Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
File:                     M-hGYU4VRCxoAFpeP85ct1bgSn8.mft (raw, json)
Hash identifier:          jSRHB8ATaRaJzorllFIy0eXrS+LyG4XqbQib2gOB7Mc=
Subject key identifier:   28:48:1B:81:61:83:71:96:B0:7E:51:91:FC:1A:79:50:3E:EB:29:9D
Authority key identifier: 33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F
Certificate issuer:       /CN=F3613F08AF/serialNumber=33E846614E15442C68005A5E3FCE5CB756E04A7F
Certificate serial:       01A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
Manifest number:          01A8
Signing time:             Sun 24 Nov 2024 02:26:18 +0000
Manifest this update:     Sun 24 Nov 2024 02:26:17 +0000
Manifest next update:     Tue 26 Nov 2024 02:26:17 +0000
Files and hashes:         1: M-hGYU4VRCxoAFpeP85ct1bgSn8.crl (hash: ZvvHTxQzaGecjMsgMPZUAQiMVJCutPIKU2FviG7w76E=)
                          2: AC0A32D0690611EEB3384E8B4AD9E6FC.roa (hash: kErDXNR3ZNhWVzlb8Vo/Il2bfhwKojLKehJI3WdRMNI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613F08AF/serialNumber=33E846614E15442C68005A5E3FCE5CB756E04A7F
        Validity
            Not Before: Nov 24 02:26:17 2024 GMT
            Not After : Nov 26 02:26:17 2024 GMT
        Subject: CN=67428ec9-88f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:44:df:59:4b:a4:ef:76:a5:9d:70:8d:64:
                    89:b6:8f:e1:7f:aa:ec:ab:f4:37:5d:17:0e:6a:a8:
                    2b:f4:26:d2:9f:33:9d:15:31:9a:88:06:f7:95:82:
                    5e:53:99:da:10:c9:91:ce:17:99:9a:32:72:d2:c4:
                    0b:46:d9:33:11:d4:10:46:fa:f5:9e:38:bd:bc:70:
                    bc:50:49:54:dc:a9:2f:0c:68:3f:62:d8:3e:58:29:
                    5a:af:b9:66:1c:e4:f8:e2:36:9f:39:00:22:c2:19:
                    c2:98:ba:68:e7:4a:03:45:60:b9:45:31:a9:9f:a2:
                    cb:09:b4:e7:51:3a:5c:0f:5e:17:02:ab:e4:c0:1d:
                    ab:10:12:fb:d0:4e:a9:9b:41:1b:60:97:b5:24:57:
                    cf:a6:f1:f6:54:26:19:d0:a6:3b:0b:e1:7f:75:c4:
                    aa:cf:81:c8:ba:1d:c4:fe:c1:cb:8a:4c:80:96:36:
                    79:45:ac:6e:6d:84:47:27:e9:7a:8a:2b:54:9f:b3:
                    b6:8a:40:40:2f:a5:8c:f4:11:f1:ec:e4:4f:50:bd:
                    1f:5f:92:b5:84:57:56:e4:d7:29:1e:b1:3f:b1:3d:
                    bf:58:06:9f:30:fe:bd:bd:cc:ef:e1:4f:4a:8a:40:
                    b9:af:ef:2f:fa:4c:40:63:40:0e:29:98:34:ae:b4:
                    1b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:48:1B:81:61:83:71:96:B0:7E:51:91:FC:1A:79:50:3E:EB:29:9D
            X509v3 Authority Key Identifier:
                keyid:33:E8:46:61:4E:15:44:2C:68:00:5A:5E:3F:CE:5C:B7:56:E0:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M-hGYU4VRCxoAFpeP85ct1bgSn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613F08/BF472C78690511EEB09925884AD9E6FC/M-hGYU4VRCxoAFpeP85ct1bgSn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:77:f1:5f:b2:29:7a:fc:95:97:6a:a6:ac:50:2c:91:60:79:
         5a:87:55:4d:b9:f7:18:02:9e:38:af:f8:4e:6b:9c:77:aa:ac:
         8c:88:1f:d9:0b:f4:83:15:fd:d0:9f:4c:e4:12:15:92:4a:37:
         bf:2f:fe:d5:6f:d3:a4:d5:5a:c0:06:bd:b3:51:18:fb:f7:c7:
         12:2e:64:3e:89:07:d9:23:25:b7:5d:df:24:33:6f:43:f9:5a:
         6d:aa:6b:63:6e:e2:fe:cd:07:8c:39:31:72:75:3f:a0:90:0a:
         53:e3:83:7b:08:9f:39:09:36:03:37:c6:04:60:48:3d:29:d5:
         cb:b7:fb:ba:2d:07:6a:6f:3e:40:61:76:22:ab:1e:da:26:7f:
         cd:fb:1f:06:7f:fc:7b:95:e2:d3:b4:2e:ab:35:63:67:46:9d:
         6a:c9:45:46:58:c0:7b:c6:29:45:55:f6:63:61:32:99:15:34:
         be:f2:75:c6:7f:cd:4c:9f:3a:f5:5a:82:db:19:9d:e3:31:0e:
         6f:47:af:a1:2d:68:34:c2:bc:bd:95:bf:2f:9d:e2:34:25:b6:
         af:05:b5:16:6c:3d:96:64:0f:5c:d0:fa:73:f5:45:ce:46:2f:
         80:e8:ea:d1:57:3a:f5:63:59:2f:90:8e:35:dd:07:eb:8a:05:
         c4:45:11:21
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAakwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTNGMDhBRjExMC8GA1UEBRMoMzNFODQ2NjE0RTE1NDQyQzY4MDA1QTVFM0ZDRTVD
Qjc1NkUwNEE3RjAeFw0yNDExMjQwMjI2MTdaFw0yNDExMjYwMjI2MTdaMBgxFjAU
BgNVBAMTDTY3NDI4ZWM5LTg4ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxBkTfWUuk73alnXCNZIm2j+F/quyr9DddFw5qqCv0JtKfM50VMZqIBveV
gl5TmdoQyZHOF5maMnLSxAtG2TMR1BBG+vWeOL28cLxQSVTcqS8MaD9i2D5YKVqv
uWYc5PjiNp85ACLCGcKYumjnSgNFYLlFMamfossJtOdROlwPXhcCq+TAHasQEvvQ
TqmbQRtgl7UkV8+m8fZUJhnQpjsL4X91xKrPgci6HcT+wcuKTICWNnlFrG5thEcn
6XqKK1Sfs7aKQEAvpYz0EfHs5E9QvR9fkrWEV1bk1ykesT+xPb9YBp8w/r29zO/h
T0qKQLmv7y/6TEBjQA4pmDSutBv9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKEgb
gWGDcZawflGR/Bp5UD7rKZ0wHwYDVR0jBBgwFoAUM+hGYU4VRCxoAFpeP85ct1bg
Sn8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjEzRjA4L0JGNDcyQzc4NjkwNTExRUVCMDk5MjU4ODRBRDlFNkZDL00taEdZ
VTRWUkN4b0FGcGVQODVjdDFiZ1NuOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL00taEdZVTRWUkN4b0FGcGVQODVjdDFiZ1NuOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTNGMDgvQkY0NzJDNzg2OTA1MTFFRUIwOTkyNTg4NEFE
OUU2RkMvTS1oR1lVNFZSQ3hvQUZwZVA4NWN0MWJnU244Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCzd/Ffsil6/JWXaqasUCyRYHlah1VN
ufcYAp44r/hOa5x3qqyMiB/ZC/SDFf3Qn0zkEhWSSje/L/7Vb9Ok1VrABr2zURj7
98cSLmQ+iQfZIyW3Xd8kM29D+VptqmtjbuL+zQeMOTFydT+gkApT44N7CJ85CTYD
N8YEYEg9KdXLt/u6LQdqbz5AYXYiqx7aJn/N+x8Gf/x7leLTtC6rNWNnRp1qyUVG
WMB7xilFVfZjYTKZFTS+8nXGf81Mnzr1WoLbGZ3jMQ5vR6+hLWg0wry9lb8vneI0
JbavBbUWbD2WZA9c0Ppz9UXORi+A6OrRVzr1Y1kvkI413QfrigXERREh
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:49 2024 by rpki-client on console-ams.rpki-client.org