Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
File:                     XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft (raw, json)
Hash identifier:          /OEcqHy8JFC2Y4hUviKjM3DtU3CqG/O8g3uQUctHreI=
Subject key identifier:   E4:D9:A4:D2:02:F8:64:A6:E9:C2:12:89:FD:B6:36:4D:22:D6:0C:F9
Authority key identifier: 5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF
Certificate issuer:       /CN=F36D5F5AAR/serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
Certificate serial:       01B2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
Manifest number:          01B2
Signing time:             Mon 03 Jun 2024 02:11:44 +0000
Manifest this update:     Mon 03 Jun 2024 02:11:44 +0000
Manifest next update:     Wed 05 Jun 2024 02:11:44 +0000
Files and hashes:         1: XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl (hash: Y7o/Rw//o1uDMaXwiYWlsUnGHrRo03hXZN/9DqeqgDU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                          rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5F5AAR/serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
        Validity
            Not Before: Jun  3 02:11:44 2024 GMT
            Not After : Jun  5 02:11:44 2024 GMT
        Subject: CN=665d2660-fb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b7:b0:5c:8e:43:dd:28:32:6f:fc:f8:63:d9:
                    16:77:86:52:c4:c4:27:1f:c8:a3:23:18:e2:01:50:
                    21:19:89:40:8e:7a:f8:f7:36:dc:eb:a1:e0:94:b6:
                    41:50:d9:e8:ee:6e:72:72:45:44:c3:e3:21:a8:b4:
                    5d:56:32:a4:11:d8:92:ff:93:48:e8:b5:1f:e2:2e:
                    7e:67:ce:1a:22:43:1b:72:f8:a7:9d:fc:5b:f9:19:
                    d9:c8:53:0b:f5:d4:79:13:20:f6:79:cd:6e:5f:5b:
                    6b:73:84:3d:c4:1a:2c:8b:31:e9:83:d9:8a:1f:40:
                    43:05:71:ac:b6:b0:77:3b:67:25:47:61:bf:3a:26:
                    81:c0:39:cb:3f:e9:f9:ff:50:b9:0c:4c:67:fa:a5:
                    ef:11:33:fd:58:31:b1:68:22:c6:eb:0d:7f:68:07:
                    43:d6:36:bb:37:69:4f:d4:66:b4:9b:1d:72:f4:e8:
                    f7:24:ea:96:01:7b:37:46:40:57:2f:99:57:0e:c3:
                    44:3c:9b:57:ef:83:21:d2:ee:66:ef:86:8c:c0:49:
                    70:df:32:c2:ba:06:5e:19:a0:78:8c:49:cd:2f:12:
                    f5:78:d6:4c:d2:f2:3b:68:6a:91:98:75:c5:37:8f:
                    ec:97:ec:2f:06:8a:58:e8:17:7f:aa:9b:0e:c6:cd:
                    f6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D9:A4:D2:02:F8:64:A6:E9:C2:12:89:FD:B6:36:4D:22:D6:0C:F9
            X509v3 Authority Key Identifier:
                keyid:5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:09:e5:fc:f8:f2:08:5e:02:14:cd:2a:5a:8a:49:72:f9:ac:
         a1:a7:bb:c1:35:9c:19:c4:d1:f0:6a:05:42:0c:a0:dd:7c:1f:
         87:79:5c:ee:68:60:3b:3e:fc:f7:66:46:9d:49:08:19:c7:6d:
         c3:b6:97:75:ce:6c:97:9f:88:a1:82:1e:16:c1:05:3b:b9:05:
         cf:67:18:ca:6d:ef:4f:12:7a:35:67:a1:fe:8e:82:38:51:1a:
         ba:83:35:42:ba:a6:27:e1:75:d8:77:0a:29:9c:9c:af:00:fa:
         1e:55:eb:63:21:cc:cb:36:0a:1c:3e:1d:f0:f3:99:da:7f:42:
         cd:1f:21:32:4b:50:21:cc:6a:a6:fd:9a:5b:82:2f:b6:47:36:
         1c:a6:e3:13:90:7f:1d:80:39:3b:aa:e3:14:e6:cd:eb:e1:69:
         97:ee:d5:39:c5:44:3f:51:98:e7:66:b0:43:52:c0:e5:6a:db:
         c7:f3:7f:f6:95:f6:cf:44:a7:13:19:f0:f3:da:a3:70:97:e9:
         16:ff:96:11:4b:6d:7b:c1:23:db:c4:46:9c:62:79:6a:13:6f:
         03:17:6b:ab:f7:01:62:65:cc:25:b2:4a:94:e9:46:cb:f4:9c:
         34:f8:70:1a:b5:c8:4e:65:14:82:93:63:72:de:c7:52:b1:21:
         f8:d7:ce:f2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDVGNUFBUjExMC8GA1UEBRMoNUVFQTVBMkZFNzJGNDM0Mjg1RjgxOEI2ODIzMDJE
OUJDMkFENDRCRjAeFw0yNDA2MDMwMjExNDRaFw0yNDA2MDUwMjExNDRaMBgxFjAU
BgNVBAMTDTY2NWQyNjYwLWZiOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmt7BcjkPdKDJv/Phj2RZ3hlLExCcfyKMjGOIBUCEZiUCOevj3NtzroeCU
tkFQ2ejubnJyRUTD4yGotF1WMqQR2JL/k0jotR/iLn5nzhoiQxty+Ked/Fv5GdnI
Uwv11HkTIPZ5zW5fW2tzhD3EGiyLMemD2YofQEMFcay2sHc7ZyVHYb86JoHAOcs/
6fn/ULkMTGf6pe8RM/1YMbFoIsbrDX9oB0PWNrs3aU/UZrSbHXL06Pck6pYBezdG
QFcvmVcOw0Q8m1fvgyHS7mbvhozASXDfMsK6Bl4ZoHiMSc0vEvV41kzS8jtoapGY
dcU3j+yX7C8GiljoF3+qmw7Gzfb5AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU5Nmk
0gL4ZKbpwhKJ/bY2TSLWDPkwHwYDVR0jBBgwFoAUXupaL+cvQ0KF+Bi2gjAtm8Kt
RL8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ1RjVBLzNBQjkxODdFREFBNjExRUQ5QjFFMDBDNTJGNkQ4QzFEL1h1cGFM
LWN2UTBLRi1CaTJnakF0bThLdFJMOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1h1cGFMLWN2UTBLRi1CaTJnakF0bThLdFJMOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDVGNUEvM0FCOTE4N0VEQUE2MTFFRDlCMUUwMEM1MkY2RDhD
MUQvWHVwYUwtY3ZRMEtGLUJpMmdqQXRtOEt0Ukw4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAICeX8+PIIXgIUzSpaikly+ayhp7vBNZwZ
xNHwagVCDKDdfB+HeVzuaGA7Pvz3ZkadSQgZx23Dtpd1zmyXn4ihgh4WwQU7uQXP
ZxjKbe9PEno1Z6H+joI4URq6gzVCuqYn4XXYdwopnJyvAPoeVetjIczLNgocPh3w
85naf0LNHyEyS1AhzGqm/Zpbgi+2RzYcpuMTkH8dgDk7quMU5s3r4WmX7tU5xUQ/
UZjnZrBDUsDlatvH83/2lfbPRKcTGfDz2qNwl+kW/5YRS217wSPbxEacYnlqE28D
F2ur9wFiZcwlskqU6UbL9Jw0+HAatchOZRSCk2Ny3sdSsSH4187y
-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:56 2024 by rpki-client on console-ams.rpki-client.org