Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
File:                     BzRbRCXqohbQO3DogD88w6vhdRw.mft (raw, json)
Hash identifier:          8bcf75HC6UsknA0RO028qIh+ukY3znCVFQ7rgwFUBLk=
Subject key identifier:   ED:AB:D1:C8:29:B7:C6:14:AA:9F:F8:1B:FC:8E:E1:18:5F:18:B7:82
Authority key identifier: 07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
Certificate issuer:       /CN=F36145DBAF/serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
Certificate serial:       01C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
Manifest number:          01C1
Signing time:             Tue 28 May 2024 02:14:00 +0000
Manifest this update:     Tue 28 May 2024 02:13:59 +0000
Manifest next update:     Thu 30 May 2024 02:13:59 +0000
Files and hashes:         1: BzRbRCXqohbQO3DogD88w6vhdRw.crl (hash: gVfMZxafqAEZgkN8iudRhH1Sn7Hvki0zbg6DDI7OG5g=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 May 2024 00:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36145DBAF/serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
        Validity
            Not Before: May 28 02:13:59 2024 GMT
            Not After : May 30 02:13:59 2024 GMT
        Subject: CN=66553de7-096e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:cf:da:e9:1a:39:f3:c1:1f:50:da:21:b5:
                    11:12:0f:68:86:21:5d:a8:ce:5c:71:6a:43:64:2e:
                    2d:a1:6b:62:4c:1b:96:8b:66:df:e4:04:bd:5e:83:
                    17:53:87:9e:2c:c8:59:50:ab:b1:6e:4b:f4:de:24:
                    6e:91:4e:96:43:ba:56:0e:04:60:8d:1a:65:e7:8f:
                    8e:d9:ff:55:4c:5f:c5:52:be:61:0b:45:21:97:4d:
                    26:93:39:95:e6:7a:0d:95:2b:c4:d1:8d:ba:de:bc:
                    3d:74:5b:06:a0:29:64:9d:46:2a:7d:72:e4:90:67:
                    79:51:bd:df:1e:0f:a0:7d:54:c2:27:7a:88:5d:e9:
                    b4:ba:75:9a:79:f8:7d:e8:e9:6f:4d:fa:23:7a:66:
                    b9:5e:4f:ca:af:c6:63:22:57:26:8c:73:f4:a4:a8:
                    ca:ee:59:2c:28:17:c5:0d:6e:a8:51:7d:32:4f:6a:
                    32:d6:e5:91:c3:15:1c:9a:bb:8c:18:91:06:e6:d8:
                    b8:58:14:eb:43:a3:a2:90:28:b9:08:9f:1b:6e:2f:
                    9d:89:b7:7e:74:37:73:9b:27:5f:86:79:55:fa:da:
                    71:ca:d0:89:5d:ac:97:ab:b4:aa:85:84:8b:61:c5:
                    7b:ea:04:ee:cf:dc:c3:4c:1f:73:04:47:c4:0c:2d:
                    f4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AB:D1:C8:29:B7:C6:14:AA:9F:F8:1B:FC:8E:E1:18:5F:18:B7:82
            X509v3 Authority Key Identifier:
                keyid:07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:51:fa:f7:54:5e:b6:c0:01:c9:06:0c:e6:dc:33:70:7d:58:
         5e:a5:c0:87:15:04:17:8a:30:5b:e6:73:70:70:9d:4c:b5:dd:
         f3:0e:f3:57:eb:29:be:1f:90:d5:c1:a2:04:17:0e:5b:fd:83:
         6a:99:d0:e3:30:31:2d:22:8c:ca:79:81:b6:1b:62:51:18:16:
         a9:75:d4:74:6f:91:ac:38:0a:60:67:5f:3f:6f:f6:f1:e0:4a:
         ea:63:da:33:22:4d:2d:6a:30:3b:6d:ce:b2:6b:ce:7d:0e:4e:
         61:32:d3:41:4f:57:87:32:ee:a6:46:2d:a5:04:7f:55:0c:45:
         87:09:b5:8a:bd:77:52:44:f3:c5:ee:8d:be:26:89:07:4e:9a:
         84:e8:82:8d:24:32:ff:38:57:62:75:1d:da:9a:00:c4:7b:78:
         02:df:d8:09:84:94:20:cc:cb:5e:10:10:9e:13:23:88:1f:a3:
         35:20:76:63:2b:5d:c1:88:78:58:61:67:57:d5:29:c7:f1:23:
         51:d7:18:9e:9f:09:33:ac:b0:a4:ab:bb:fb:00:f3:ee:34:e0:
         52:f7:ba:8b:49:77:3b:c3:30:9a:3f:f9:4c:87:c6:43:8a:30:
         ac:17:24:28:8e:16:6b:f1:dd:28:3b:92:cb:f2:3b:6f:be:37:
         fc:d5:6b:89
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTQ1REJBRjExMC8GA1UEBRMoMDczNDVCNDQyNUVBQTIxNkQwM0I3MEU4ODAzRjND
QzNBQkUxNzUxQzAeFw0yNDA1MjgwMjEzNTlaFw0yNDA1MzAwMjEzNTlaMBgxFjAU
BgNVBAMTDTY2NTUzZGU3LTA5NmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSh8/a6Ro588EfUNohtRESD2iGIV2ozlxxakNkLi2ha2JMG5aLZt/kBL1e
gxdTh54syFlQq7FuS/TeJG6RTpZDulYOBGCNGmXnj47Z/1VMX8VSvmELRSGXTSaT
OZXmeg2VK8TRjbrevD10WwagKWSdRip9cuSQZ3lRvd8eD6B9VMIneohd6bS6dZp5
+H3o6W9N+iN6ZrleT8qvxmMiVyaMc/SkqMruWSwoF8UNbqhRfTJPajLW5ZHDFRya
u4wYkQbm2LhYFOtDo6KQKLkInxtuL52Jt350N3ObJ1+GeVX62nHK0IldrJertKqF
hIthxXvqBO7P3MNMH3MER8QMLfRFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU7avR
yCm3xhSqn/gb/I7hGF8Yt4IwHwYDVR0jBBgwFoAUBzRbRCXqohbQO3DogD88w6vh
dRwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0NURCLzU1MzBGNkQ4Q0EyODExRUQ5NDU1NjY5NUYxMjIyNDY4L0J6UmJS
Q1hxb2hiUU8zRG9nRDg4dzZ2aGRSdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0J6UmJSQ1hxb2hiUU8zRG9nRDg4dzZ2aGRSdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTQ1REIvNTUzMEY2RDhDQTI4MTFFRDk0NTU2Njk1RjEy
MjI0NjgvQnpSYlJDWHFvaGJRTzNEb2dEODh3NnZoZFJ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0Ufr3VF62wAHJBgzm3DNwfVhepcCH
FQQXijBb5nNwcJ1Mtd3zDvNX6ym+H5DVwaIEFw5b/YNqmdDjMDEtIozKeYG2G2JR
GBapddR0b5GsOApgZ18/b/bx4ErqY9ozIk0tajA7bc6ya859Dk5hMtNBT1eHMu6m
Ri2lBH9VDEWHCbWKvXdSRPPF7o2+JokHTpqE6IKNJDL/OFdidR3amgDEe3gC39gJ
hJQgzMteEBCeEyOIH6M1IHZjK13BiHhYYWdX1SnH8SNR1xienwkzrLCkq7v7APPu
NOBS97qLSXc7wzCaP/lMh8ZDijCsFyQojhZr8d0oO5LL8jtvvjf81WuJ
-----END CERTIFICATE-----
Generated at Tue May 28 03:12:53 2024 by rpki-client on console-fra.rpki-client.org