Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
File:                     QUU0FvBOj22xFq-_-XGXUae9vPc.mft (raw, json)
Hash identifier:          p/vHP9tScX0e84HO7dSQTk0jv4/kcP7dgNbbc0yGBg4=
Subject key identifier:   D8:C4:80:F3:E0:5F:0C:72:CF:74:B3:14:63:55:ED:5D:49:53:58:BB
Authority key identifier: 41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7
Certificate issuer:       /CN=F36AC99EAF/serialNumber=41453416F04E8F6DB116AFBFF9719751A7BDBCF7
Certificate serial:       039E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
Manifest number:          039B
Signing time:             Mon 03 Jun 2024 01:40:43 +0000
Manifest this update:     Mon 03 Jun 2024 01:40:43 +0000
Manifest next update:     Wed 05 Jun 2024 01:40:43 +0000
Files and hashes:         1: QUU0FvBOj22xFq-_-XGXUae9vPc.crl (hash: vUvOAVnvHMBBIgwR6er7+2ZNVPcMQ0oAcKULgQEPt4U=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC99EAF/serialNumber=41453416F04E8F6DB116AFBFF9719751A7BDBCF7
        Validity
            Not Before: Jun  3 01:40:43 2024 GMT
            Not After : Jun  5 01:40:43 2024 GMT
        Subject: CN=665d1f1b-c964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ff:2b:cc:a8:b1:cf:fc:e8:5c:b0:40:83:86:
                    e9:64:43:a2:6a:a5:c3:e5:b8:c9:c6:38:ef:cb:a0:
                    4e:20:7e:ea:5f:f2:3c:84:56:fb:12:84:e5:7e:df:
                    ff:0d:a2:d6:22:55:ce:4e:d4:df:6c:67:c5:3c:4f:
                    c8:f1:f5:11:d6:2e:50:f1:eb:b5:4a:e6:bb:f3:49:
                    0a:78:f6:2b:f0:f5:7f:dc:fe:42:9b:45:b8:9e:7c:
                    80:45:26:e3:db:d2:d8:ba:7d:e7:ee:91:3a:86:de:
                    a2:66:0a:28:bc:6f:8d:18:15:8c:35:c6:1a:87:6f:
                    d0:a0:88:99:ae:9c:44:2b:1a:92:86:06:c3:b1:6e:
                    6e:d2:d9:19:d7:a0:5f:cf:e3:94:c6:9a:b7:0f:dd:
                    a7:46:d2:0b:f4:43:45:38:15:42:85:22:46:81:cb:
                    1e:6f:4e:2c:d1:7e:2b:dc:8b:ba:61:a5:7e:9b:05:
                    25:33:f8:50:01:e5:dc:7f:df:4c:d9:ca:d0:6e:c8:
                    d2:67:ce:55:3f:f1:95:92:be:04:00:91:86:a0:09:
                    e5:15:7e:1d:e2:c1:90:47:a4:48:e1:89:fb:1e:35:
                    9f:91:6e:7a:74:d3:cd:89:9a:a0:21:0d:e0:87:fc:
                    d8:a5:93:d9:0d:c4:b3:d3:9a:d2:c2:bd:5e:94:7b:
                    9b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C4:80:F3:E0:5F:0C:72:CF:74:B3:14:63:55:ED:5D:49:53:58:BB
            X509v3 Authority Key Identifier:
                keyid:41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:53:a3:c1:46:c9:b2:07:c8:d3:e9:ce:e8:d6:47:eb:7a:3f:
         ae:60:d3:3d:83:8a:60:09:3f:9c:ed:88:43:4b:82:e0:30:91:
         02:54:7f:40:ff:e0:06:f8:33:ea:44:a7:26:b6:29:b6:a2:68:
         d0:7f:4f:84:50:f2:24:f0:3e:1b:f3:f1:65:47:3d:23:b5:15:
         9d:51:0f:4b:88:27:b7:1e:d3:97:ed:72:b5:ea:66:f2:55:a1:
         d2:f2:26:0b:97:12:89:02:f8:bf:c1:74:17:01:52:99:db:78:
         aa:3c:b3:9b:79:51:5f:ca:e7:a5:16:00:0f:0a:08:14:72:bc:
         5d:6e:48:25:52:2a:f3:b6:b7:bc:44:7f:63:a0:67:f0:9b:ce:
         e6:16:80:69:4f:b1:2a:8f:7e:72:b2:2a:b9:b4:75:d6:49:89:
         64:56:53:f6:84:41:39:00:4b:38:97:a5:9f:05:f5:82:c8:42:
         3f:54:24:16:af:db:b2:bd:52:ca:3a:84:cf:ff:77:db:d4:ad:
         aa:26:36:40:ea:51:54:96:aa:bd:e7:d7:08:a9:df:8c:d7:35:
         6f:ee:db:dc:96:85:ea:9a:45:08:d9:6d:df:be:55:26:cb:5d:
         77:4d:b1:40:ff:51:4e:a8:79:32:8f:5a:5a:0e:44:95:5f:c0:
         01:3f:3d:96
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA54wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUM5OUVBRjExMC8GA1UEBRMoNDE0NTM0MTZGMDRFOEY2REIxMTZBRkJGRjk3MTk3
NTFBN0JEQkNGNzAeFw0yNDA2MDMwMTQwNDNaFw0yNDA2MDUwMTQwNDNaMBgxFjAU
BgNVBAMTDTY2NWQxZjFiLWM5NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDc/yvMqLHP/OhcsECDhulkQ6JqpcPluMnGOO/LoE4gfupf8jyEVvsShOV+
3/8NotYiVc5O1N9sZ8U8T8jx9RHWLlDx67VK5rvzSQp49ivw9X/c/kKbRbiefIBF
JuPb0ti6fefukTqG3qJmCii8b40YFYw1xhqHb9CgiJmunEQrGpKGBsOxbm7S2RnX
oF/P45TGmrcP3adG0gv0Q0U4FUKFIkaByx5vTizRfivci7phpX6bBSUz+FAB5dx/
30zZytBuyNJnzlU/8ZWSvgQAkYagCeUVfh3iwZBHpEjhifseNZ+Rbnp0082JmqAh
DeCH/Nilk9kNxLPTmtLCvV6Ue5uFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2MSA
8+BfDHLPdLMUY1XtXUlTWLswHwYDVR0jBBgwFoAUQUU0FvBOj22xFq+/+XGXUae9
vPcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFDOTlFL0NERTZGQjVDNjNGNjExRUM5NzRFQTc5NDVBNDBENTc3L1FVVTBG
dkJPajIyeEZxLV8tWEdYVWFlOXZQYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FVVTBGdkJPajIyeEZxLV8tWEdYVWFlOXZQYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUM5OUUvQ0RFNkZCNUM2M0Y2MTFFQzk3NEVBNzk0NUE0
MEQ1NzcvUVVVMEZ2Qk9qMjJ4RnEtXy1YR1hVYWU5dlBjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcU6PBRsmyB8jT6c7o1kfrej+uYNM9
g4pgCT+c7YhDS4LgMJECVH9A/+AG+DPqRKcmtim2omjQf0+EUPIk8D4b8/FlRz0j
tRWdUQ9LiCe3HtOX7XK16mbyVaHS8iYLlxKJAvi/wXQXAVKZ23iqPLObeVFfyuel
FgAPCggUcrxdbkglUirztre8RH9joGfwm87mFoBpT7Eqj35ysiq5tHXWSYlkVlP2
hEE5AEs4l6WfBfWCyEI/VCQWr9uyvVLKOoTP/3fb1K2qJjZA6lFUlqq959cIqd+M
1zVv7tvcloXqmkUI2W3fvlUmy113TbFA/1FOqHkyj1paDkSVX8ABPz2W
-----END CERTIFICATE-----
Generated at Mon Jun 3 02:23:39 2024 by rpki-client on console-fra.rpki-client.org