Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
File:                     _CFqOFBDurE2eHrAmYJUYZDL3pI.mft (raw, json)
Hash identifier:          t23WsuqY7dKZ9A27VmoVQwatKmpl3xkD2ypGUxw+Br4=
Subject key identifier:   08:DA:77:F0:40:B6:7F:5E:33:0B:E9:E7:CF:9D:22:C8:4A:41:B4:20
Authority key identifier: FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92
Certificate issuer:       /CN=F3618989AF/serialNumber=FC216A385043BAB136787AC09982546190CBDE92
Certificate serial:       066C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
Manifest number:          0669
Signing time:             Thu 21 Nov 2024 01:17:37 +0000
Manifest this update:     Thu 21 Nov 2024 01:17:36 +0000
Manifest next update:     Sat 23 Nov 2024 01:17:36 +0000
Files and hashes:         1: _CFqOFBDurE2eHrAmYJUYZDL3pI.crl (hash: teSYibMspcn5iuHFCexa8bpLE2bkVzbCIamLiRhBiIY=)
                          2: 7D1D251CC04011EA957AEB21F8AEA228.roa (hash: t/ypp67l7oHU7gQc6/GfToKk0xAfDBleGGehP++nK88=)
                          3: 234A1CC0C04011EABDD07A21F8AEA228.roa (hash: qxLDaEM+dLvWNlnURJT6LsT7+vD5fBM4n0SH7Mu85No=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1644 (0x66c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618989AF/serialNumber=FC216A385043BAB136787AC09982546190CBDE92
        Validity
            Not Before: Nov 21 01:17:36 2024 GMT
            Not After : Nov 23 01:17:36 2024 GMT
        Subject: CN=673e8a30-3bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f6:f5:f4:b0:ee:f3:6a:a4:9f:4a:b4:26:b5:
                    25:64:b2:1a:57:4a:0f:c9:2d:b9:7e:60:b5:99:fb:
                    9e:ea:2f:9d:35:3b:2e:24:af:63:84:ba:20:e4:8c:
                    71:eb:72:d2:36:ab:12:66:5b:d5:b5:e9:0e:df:4f:
                    a8:83:c7:97:2b:4c:e6:87:f4:6f:c9:ed:a0:e7:39:
                    7c:a8:8b:3b:ab:2f:13:be:c7:14:a5:de:3d:ab:9a:
                    be:43:4a:e0:0c:ac:09:34:de:4c:6d:6d:a6:ff:73:
                    9d:99:b2:88:6e:84:f4:cf:70:ae:a6:fa:c2:30:ea:
                    c9:08:74:02:6e:36:9d:49:6c:95:b2:bf:ba:97:bd:
                    ff:1d:dc:b9:da:d3:02:93:63:78:44:bf:cd:0c:78:
                    84:e6:4b:76:9f:56:81:9b:ea:93:17:1f:a7:d4:96:
                    41:cb:b2:6e:76:97:3d:6d:6c:c2:a8:1d:e0:0d:c1:
                    42:d2:44:08:05:8e:92:96:12:ed:72:a4:e7:62:e0:
                    a5:11:24:31:be:35:86:39:43:8c:be:ca:0f:51:03:
                    46:a9:e5:65:63:15:49:dc:9b:83:c5:47:89:48:89:
                    36:cf:c0:36:1f:08:2b:57:b9:f8:eb:51:05:00:c3:
                    ae:5d:cc:5d:59:1f:3c:24:71:b3:7e:8c:5b:59:65:
                    cc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DA:77:F0:40:B6:7F:5E:33:0B:E9:E7:CF:9D:22:C8:4A:41:B4:20
            X509v3 Authority Key Identifier:
                keyid:FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:02:44:d4:84:c2:33:5b:a7:75:66:53:13:57:b9:20:ce:76:
         61:67:0d:a0:81:80:88:a1:f3:f6:bf:56:16:5b:1a:59:d9:aa:
         86:3c:b8:b5:23:53:ba:2c:70:d8:2c:a6:9a:e1:8e:d5:19:ff:
         dd:8a:02:85:bf:68:ac:e2:87:6c:94:9e:ed:09:36:a4:0d:81:
         8f:46:cf:e7:1a:d7:66:96:a7:4e:08:50:a1:25:75:6c:16:54:
         20:3b:d4:12:f9:40:2c:17:ca:dd:65:0e:fc:b5:e4:65:31:94:
         a1:16:9e:3f:98:7a:d4:9f:0a:1e:39:53:aa:82:9c:3c:58:c9:
         bd:13:30:09:82:0f:65:4f:50:76:52:9c:c0:b5:e4:36:9a:bd:
         c6:2e:d4:a9:3c:e2:d0:da:5f:f5:21:71:a1:ad:1b:39:90:b1:
         f5:cc:eb:cd:b7:69:19:02:e1:bd:f8:7b:c1:fc:2f:ec:be:d1:
         7a:81:44:10:de:67:b4:6e:9d:d9:03:d4:00:11:06:dd:31:1a:
         69:13:59:bc:37:8e:5a:5a:ec:40:c4:a4:ba:d5:2a:7c:db:1e:
         7e:e0:fa:10:be:71:f7:be:6f:dc:d8:fc:1b:63:4a:f9:96:60:
         75:1e:72:44:78:5a:b0:9e:b0:e5:2f:66:c9:ad:0d:90:f0:c8:
         d3:12:70:03
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTg5ODlBRjExMC8GA1UEBRMoRkMyMTZBMzg1MDQzQkFCMTM2Nzg3QUMwOTk4MjU0
NjE5MENCREU5MjAeFw0yNDExMjEwMTE3MzZaFw0yNDExMjMwMTE3MzZaMBgxFjAU
BgNVBAMTDTY3M2U4YTMwLTNiZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDN9vX0sO7zaqSfSrQmtSVkshpXSg/JLbl+YLWZ+57qL501Oy4kr2OEuiDk
jHHrctI2qxJmW9W16Q7fT6iDx5crTOaH9G/J7aDnOXyoizurLxO+xxSl3j2rmr5D
SuAMrAk03kxtbab/c52ZsohuhPTPcK6m+sIw6skIdAJuNp1JbJWyv7qXvf8d3Lna
0wKTY3hEv80MeITmS3afVoGb6pMXH6fUlkHLsm52lz1tbMKoHeANwULSRAgFjpKW
Eu1ypOdi4KURJDG+NYY5Q4y+yg9RA0ap5WVjFUncm4PFR4lIiTbPwDYfCCtXufjr
UQUAw65dzF1ZHzwkcbN+jFtZZcyzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCNp3
8EC2f14zC+nnz50iyEpBtCAwHwYDVR0jBBgwFoAU/CFqOFBDurE2eHrAmYJUYZDL
3pIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE4OTg5L0RFNjdFMDFBQzAzRjExRUE4ODZEMUQyMUY4QUVBMjI4L19DRnFP
RkJEdXJFMmVIckFtWUpVWVpETDNwSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19DRnFPRkJEdXJFMmVIckFtWUpVWVpETDNwSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTg5ODkvREU2N0UwMUFDMDNGMTFFQTg4NkQxRDIxRjhB
RUEyMjgvX0NGcU9GQkR1ckUyZUhyQW1ZSlVZWkRMM3BJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9AkTUhMIzW6d1ZlMTV7kgznZhZw2g
gYCIofP2v1YWWxpZ2aqGPLi1I1O6LHDYLKaa4Y7VGf/digKFv2is4odslJ7tCTak
DYGPRs/nGtdmlqdOCFChJXVsFlQgO9QS+UAsF8rdZQ78teRlMZShFp4/mHrUnwoe
OVOqgpw8WMm9EzAJgg9lT1B2UpzAteQ2mr3GLtSpPOLQ2l/1IXGhrRs5kLH1zOvN
t2kZAuG9+HvB/C/svtF6gUQQ3me0bp3ZA9QAEQbdMRppE1m8N45aWuxAxKS61Sp8
2x5+4PoQvnH3vm/c2PwbY0r5lmB1HnJEeFqwnrDlL2bJrQ2Q8MjTEnAD
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:10:14 2024 by rpki-client on console-fra.rpki-client.org