Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
File:                     nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft (raw, json)
Hash identifier:          1eu+cQBNzIBInn9WzPlyByCMYjuea3jE61eC00+LI/E=
Subject key identifier:   DA:16:48:9A:91:82:9D:21:42:BB:4A:A1:52:D7:50:17:B6:01:D4:97
Authority key identifier: 9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
Certificate issuer:       /CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Certificate serial:       05E2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
Manifest number:          05DB
Signing time:             Sun 24 Nov 2024 01:20:32 +0000
Manifest this update:     Sun 24 Nov 2024 01:20:31 +0000
Manifest next update:     Tue 26 Nov 2024 01:20:31 +0000
Files and hashes:         1: nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl (hash: 5tPq7dlA+UklDdFt8ASN+TFae9xt2yVC/SLdAMKX45o=)
                          2: 734F013479C511EFAE81627D762E951A.roa (hash: xdurMFAxJPU0CP+M6yamIm2npN94Z/AsDJKHCn0C3Ko=)
                          3: 2B48BC985C0C11EB9996AA30F8AEA228.roa (hash: q6nVowz9VuDpjWX/IbvfjqSfChWzoCDvGswNPS2gk/0=)
                          4: FE6D92CA5C0B11EB95157330F8AEA228.roa (hash: BYjhKLTeS3/YMIgCsGSrv774yAnK9WPRQzbv65YQDbs=)
                          5: A573C59E7F2111EFABEC8243762E951A.roa (hash: z2hxV4eIGWcs9mH3SGVDwRrbCV/vQwHP3UQvoUEczXo=)
                          6: 336BF2CA332411EBB561BF72F8AEA228.roa (hash: z0Vqh2yhGazkcY6WrmD+gGwdIRbocCnl8S5PFmlQhf8=)
                          7: 66D788525C0C11EB89D7F330F8AEA228.roa (hash: T1mAIRrcLYmyaqd64q3hHsdJGYOwe7vCQdctkyt3sqY=)
                          8: 4D1819725C0C11EBB458D830F8AEA228.roa (hash: Y5bEDudGZy2SxFSFnv47v/c/OeLSoqXcxTY9JA/Rm5g=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
        Validity
            Not Before: Nov 24 01:20:31 2024 GMT
            Not After : Nov 26 01:20:31 2024 GMT
        Subject: CN=67427f60-e389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:14:b9:c3:f8:c2:e6:91:ff:89:76:93:62:1a:
                    db:9c:64:cd:ed:b8:b2:8e:5e:e4:3a:e4:08:c3:41:
                    84:73:3d:54:28:4f:3e:e9:40:cf:38:10:6e:7b:e3:
                    31:93:cb:3b:54:77:f9:6a:51:5b:1d:e1:17:e8:6a:
                    0d:a3:4f:9a:2b:50:1d:4d:bf:3a:80:b8:41:66:be:
                    4c:8d:3a:90:67:d8:c9:6a:67:4a:e7:e6:dd:a5:ea:
                    af:4d:23:ef:22:97:a8:f8:6a:e8:83:a9:eb:19:53:
                    a1:9e:20:15:66:b7:3b:cd:5c:5a:78:e6:43:d6:62:
                    3f:e5:d8:2b:a3:cd:fa:0a:96:d2:fc:8b:3f:50:65:
                    7e:cd:a0:1c:c5:2d:ba:f2:58:4c:ea:f3:7b:b8:d2:
                    94:cb:7e:ad:5b:41:24:b3:e7:46:8b:66:e4:ce:88:
                    f6:f3:fb:ae:34:cc:ab:6a:30:58:cb:07:a4:ef:af:
                    00:9b:8b:3c:38:e8:01:6d:66:63:b6:98:b8:f2:12:
                    df:09:51:5d:f1:87:f3:c4:55:23:0d:4f:a5:0b:b7:
                    ba:57:d8:6d:1b:d2:db:c8:ab:41:af:61:eb:47:88:
                    7e:e0:4e:7c:b9:28:e7:fb:57:e5:b5:7c:10:16:d4:
                    80:83:f6:61:eb:3c:76:53:37:17:20:03:65:2d:07:
                    76:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:16:48:9A:91:82:9D:21:42:BB:4A:A1:52:D7:50:17:B6:01:D4:97
            X509v3 Authority Key Identifier:
                keyid:9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a6:58:24:ed:51:ab:e8:1c:ac:1a:6a:5e:75:41:7b:64:80:
         2b:5c:42:f7:4d:5a:8c:6d:ac:22:f6:e1:b1:f4:68:29:71:9a:
         05:f1:0b:27:6b:86:20:7d:1d:55:27:c3:e7:b7:70:71:b3:26:
         a7:fa:4f:8b:29:19:ef:9c:43:2a:92:b9:e2:80:44:a2:73:51:
         1c:32:f3:dc:3c:51:68:7a:14:3f:af:d7:97:d3:1d:f3:fa:6c:
         63:09:56:5b:bc:32:30:ba:90:82:0b:0c:14:96:92:da:a2:04:
         16:80:55:f1:1f:79:5c:64:a8:75:3f:90:de:2e:e2:80:7f:f9:
         a7:7f:6d:ba:bc:73:1c:4b:86:76:be:95:61:6a:b0:cb:a5:af:
         6b:3f:14:0f:df:70:00:5d:57:b7:b3:8e:3d:de:b1:f8:a1:84:
         3c:7f:7f:03:08:e5:89:a9:01:ac:69:4b:94:78:c0:9d:04:77:
         06:95:75:dc:ab:b7:89:ad:f6:2a:88:cd:b9:86:9b:9f:24:af:
         76:11:38:a3:3d:29:b0:59:fa:73:54:d5:7e:a9:c9:f1:4e:e4:
         66:22:81:7c:56:bd:c4:a1:9a:7c:b4:6b:07:e9:6f:6e:cd:6d:
         a5:45:d9:38:24:d2:28:1a:34:f2:db:18:f0:b8:7d:75:46:1a:
         79:e0:42:f5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkZGMTdBRjExMC8GA1UEBRMoOUNENDEzOTZBQkNGOUJCOUVGRjZFMjY4NTUzMjRG
ODNDNTlEQzY5QTAeFw0yNDExMjQwMTIwMzFaFw0yNDExMjYwMTIwMzFaMBgxFjAU
BgNVBAMTDTY3NDI3ZjYwLWUzODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiFLnD+MLmkf+JdpNiGtucZM3tuLKOXuQ65AjDQYRzPVQoTz7pQM84EG57
4zGTyztUd/lqUVsd4Rfoag2jT5orUB1NvzqAuEFmvkyNOpBn2MlqZ0rn5t2l6q9N
I+8il6j4auiDqesZU6GeIBVmtzvNXFp45kPWYj/l2CujzfoKltL8iz9QZX7NoBzF
LbryWEzq83u40pTLfq1bQSSz50aLZuTOiPbz+640zKtqMFjLB6TvrwCbizw46AFt
ZmO2mLjyEt8JUV3xh/PEVSMNT6ULt7pX2G0b0tvIq0GvYetHiH7gTny5KOf7V+W1
fBAW1ICD9mHrPHZTNxcgA2UtB3Z/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2hZI
mpGCnSFCu0qhUtdQF7YB1JcwHwYDVR0jBBgwFoAUnNQTlqvPm7nv9uJoVTJPg8Wd
xpowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGRjE3L0E0NENCQzdFMzMyMjExRUI5M0EyMTU3MUY4QUVBMjI4L25OUVRs
cXZQbTdudjl1Sm9WVEpQZzhXZHhwby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL25OUVRscXZQbTdudjl1Sm9WVEpQZzhXZHhwby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkZGMTcvQTQ0Q0JDN0UzMzIyMTFFQjkzQTIxNTcxRjhB
RUEyMjgvbk5RVGxxdlBtN252OXVKb1ZUSlBnOFdkeHBvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXplgk7VGr6BysGmpedUF7ZIArXEL3
TVqMbawi9uGx9GgpcZoF8Qsna4YgfR1VJ8Pnt3Bxsyan+k+LKRnvnEMqkrnigESi
c1EcMvPcPFFoehQ/r9eX0x3z+mxjCVZbvDIwupCCCwwUlpLaogQWgFXxH3lcZKh1
P5DeLuKAf/mnf226vHMcS4Z2vpVharDLpa9rPxQP33AAXVe3s4493rH4oYQ8f38D
COWJqQGsaUuUeMCdBHcGlXXcq7eJrfYqiM25hpufJK92ETijPSmwWfpzVNV+qcnx
TuRmIoF8Vr3EoZp8tGsH6W9uzW2lRdk4JNIoGjTy2xjwuH11Rhp54EL1
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:13 2024 by rpki-client on console-fra.rpki-client.org