hash: nvT/Y3DEz1TX+5D/zLT7HQfvvtuHBy4pd0aYSFdPAvg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                          rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1876 (0x754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA888AR/serialNumber=E48DDA12F7DB403594178CA4B8ED46E662AF8ECC
        Validity
            Not Before: Jun  3 00:58:14 2024 GMT
            Not After : Jun  5 00:58:14 2024 GMT
        Subject: CN=665d1527-56a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:30:4c:5a:43:57:f5:3f:89:8c:db:2f:bd:
                    ee:af:ae:c0:d1:8a:c1:98:ae:1d:f5:90:8e:61:52:
                    e8:6b:40:ef:67:47:17:89:52:72:f8:b8:69:c6:77:
                    a7:7e:db:3f:65:c2:fa:55:8c:9c:b4:f2:cf:8c:be:
                    32:d9:57:10:95:a3:02:ca:7c:4e:a0:f7:70:7d:bb:
                    d5:ab:64:34:fc:c6:0d:d6:d8:13:56:82:a4:04:36:
                    9a:92:c2:73:62:d6:ee:ea:64:f2:f5:d1:b9:7f:06:
                    f8:34:8b:9b:5b:68:53:42:31:1b:7e:36:43:6e:87:
                    f2:73:d4:9f:4a:c2:f3:2d:cf:8b:25:ac:ac:ed:86:
                    11:b4:2d:69:95:ec:11:17:7b:6f:34:ec:a0:87:38:
                    a9:af:39:3d:04:01:8e:61:3e:92:69:49:ce:3f:af:
                    b1:f8:cc:04:18:68:ef:84:b8:99:b4:67:cf:cf:f5:
                    eb:b8:c5:c3:16:33:78:9f:64:7e:99:27:6a:3a:df:
                    26:13:44:83:b5:d4:07:4c:e7:68:cb:ec:bf:77:43:
                    a9:2a:f3:c8:c2:88:50:76:4d:25:1b:fb:78:15:f8:
                    f3:42:a4:47:9e:f2:0c:40:33:cc:ae:c6:41:e0:85:
                    a6:a2:ce:56:75:90:36:31:a9:fd:5c:cf:f1:b4:30:
                    55:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EF:25:8D:69:13:67:9E:C1:5C:BC:3F:E4:01:AC:65:B7:2F:DF:37
            X509v3 Authority Key Identifier:
                keyid:E4:8D:DA:12:F7:DB:40:35:94:17:8C:A4:B8:ED:46:E6:62:AF:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5I3aEvfbQDWUF4ykuO1G5mKvjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/4B72B378886111E9A00E0863F8AEA228/5I3aEvfbQDWUF4ykuO1G5mKvjsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:5b:48:37:22:82:b3:48:6a:e6:7a:9b:ff:11:67:81:d7:
         bf:ec:b4:3e:b2:1d:90:24:ab:73:e4:46:5e:af:5c:fe:ea:df:
         e9:4a:4b:c7:80:82:a9:ab:ee:02:1d:6d:a9:bb:b2:b6:b7:15:
         25:50:cf:8b:f7:37:8b:28:75:30:44:05:17:c0:31:f6:c9:32:
         a5:eb:0d:10:fc:0d:c7:a5:46:6d:f0:a9:b8:3c:53:d1:17:af:
         48:4b:8b:fa:a4:0b:79:79:a8:a3:89:ee:84:ac:33:39:df:79:
         08:bf:05:58:6d:11:e1:31:83:95:34:00:3a:5e:d0:ab:ea:f5:
         86:a6:c3:36:24:b6:48:4f:cc:95:36:19:d0:05:ef:c0:b3:49:
         78:c4:5a:26:67:53:81:b9:63:3c:98:b9:8e:f3:9a:4b:43:2b:
         81:d6:b3:58:73:76:b5:ab:ff:6e:90:51:01:72:e2:bd:8b:53:
         65:54:5c:b1:a6:7d:b0:60:26:cf:25:d2:f8:90:e2:19:18:a9:
         b4:d5:a3:11:2b:a0:da:84:1d:f2:e6:aa:ef:3d:3b:1d:0d:6d:
         08:86:51:45:95:2d:ad:ad:7f:d5:df:18:3a:34:5e:dc:e0:27:
         9a:f8:88:3e:ea:60:78:6a:79:8b:31:b4:0b:01:38:c6:35:e7:
         9d:93:2b:34
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUE4ODhBUjExMC8GA1UEBRMoRTQ4RERBMTJGN0RCNDAzNTk0MTc4Q0E0QjhFRDQ2
RTY2MkFGOEVDQzAeFw0yNDA2MDMwMDU4MTRaFw0yNDA2MDUwMDU4MTRaMBgxFjAU
BgNVBAMTDTY2NWQxNTI3LTU2YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2hDBMWkNX9T+JjNsvve6vrsDRisGYrh31kI5hUuhrQO9nRxeJUnL4uGnG
d6d+2z9lwvpVjJy08s+MvjLZVxCVowLKfE6g93B9u9WrZDT8xg3W2BNWgqQENpqS
wnNi1u7qZPL10bl/Bvg0i5tbaFNCMRt+NkNuh/Jz1J9KwvMtz4slrKzthhG0LWmV
7BEXe2807KCHOKmvOT0EAY5hPpJpSc4/r7H4zAQYaO+EuJm0Z8/P9eu4xcMWM3if
ZH6ZJ2o63yYTRIO11AdM52jL7L93Q6kq88jCiFB2TSUb+3gV+PNCpEee8gxAM8yu
xkHghaaizlZ1kDYxqf1cz/G0MFVBAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUS+8l
jWkTZ57BXLw/5AGsZbcv3zcwHwYDVR0jBBgwFoAU5I3aEvfbQDWUF4ykuO1G5mKv
jswwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFBODg4LzRCNzJCMzc4ODg2MTExRTlBMDBFMDg2M0Y4QUVBMjI4LzVJM2FF
dmZiUURXVUY0eWt1TzFHNW1Ldmpzdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzVJM2FFdmZiUURXVUY0eWt1TzFHNW1Ldmpzdy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QUE4ODgvNEI3MkIzNzg4ODYxMTFFOUEwMEUwODYzRjhBRUEy
MjgvNUkzYUV2ZmJRRFdVRjR5a3VPMUc1bUt2anN3Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiqltINyKCs0hq5nqb/xFngde/7LQ+sh2Q
JKtz5EZer1z+6t/pSkvHgIKpq+4CHW2pu7K2txUlUM+L9zeLKHUwRAUXwDH2yTKl
6w0Q/A3HpUZt8Km4PFPRF69IS4v6pAt5eaijie6ErDM533kIvwVYbRHhMYOVNAA6
XtCr6vWGpsM2JLZIT8yVNhnQBe/As0l4xFomZ1OBuWM8mLmO85pLQyuB1rNYc3a1
q/9ukFEBcuK9i1NlVFyxpn2wYCbPJdL4kOIZGKm01aMRK6DahB3y5qrvPTsdDW0I
hlFFlS2trX/V3xg6NF7c4Cea+Ig+6mB4anmLMbQLATjGNeedkys0
-----END CERTIFICATE-----
Generated at Mon Jun 3 01:55:04 2024 by rpki-client on console-ams.rpki-client.org