Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
File:                     xPPi6r3p45Aa27wxyfJTXN47HG8.mft (raw, json)
Hash identifier:          XCgaH4A5Ir2+upimZfPk7VtwRnHHKYBmlgvMlkeUp98=
Subject key identifier:   C5:67:48:13:72:33:E4:C5:BD:AE:5A:58:1A:D4:79:FA:C1:C7:F6:48
Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Certificate issuer:       /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Certificate serial:       0BB3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
Manifest number:          0BB3
Signing time:             Mon 03 Jun 2024 00:42:11 +0000
Manifest this update:     Mon 03 Jun 2024 00:42:11 +0000
Manifest next update:     Wed 05 Jun 2024 00:42:11 +0000
Files and hashes:         1: xPPi6r3p45Aa27wxyfJTXN47HG8.crl (hash: YjGlQvOa2eaKzldJbzSY3guymXc4R9adWagcE3VURo4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                          rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2995 (0xbb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
        Validity
            Not Before: Jun  3 00:42:11 2024 GMT
            Not After : Jun  5 00:42:11 2024 GMT
        Subject: CN=665d1163-41ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:cd:14:1d:d6:73:5c:2f:4c:2d:fa:e2:5a:
                    a9:dc:8d:54:a2:87:97:a4:72:f0:c6:9c:e2:0b:8e:
                    de:f7:e8:ba:82:3d:ef:95:0d:17:06:7f:71:00:bc:
                    ce:cf:40:18:fe:fd:fc:d1:b5:14:77:eb:5c:48:3c:
                    d1:a2:cc:2e:8e:45:52:2f:24:a6:01:be:b1:c4:11:
                    c9:ea:09:10:a9:2e:59:76:03:a6:fe:d1:12:44:62:
                    88:aa:8c:c2:71:ed:0f:1f:38:b9:f3:9d:c0:b9:e1:
                    8d:3f:2e:5b:33:f5:5e:23:08:ae:2c:28:bd:7b:79:
                    77:b6:a4:f0:bf:2f:96:3a:3b:a3:f1:33:60:62:7b:
                    0e:c7:13:79:60:4b:09:08:a3:09:65:9c:32:c9:a2:
                    96:ea:2b:6b:29:bc:80:50:63:fa:4f:77:ba:ba:12:
                    0d:b1:75:77:bf:c4:da:e1:8c:b2:d4:95:47:49:28:
                    02:62:3e:20:c8:da:9b:34:3d:26:0d:ff:69:96:9f:
                    7c:d5:55:a0:50:b0:e9:08:30:b1:36:57:75:cb:5d:
                    56:d0:9a:51:5e:34:e8:b6:50:58:e3:28:e1:d3:1c:
                    09:98:1c:69:9d:09:99:c8:b3:09:32:08:d9:69:71:
                    a1:6b:79:4c:7c:81:d4:03:23:94:e2:71:df:23:71:
                    5f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:67:48:13:72:33:E4:C5:BD:AE:5A:58:1A:D4:79:FA:C1:C7:F6:48
            X509v3 Authority Key Identifier:
                keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d4:45:19:f6:45:cd:72:7a:cb:00:47:70:b4:10:89:62:e7:
         4c:3a:3b:0d:66:ac:e8:31:94:5d:6d:30:3d:87:7e:74:fa:49:
         f4:4e:ee:75:57:94:f8:7d:0d:ae:89:b3:24:75:7e:0c:df:79:
         be:19:60:23:f7:8d:10:e6:cc:fb:a4:b5:b7:a9:b1:c8:18:15:
         86:d0:c5:1e:8d:9d:55:c2:0c:b1:46:a4:96:3c:e3:d5:32:13:
         63:04:84:d2:05:69:49:25:71:bb:1c:b6:d4:e6:b1:4d:94:af:
         ce:63:d0:93:cc:11:5c:6a:b0:52:02:83:6f:51:65:b6:39:e4:
         78:de:b5:7d:37:d0:75:1a:1d:ec:75:d3:13:5d:06:15:04:34:
         3a:f9:df:b0:36:4c:e5:e3:d4:a1:3c:f1:ba:78:c3:37:09:97:
         cd:e6:ae:63:32:59:c0:95:31:eb:7d:83:97:fa:64:01:01:36:
         20:92:ba:9e:ce:5b:40:72:ff:f8:b5:a5:ab:77:6f:4e:a7:93:
         40:5d:41:3d:4f:57:cb:67:c8:a3:65:a0:f3:7f:ea:20:38:49:
         c8:fc:8d:63:b7:84:95:17:10:ec:0a:a4:10:51:22:80:9c:b7:
         31:10:c4:51:9f:11:87:3f:2d:9a:ca:6f:30:e5:52:6c:d2:b3:
         70:d8:bd:98
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICC7MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ5RkFBUjExMC8GA1UEBRMoQzRGM0UyRUFCREU5RTM5MDFBREJCQzMxQzlGMjUz
NUNERTNCMUM2RjAeFw0yNDA2MDMwMDQyMTFaFw0yNDA2MDUwMDQyMTFaMBgxFjAU
BgNVBAMTDTY2NWQxMTYzLTQxZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC70s0UHdZzXC9MLfriWqncjVSih5ekcvDGnOILjt736LqCPe+VDRcGf3EA
vM7PQBj+/fzRtRR361xIPNGizC6ORVIvJKYBvrHEEcnqCRCpLll2A6b+0RJEYoiq
jMJx7Q8fOLnzncC54Y0/Llsz9V4jCK4sKL17eXe2pPC/L5Y6O6PxM2Biew7HE3lg
SwkIowllnDLJopbqK2spvIBQY/pPd7q6Eg2xdXe/xNrhjLLUlUdJKAJiPiDI2ps0
PSYN/2mWn3zVVaBQsOkIMLE2V3XLXVbQmlFeNOi2UFjjKOHTHAmYHGmdCZnIswky
CNlpcaFreUx8gdQDI5Ticd8jcV9fAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUxWdI
E3Iz5MW9rlpYGtR5+sHH9kgwHwYDVR0jBBgwFoAUxPPi6r3p45Aa27wxyfJTXN47
HG8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0OUZBL0I1NDQ4NDUyMUMxQzExRTY5RjdDNzUwQ0Y4QUVBMjI4L3hQUGk2
cjNwNDVBYTI3d3h5ZkpUWE40N0hHOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hQUGk2cjNwNDVBYTI3d3h5ZkpUWE40N0hHOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QjQ5RkEvQjU0NDg0NTIxQzFDMTFFNjlGN0M3NTBDRjhBRUEy
MjgveFBQaTZyM3A0NUFhMjd3eHlmSlRYTjQ3SEc4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBO1EUZ9kXNcnrLAEdwtBCJYudMOjsNZqzo
MZRdbTA9h350+kn0Tu51V5T4fQ2uibMkdX4M33m+GWAj940Q5sz7pLW3qbHIGBWG
0MUejZ1VwgyxRqSWPOPVMhNjBITSBWlJJXG7HLbU5rFNlK/OY9CTzBFcarBSAoNv
UWW2OeR43rV9N9B1Gh3sddMTXQYVBDQ6+d+wNkzl49ShPPG6eMM3CZfN5q5jMlnA
lTHrfYOX+mQBATYgkrqezltAcv/4taWrd29Op5NAXUE9T1fLZ8ijZaDzf+ogOEnI
/I1jt4SVFxDsCqQQUSKAnLcxEMRRnxGHPy2aym8w5VJs0rNw2L2Y
-----END CERTIFICATE-----
Generated at Mon Jun 3 02:23:39 2024 by rpki-client on console-fra.rpki-client.org