Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
File:                     H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft (raw, json)
Hash identifier:          RzIuK1S/DYrR6CZO2Ut9Ip/ZtufTRZYRP26PhIq+XZY=
Subject key identifier:   1D:B9:E9:85:99:67:88:35:45:85:35:9A:4D:15:C9:8C:35:15:D6:A0
Authority key identifier: 1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
Certificate issuer:       /CN=F3613254AF/serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
Certificate serial:       25
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
Manifest number:          24
Signing time:             Mon 27 May 2024 02:36:21 +0000
Manifest this update:     Mon 27 May 2024 02:36:21 +0000
Manifest next update:     Wed 29 May 2024 02:36:21 +0000
Files and hashes:         1: H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl (hash: cbCOcsQhjIBEq0L+3LlCfzxGrj1t5eUrBMPaawd6Peg=)
                          2: 05616A76023E11EF860AEB28017001B1.roa (hash: lFDu/sAk26utsEqbWzkcG7RiKIeLpJWcBhVg5THQ1fw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 May 2024 00:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613254AF/serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
        Validity
            Not Before: May 27 02:36:21 2024 GMT
            Not After : May 29 02:36:21 2024 GMT
        Subject: CN=6653f1a5-0288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:e0:fd:42:d7:46:da:a0:c8:ff:8c:5d:ef:
                    4b:0f:91:f1:85:b8:79:a4:78:c7:af:0b:21:47:c1:
                    23:21:f3:ad:ec:9c:76:37:82:b8:ee:fc:e0:b6:77:
                    dd:9d:01:d9:2f:9e:d5:f7:7c:94:78:4e:85:cf:20:
                    f8:a1:2d:bb:6e:8b:46:86:f7:71:d5:7e:59:0f:5f:
                    16:b1:f1:9a:f5:60:75:c7:a3:0f:dc:60:e5:c7:d1:
                    17:64:65:f6:27:8d:3b:59:16:e2:53:a4:6a:c5:4a:
                    47:80:6e:cb:e3:7f:26:a5:0c:8f:75:9c:22:78:1e:
                    c3:41:fa:84:ad:2d:27:bc:f1:3f:b6:77:b0:d2:8a:
                    b0:db:37:9f:69:ea:17:f5:37:40:48:76:09:da:a4:
                    11:4d:9e:5d:bc:64:64:59:86:54:0c:e3:4f:c5:e2:
                    1c:f1:1a:47:f6:7e:8f:6a:3f:a9:7c:5e:1c:69:d4:
                    26:5a:d9:92:07:38:8f:0b:80:1a:4e:87:e1:e2:8b:
                    50:e3:5d:1a:bd:19:9e:50:57:32:c6:84:12:f0:ea:
                    2a:20:7e:23:67:b4:fe:55:9e:45:94:61:3b:1c:4c:
                    3d:07:1c:03:ad:fe:6e:96:a2:f5:c5:99:33:61:92:
                    fc:f6:7d:af:e1:43:b7:7b:69:07:3b:6a:73:2e:4b:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B9:E9:85:99:67:88:35:45:85:35:9A:4D:15:C9:8C:35:15:D6:A0
            X509v3 Authority Key Identifier:
                keyid:1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:26:82:63:9b:af:a1:2e:64:66:83:46:49:6d:f3:a1:b3:7d:
         88:62:25:fe:63:87:9f:b1:29:02:4f:3b:75:47:47:13:03:ba:
         b8:59:3a:9d:1b:23:59:60:6c:f2:e5:d1:be:3a:da:ca:2d:f5:
         4b:19:d1:63:87:9f:e4:84:45:82:e0:80:21:00:33:19:76:51:
         56:01:03:b0:05:2a:36:fb:66:6b:fe:5b:e8:e9:3b:fc:9e:7f:
         7e:f8:06:eb:21:79:e3:b1:d2:cf:87:61:93:02:f4:ca:b7:45:
         25:c4:70:ad:f1:db:32:47:28:71:fc:16:9b:79:56:eb:51:76:
         ae:a7:2c:4e:b0:80:0f:d2:f9:d0:34:72:72:f0:36:26:06:cc:
         46:db:e0:b6:54:df:b4:e5:f5:d5:62:bf:fc:c0:df:a6:a8:ed:
         e0:37:b7:d1:33:9a:32:7a:fd:13:68:10:de:43:0f:fe:49:42:
         01:fd:2b:52:88:95:8b:ec:b5:26:bd:62:a1:5e:bd:17:0d:e6:
         d4:a6:1d:32:16:01:78:70:56:97:38:2d:4b:5e:ad:16:ef:8a:
         0d:1a:25:45:28:ac:75:21:c9:ce:33:2b:0b:01:6b:f3:a4:bc:
         9a:63:24:dc:e6:54:a0:99:9e:b7:0b:cc:9e:e0:24:92:e4:9e:
         31:e9:90:27
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBJTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
MzI1NEFGMTEwLwYDVQQFEygxRjQwRkNDNTdDMjZBNkREQjYwNUY3Nzk4QTRCNTND
MDlEMkI2MjIwMB4XDTI0MDUyNzAyMzYyMVoXDTI0MDUyOTAyMzYyMVowGDEWMBQG
A1UEAxMNNjY1M2YxYTUtMDI4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALzf4P1C10baoMj/jF3vSw+R8YW4eaR4x68LIUfBIyHzreycdjeCuO784LZ3
3Z0B2S+e1fd8lHhOhc8g+KEtu26LRob3cdV+WQ9fFrHxmvVgdcejD9xg5cfRF2Rl
9ieNO1kW4lOkasVKR4Buy+N/JqUMj3WcIngew0H6hK0tJ7zxP7Z3sNKKsNs3n2nq
F/U3QEh2CdqkEU2eXbxkZFmGVAzjT8XiHPEaR/Z+j2o/qXxeHGnUJlrZkgc4jwuA
Gk6H4eKLUONdGr0ZnlBXMsaEEvDqKiB+I2e0/lWeRZRhOxxMPQccA63+bpai9cWZ
M2GS/PZ9r+FDt3tpBztqcy5LR2kCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQduemF
mWeINUWFNZpNFcmMNRXWoDAfBgNVHSMEGDAWgBQfQPzFfCam3bYF93mKS1PAnSti
IDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTMyNTQvQzkwMTJBREUwMjM0MTFFRkEwOTY1MDVGMDE3MDAxQjEvSDBEOHhY
d21wdDIyQmZkNWlrdFR3SjByWWlBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSDBEOHhYd21wdDIyQmZkNWlrdFR3SjByWWlBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYxMzI1NC9DOTAxMkFERTAyMzQxMUVGQTA5NjUwNUYwMTcw
MDFCMS9IMEQ4eFh3bXB0MjJCZmQ1aWt0VHdKMHJZaUEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBABAmgmObr6EuZGaDRklt86GzfYhiJf5j
h5+xKQJPO3VHRxMDurhZOp0bI1lgbPLl0b462sot9UsZ0WOHn+SERYLggCEAMxl2
UVYBA7AFKjb7Zmv+W+jpO/yef374BusheeOx0s+HYZMC9Mq3RSXEcK3x2zJHKHH8
Fpt5VutRdq6nLE6wgA/S+dA0cnLwNiYGzEbb4LZU37Tl9dViv/zA36ao7eA3t9Ez
mjJ6/RNoEN5DD/5JQgH9K1KIlYvstSa9YqFevRcN5tSmHTIWAXhwVpc4LUterRbv
ig0aJUUorHUhyc4zKwsBa/OkvJpjJNzmVKCZnrcLzJ7gJJLknjHpkCc=
-----END CERTIFICATE-----
Generated at Mon May 27 04:53:34 2024 by rpki-client on console-fra.rpki-client.org