Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
File:                     llyMNbDxD46l29pUTykbbKkoO10.mft (raw, json)
Hash identifier:          bUQdeXFCOndvu2QMDbEkKUxLQuRx+FDXCgONaL34V8Q=
Subject key identifier:   22:E8:6B:27:E3:16:AF:B7:C6:9D:FF:4D:93:28:9E:B5:D4:AE:72:27
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Certificate issuer:       /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial:       0662
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
Manifest number:          0650
Signing time:             Wed 01 May 2024 01:07:38 +0000
Manifest this update:     Wed 01 May 2024 01:07:38 +0000
Manifest next update:     Fri 03 May 2024 01:07:38 +0000
Files and hashes:         1: llyMNbDxD46l29pUTykbbKkoO10.crl (hash: rEXklp543p+LbqMBc9BtSHtmxwkhPRdkHWBxZWz/rZI=)
                          2: 41DB14B6BBA211EAA2C86114F8AEA228.roa (hash: J9kcDvlQGEub3nPiHbATXGQIyRflcAMxuLCtqS2Iu1s=)
                          3: 6BD078B441AA11EA87DA1E2BF8AEA228.roa (hash: oG+4BfvpkXFr/OlqKfziPCwgTxfJ5wq2bdOpHvfSr4k=)
                          4: 3CE943A041AA11EAB894032BF8AEA228.roa (hash: fuNsRUefkA3mNS6Lr4CpD+r32CYonJX4P1Tf6yaBkBo=)
                          5: 81357C50BBA211EAB3B59A14F8AEA228.roa (hash: QHv5+ZtgavIHhJjYjwb0H987Zyv6pu/o+VfOZIUUZg8=)
                          6: 0C29D622BBA211EA91C72514F8AEA228.roa (hash: z9f35aOx2Eo8egndd9fRxVK3CXYjbFOxFF20xTIDGgo=)
                          7: 0648EA34469C11EA88735F27F8AEA228.roa (hash: lCvUeXQPhCEx8XuXVJVt+0c9FM3nZ3frxHkZTCYKRS4=)
                          8: 3DB30B9ABBA311EA89315C15F8AEA228.roa (hash: hSqmYouNDlFmwq98ze5AjMKjQCjmauvVZMjECey0gS8=)
                          9: CD2E36C0BBA111EA8EE7CA13F8AEA228.roa (hash: axg0LjQ9j3/7i68ukdjbQOSCqk6z3Fs5MfwY3WcA5Io=)
                          10: B40E678241A811EAA7C5E729F8AEA228.roa (hash: XAPOYmRjaK2w2T04vQDdp2fxUIdT3IVwudZSh0yQ+tE=)
                          11: AC54ED0241AF11EABC96B02EF8AEA228.roa (hash: eex3EpPcS/uhWTescY6vDR2kgqlZTusPkfTB9R1WbGA=)
                          12: A900B50E41B011EA8830612FF8AEA228.roa (hash: 8DWoZtgezFF8YJeqllmL+N7f5QIzeI2SN6hHNTlSGoc=)
                          13: A607F30E2B7111EEBD6CF8174AD9E6FC.roa (hash: hZa69mfNQSB9pbapRwb8sB9Dq+PScArCQ+8Z5829TS8=)
                          14: 443EBD6241A811EA84388729F8AEA228.roa (hash: o59pcGOHWagM0kpsGDB8LxfFbqsjjNdAr5DBZ/fqJyw=)
                          15: 67A1D5582B7111EEA16C2D174AD9E6FC.roa (hash: DRWTokh5rXrQzXOW32tfxh0mfcrM2IP9x1FJF1BO44Y=)
                          16: 1296C2244A3711ED92AD61A2F1222468.roa (hash: lPiWo1VzqLczWZQ/7USflGRaYLXN3n3lGUFRQvs2sq8=)
                          17: 94C2EE9641AA11EA85D3412BF8AEA228.roa (hash: wI6B0FUFvicsDSeJBIFQAYisnvi3aQ6m9wmYnSaVpos=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
                          rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 03 May 2024 00:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1634 (0x662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
        Validity
            Not Before: May  1 01:07:38 2024 GMT
            Not After : May  3 01:07:38 2024 GMT
        Subject: CN=663195da-06e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:ba:63:ce:92:af:70:32:15:b6:ca:19:5f:
                    7a:e0:4b:45:99:54:b9:ca:c5:66:3e:35:69:41:80:
                    a3:f2:dc:f0:d9:f5:c9:88:a5:c5:71:73:12:93:97:
                    e5:10:4f:28:23:24:62:43:fe:bd:c3:52:84:ac:09:
                    cc:43:ef:e5:f4:ef:37:89:5c:75:ad:e2:99:06:4a:
                    ef:f4:4d:66:07:90:ba:f0:3b:2b:0f:6b:03:5d:5a:
                    46:32:fe:f3:c8:a1:c7:bd:08:bf:75:a4:d0:f8:fb:
                    b7:a9:3d:11:a1:63:b7:72:9f:23:7d:67:16:52:bd:
                    66:52:37:ae:b7:3c:01:dc:eb:de:df:3f:77:7e:02:
                    dc:e8:aa:b2:22:4b:10:d7:bd:dd:ed:3f:4f:7d:d8:
                    ae:2c:39:d4:d4:1f:b6:ca:13:62:c4:6d:a4:66:cb:
                    0d:67:28:c4:00:71:9d:8c:51:2d:bf:88:68:19:7f:
                    f3:07:dd:10:b1:c9:47:f4:ab:5f:fb:16:4e:f4:ed:
                    15:f2:9b:ef:01:0a:f5:31:8f:f0:5a:33:bd:ae:46:
                    79:3f:b1:57:06:88:b8:84:d6:dc:f1:16:a7:16:9b:
                    c5:30:45:44:79:f0:97:da:ea:bc:59:f0:06:97:fe:
                    67:f8:e0:b3:7b:37:f5:4f:d0:cd:bb:7a:2b:87:95:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E8:6B:27:E3:16:AF:B7:C6:9D:FF:4D:93:28:9E:B5:D4:AE:72:27
            X509v3 Authority Key Identifier:
                keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0a:c5:82:cf:46:11:94:f1:59:05:e5:53:76:5a:83:44:5a:
         dd:af:c5:18:77:fa:3d:08:04:b6:59:c6:c3:65:8c:48:6f:d4:
         e0:a1:75:32:b3:e4:54:95:a5:da:c4:cd:d6:f1:50:f3:99:ae:
         85:62:30:c4:92:72:5c:c7:1f:7d:44:38:b8:34:36:2d:17:82:
         ed:06:b8:e7:17:ac:08:e0:96:39:b2:d0:7f:4d:58:b6:8c:50:
         92:f1:eb:a7:ac:d9:b9:86:49:5f:93:7c:05:50:12:9a:e8:3f:
         50:d2:c9:5d:c5:dd:ed:05:11:23:20:00:c8:90:6f:c7:39:36:
         cf:06:16:07:f5:27:23:b1:28:d2:f4:bc:5a:11:08:d2:05:1c:
         71:10:10:37:b5:6b:51:de:0b:cf:c0:f7:09:0b:3b:91:da:ea:
         57:51:37:53:16:f1:93:b2:83:3c:97:d4:15:72:39:0b:34:73:
         50:b5:0a:7e:59:14:19:20:ef:b6:aa:91:bd:96:07:fd:ab:d3:
         c4:7c:45:f1:7b:03:e7:15:c6:d4:95:d0:39:7e:b7:69:ec:2c:
         b9:ba:6b:98:4c:2c:67:0f:96:2e:b2:82:f7:52:fc:49:66:2e:
         d6:b0:ec:fe:39:ee:95:3a:11:7b:ef:a0:10:c4:a8:65:e9:0e:
         01:57:e0:3f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTNEN0ZBRjExMC8GA1UEBRMoOTY1QzhDMzVCMEYxMEY4RUE1REJEQTU0NEYyOTFC
NkNBOTI4M0I1RDAeFw0yNDA1MDEwMTA3MzhaFw0yNDA1MDMwMTA3MzhaMBgxFjAU
BgNVBAMTDTY2MzE5NWRhLTA2ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLnLpjzpKvcDIVtsoZX3rgS0WZVLnKxWY+NWlBgKPy3PDZ9cmIpcVxcxKT
l+UQTygjJGJD/r3DUoSsCcxD7+X07zeJXHWt4pkGSu/0TWYHkLrwOysPawNdWkYy
/vPIoce9CL91pND4+7epPRGhY7dynyN9ZxZSvWZSN663PAHc697fP3d+AtzoqrIi
SxDXvd3tP0992K4sOdTUH7bKE2LEbaRmyw1nKMQAcZ2MUS2/iGgZf/MH3RCxyUf0
q1/7Fk707RXym+8BCvUxj/BaM72uRnk/sVcGiLiE1tzxFqcWm8UwRUR58Jfa6rxZ
8AaX/mf44LN7N/VP0M27eiuHlfETAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIuhr
J+MWr7fGnf9NkyietdSucicwHwYDVR0jBBgwFoAUllyMNbDxD46l29pUTykbbKko
O10wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzRDdGL0I3MDVFQUYyNDFBNjExRUE4ODFBNjcyOEY4QUVBMjI4L2xseU1O
YkR4RDQ2bDI5cFVUeWtiYktrb08xMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xseU1OYkR4RDQ2bDI5cFVUeWtiYktrb08xMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTNEN0YvQjcwNUVBRjI0MUE2MTFFQTg4MUE2NzI4RjhB
RUEyMjgvbGx5TU5iRHhENDZsMjlwVVR5a2JiS2tvTzEwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAACsWCz0YRlPFZBeVTdlqDRFrdr8UY
d/o9CAS2WcbDZYxIb9TgoXUys+RUlaXaxM3W8VDzma6FYjDEknJcxx99RDi4NDYt
F4LtBrjnF6wI4JY5stB/TVi2jFCS8eunrNm5hklfk3wFUBKa6D9Q0sldxd3tBREj
IADIkG/HOTbPBhYH9ScjsSjS9LxaEQjSBRxxEBA3tWtR3gvPwPcJCzuR2upXUTdT
FvGTsoM8l9QVcjkLNHNQtQp+WRQZIO+2qpG9lgf9q9PEfEXxewPnFcbUldA5frdp
7Cy5umuYTCxnD5YusoL3UvxJZi7WsOz+Oe6VOhF776AQxKhl6Q4BV+A/
-----END CERTIFICATE-----
Generated at Wed May 1 02:46:14 2024 by rpki-client on console-ams.rpki-client.org