Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
File:                     9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json)
Hash identifier:          Iu9BeKamAgE6ZVCTKSojmt0AQVJ+4nbpD8gQ7roMqmk=
Subject key identifier:   54:92:E1:A0:85:CA:3B:5C:A5:FF:1E:D5:78:32:C1:D8:8E:53:97:2C
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Certificate issuer:       /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial:       02B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
Manifest number:          0296
Signing time:             Mon 03 Jun 2024 01:59:10 +0000
Manifest this update:     Mon 03 Jun 2024 01:59:10 +0000
Manifest next update:     Wed 05 Jun 2024 01:59:10 +0000
Files and hashes:         1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: or86NwfArblwG2awy1q487b52DrnzK1dXs5Wq5HI/rI=)
                          2: A44B31E6A6DA11EDA97A419AF1222468.roa (hash: KNv3kGqVBk2ibNykWE3UgixjRGloqbHBAOBpTcknmTY=)
                          3: CAB5EB42374D11EE8810A0744AD9E6FC.roa (hash: Rd+cT1WHVj6VPW10DhoJe1VPjes86osECuBqlAPA/jk=)
                          4: 20D8603A3C6311EEBD05616B4AD9E6FC.roa (hash: yn1GI8XUJDZhc/a1VL4Ew8aXczcEtSuNRFvBTlTvah0=)
                          5: 662EC19C3C6311EEA2CE226C4AD9E6FC.roa (hash: qJZA5eX+xbJzCe6D7i9PnOvJU1CqeC3CU+zF75cZcts=)
                          6: F67E4B16374D11EEB5DE38754AD9E6FC.roa (hash: hU4jFk//Gd5275KQZyF78ZmsmvKAmuy74Zm19XPUqO4=)
                          7: CC7FC9205F2B11ED9E65CDAFF1222468.roa (hash: ggke60cRwrtaA0IhHRjOdO+urU8fnPg7GGFgdqYU9bU=)
                          8: 14B6AF743B4011EEADF20A804AD9E6FC.roa (hash: K4yraD6px2otzCCbUQWt+Yh6khumJagXOv/4f3vipmU=)
                          9: 53D289E63CCE11EE935F8A394AD9E6FC.roa (hash: 4HBFVVMsDOfA/xrur5pE2xRwqQtzwcjvpCJfYPdn3co=)
                          10: 5F94B5287E1F11EEB18DE56B4AD9E6FC.roa (hash: NnfOKQOywlCm8MbXuo5ryxtlJJnqWeXUY/Zc4KGtk9o=)
                          11: 03541FA67E1F11EE99591D6B4AD9E6FC.roa (hash: tMNuryIys8bdcGqr2btn+01OsiqNMJcIT+oXA5sB548=)
                          12: 4ED14CDCA6DA11EDAEF82299F1222468.roa (hash: iXehJ8WLWU6cHBFHQ5qsEfloV58oVEhPLmmW3fV/BY4=)
                          13: 158513F4518011EE8BDBCE164AD9E6FC.roa (hash: sbl6JhnjaIL3BTU2+lQRNeSnxalVE/sMDYPWi7BO8vg=)
                          14: 4788CE9A3C6311EE9733C66B4AD9E6FC.roa (hash: 0sVxWZVOpyK0cudH1BB1HUmOSWE0Bj2HjfkgAIa158s=)
                          15: 85435BE23C6311EE9E2BB76C4AD9E6FC.roa (hash: ZIlXxtD8wXr16Udjo8wBxB2atTHwjE6MF56MpocHqts=)
                          16: 4433C912374E11EEBD8F3D764AD9E6FC.roa (hash: lHtBjObTBwNyVhJrHEQ/zHzgJmnlb42wMC73m5Dh7UE=)
                          17: A775C5D83C6311EEA094166D4AD9E6FC.roa (hash: L972nqC78lcXrhC+mjzOc5OXmYgCBGyLNtGIrSD8tWw=)
                          18: 3A781E60A87D11EDA4CF0CBCF1222468.roa (hash: rW4kUEB+qNUQ5R4nIKr673uPCPgRXL4Vglm8OKSsBwo=)
                          19: 6338988EA87D11ED87EC69BCF1222468.roa (hash: IZXX51uk7GT1RL3vx7pjPtZqXq+pAq50SdmhzbXOnq4=)
                          20: 20EEA9507E1F11EEAD686A6B4AD9E6FC.roa (hash: +kuN9/TLBGpI4GFRii8gvKOE9Vh3yGtX4DQwHRmVzSA=)
                          21: 329D5926A54311EEA7A66B2ED25BE465.roa (hash: 1pPOf7iWBENGk84AGGgfnWlGuOjuG2CHIm2+lZTlGVY=)
                          22: 04540B763C6311EE82DB186B4AD9E6FC.roa (hash: 8pLsZ3suwRhldyF5vniTCRO+W8oJo+1mBH+nN66FQ8k=)
                          23: 9369A48A374D11EEBBBCC3734AD9E6FC.roa (hash: LriikUtiyzWDzN+qJjLYRklCy7tVdfyDgc1icmMt3FY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691 (0x2b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
        Validity
            Not Before: Jun  3 01:59:10 2024 GMT
            Not After : Jun  5 01:59:10 2024 GMT
        Subject: CN=665d236e-e9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:d6:a1:cf:88:ce:09:71:fc:f9:41:c9:72:
                    14:65:46:da:a8:6f:56:c0:79:8f:1a:1d:c9:a9:f7:
                    48:c3:67:89:81:14:cf:0d:5a:db:9a:cd:0b:90:0c:
                    37:ac:59:41:af:07:a4:52:57:0d:13:18:00:19:71:
                    70:af:e4:0e:59:0b:5e:e2:0a:29:b1:78:6d:1a:8c:
                    da:72:41:5e:f1:6d:71:c5:92:b3:81:a2:66:f0:60:
                    87:22:e6:21:16:30:5d:2a:5d:ca:70:ed:8e:01:bf:
                    60:5d:dd:2c:4e:2e:5f:f3:f2:76:30:0b:8e:8e:63:
                    bd:6e:c7:76:e8:8f:24:ae:21:38:15:b4:da:60:6d:
                    ee:14:73:39:f5:b3:a1:e8:1a:a9:3b:f2:78:48:bf:
                    a2:09:61:df:ce:da:6a:9b:73:e4:13:7f:4b:a6:95:
                    a1:e9:7c:7f:9f:72:e3:0d:b6:c3:af:e4:66:dc:42:
                    ad:37:f8:86:11:17:5d:54:e7:79:63:6e:8d:db:58:
                    cd:3e:5d:7f:76:04:97:db:2e:c6:1f:b3:b0:ea:bc:
                    d6:c4:52:a2:77:c8:5c:da:5b:98:3b:d0:92:54:e4:
                    e2:23:30:7a:31:b8:a2:fb:82:7f:1c:7b:12:7f:32:
                    c5:88:07:e3:51:31:8d:48:f9:40:f9:09:46:8a:0f:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:92:E1:A0:85:CA:3B:5C:A5:FF:1E:D5:78:32:C1:D8:8E:53:97:2C
            X509v3 Authority Key Identifier:
                keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:79:5c:88:c6:f0:1b:83:68:a6:a0:f1:e4:7b:6c:6a:5e:dd:
         d4:c1:c0:bb:7a:8d:95:2a:08:7a:40:f4:95:eb:8a:2a:34:23:
         e6:9c:73:2a:53:d7:e7:9b:be:04:a8:1c:d7:fc:be:7b:ad:c7:
         e1:bd:6a:4d:fc:80:cc:c3:ea:0f:3b:c5:4d:f3:5b:1a:13:47:
         7a:6a:e8:f6:05:ca:c1:0e:ec:4f:77:c8:e7:5c:0d:67:a9:77:
         4b:0e:d2:fc:6b:55:ac:a5:45:a6:85:f0:66:1c:8c:7d:0f:78:
         a9:b9:13:71:49:a4:ba:55:0c:9b:26:e7:a7:44:1f:8c:8e:46:
         6b:65:01:5d:6f:c3:10:e9:d7:6c:7c:56:0c:ca:67:19:17:8a:
         30:a1:59:60:7a:3a:c5:74:13:03:70:4a:4b:fd:16:35:27:07:
         62:ca:04:1d:05:88:40:b4:2c:49:49:0c:86:ac:ea:f1:3b:2f:
         ba:79:53:e1:a7:6e:5c:bd:a9:4a:11:11:4e:3a:7d:0b:f9:e7:
         6f:36:36:6c:87:30:20:99:8f:91:d1:ad:ca:00:72:57:ad:24:
         ff:b2:0f:53:1b:6c:5a:cd:8d:7c:4d:fd:cf:c5:8a:f6:71:a5:
         de:43:ed:59:a2:91:cd:e2:de:52:0b:af:be:60:48:5d:56:df:
         36:2a:3e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:57 2024 by rpki-client on console-ams.rpki-client.org