Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File:                     KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier:          2vN1HThsDBgjiNfdkwpG8n+BP2cmNZIBFh2J0zn50fg=
Subject key identifier:   05:8F:E9:93:7D:19:AF:7E:30:4E:A5:03:FC:2E:3C:A1:07:FE:51:EF
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer:       /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial:       0BB3
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number:          0BB3
Signing time:             Sun 02 Jun 2024 00:42:57 +0000
Manifest this update:     Sun 02 Jun 2024 00:42:57 +0000
Manifest next update:     Tue 04 Jun 2024 00:42:57 +0000
Files and hashes:         1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: yZRdXr7xpFMn9lTt6k7PppefcLFvXBRchUALPopNRJs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                          rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 04 Jun 2024 00:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2995 (0xbb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
        Validity
            Not Before: Jun  2 00:42:57 2024 GMT
            Not After : Jun  4 00:42:57 2024 GMT
        Subject: CN=665bc011-42d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d4:1d:07:4b:15:1e:c0:ca:95:77:52:49:60:
                    cc:6d:09:b3:4a:5a:93:f9:49:18:41:4b:87:59:3d:
                    f1:06:01:67:a2:8c:25:1f:e4:5e:09:2f:ad:14:f2:
                    43:4e:30:ec:47:92:20:42:81:17:09:c7:22:93:50:
                    6c:a8:24:9a:4e:d7:3f:16:4e:dc:64:f1:e3:a8:f6:
                    82:8c:d0:68:25:5a:04:b1:61:17:4e:9b:27:55:5a:
                    3e:9c:90:75:91:57:8f:ee:8e:4f:f1:ec:f2:1e:bf:
                    99:5d:28:9a:f0:c8:65:1f:d7:e2:13:65:a7:24:ab:
                    31:10:a5:d5:cb:46:1b:3b:88:54:31:ff:33:68:ba:
                    4d:6a:d3:1c:43:42:d8:50:78:1f:72:48:b9:ab:e4:
                    6d:de:10:03:79:8e:c1:39:cc:a9:ad:45:82:9f:4d:
                    31:81:bb:80:0e:b4:ef:46:84:70:9e:23:c0:71:42:
                    0a:11:b6:a8:93:27:e6:2d:1a:d1:88:61:b9:ec:e0:
                    f9:92:06:77:77:2a:cd:04:27:14:9d:ce:1e:e7:7c:
                    4e:9e:44:77:82:a0:08:a0:30:29:a0:b4:49:f7:ec:
                    79:d9:52:45:d8:8a:5c:6b:61:32:87:6b:57:ba:0f:
                    f7:4f:18:9a:ea:d0:f3:ab:89:d0:39:d8:88:5e:2f:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8F:E9:93:7D:19:AF:7E:30:4E:A5:03:FC:2E:3C:A1:07:FE:51:EF
            X509v3 Authority Key Identifier:
                keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:06:55:c5:33:b0:26:cc:50:09:77:2f:b1:96:f0:3a:98:35:
         9a:c0:7c:83:5d:66:34:eb:af:1e:5c:5f:05:47:b2:c5:df:a1:
         12:79:20:e6:5e:68:ca:43:fa:c3:13:78:26:17:ac:83:36:ed:
         aa:55:16:1a:97:a7:86:61:47:dc:49:47:fc:7c:38:0a:0d:78:
         46:9d:06:6e:4d:0b:bc:2c:4e:70:33:f5:30:f1:01:7d:cf:4b:
         98:af:05:e5:b0:2b:83:3e:fa:f2:40:81:34:64:e9:a0:70:1a:
         e4:db:2a:db:5f:af:52:10:de:77:b5:27:5a:a7:28:27:f5:0d:
         0e:6e:0b:68:30:a3:f5:db:8d:7d:ee:34:21:6e:b5:54:9e:8b:
         a7:25:4b:ca:8e:9b:07:75:a1:d3:c3:b5:3a:91:35:c1:96:95:
         90:e6:05:ac:1e:43:dc:5c:48:34:cd:25:14:a0:25:92:ee:fd:
         86:d5:dc:a1:96:ff:2e:1c:3d:aa:b7:b6:00:72:b8:a3:28:6e:
         3f:41:fa:2f:d9:23:20:fa:1d:5a:33:11:09:a5:9a:fc:a9:18:
         0b:7f:f2:79:ec:63:8b:b2:8f:87:86:e6:78:4d:96:e7:aa:89:
         f3:ef:c8:19:18:7e:09:47:a4:b0:8b:16:77:73:f7:24:d0:ff:
         79:0d:a1:79
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICC7MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ5RkFSSTExMC8GA1UEBRMoMjlDMERERTI0MzA1RjIwRTRFNUFEMEJCRkRDMDBG
RjE3NDhDQTY2NTAeFw0yNDA2MDIwMDQyNTdaFw0yNDA2MDQwMDQyNTdaMBgxFjAU
BgNVBAMTDTY2NWJjMDExLTQyZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCi1B0HSxUewMqVd1JJYMxtCbNKWpP5SRhBS4dZPfEGAWeijCUf5F4JL60U
8kNOMOxHkiBCgRcJxyKTUGyoJJpO1z8WTtxk8eOo9oKM0GglWgSxYRdOmydVWj6c
kHWRV4/ujk/x7PIev5ldKJrwyGUf1+ITZackqzEQpdXLRhs7iFQx/zNouk1q0xxD
QthQeB9ySLmr5G3eEAN5jsE5zKmtRYKfTTGBu4AOtO9GhHCeI8BxQgoRtqiTJ+Yt
GtGIYbns4PmSBnd3Ks0EJxSdzh7nfE6eRHeCoAigMCmgtEn37HnZUkXYilxrYTKH
a1e6D/dPGJrq0POridA52IheLwVLAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUBY/p
k30Zr34wTqUD/C48oQf+Ue8wHwYDVR0jBBgwFoAUKcDd4kMF8g5OWtC7/cAP8XSM
pmUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0OUZBLzhFOTcyRUNDMUMxQzExRTY5OUVBNDUwQ0Y4QUVBMjI4L0tjRGQ0
a01GOGc1T1d0QzdfY0FQOFhTTXBtVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L0tjRGQ0a01GOGc1T1d0QzdfY0FQOFhTTXBtVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QjQ5RkEvOEU5NzJFQ0MxQzFDMTFFNjk5RUE0NTBDRjhBRUEy
MjgvS2NEZDRrTUY4ZzVPV3RDN19jQVA4WFNNcG1VLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoBlXFM7AmzFAJdy+xlvA6mDWawHyDXWY0
668eXF8FR7LF36ESeSDmXmjKQ/rDE3gmF6yDNu2qVRYal6eGYUfcSUf8fDgKDXhG
nQZuTQu8LE5wM/Uw8QF9z0uYrwXlsCuDPvryQIE0ZOmgcBrk2yrbX69SEN53tSda
pygn9Q0ObgtoMKP124197jQhbrVUnounJUvKjpsHdaHTw7U6kTXBlpWQ5gWsHkPc
XEg0zSUUoCWS7v2G1dyhlv8uHD2qt7YAcrijKG4/Qfov2SMg+h1aMxEJpZr8qRgL
f/J57GOLso+HhuZ4TZbnqonz78gZGH4JR6SwixZ3c/ck0P95DaF5
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:39 2024 by rpki-client on console-fra.rpki-client.org