Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
File:                     ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft (raw, json)
Hash identifier:          MbZLlRueawJTkDq9Ful9cd3BiSeKIMO1vuYCk3t/+iQ=
Subject key identifier:   C0:70:9A:E5:95:4A:BD:75:24:C8:5A:09:7D:CF:C0:6A:E7:C5:9E:FB
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Certificate issuer:       /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial:       0253
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
Manifest number:          0252
Signing time:             Fri 03 May 2024 02:01:59 +0000
Manifest this update:     Fri 03 May 2024 02:01:58 +0000
Manifest next update:     Sun 05 May 2024 02:01:58 +0000
Files and hashes:         1: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl (hash: VSWpVXqg2vShibrxY6e1wsD54XT6nKzeCeOWOjaPjPs=)
                          2: 1A49A96A7AC911ED812AA695F1222468.roa (hash: ETAi2jqzRi0+AxwIwLa8K/gDxbVP7M/q9PlBlPYnPkY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                          rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
        Validity
            Not Before: May  3 02:01:58 2024 GMT
            Not After : May  5 02:01:58 2024 GMT
        Subject: CN=66344596-e518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:33:1e:e8:2a:76:e2:ab:15:f6:39:de:5a:
                    96:ff:ac:74:e1:f3:2e:29:58:a4:d1:50:45:a5:f8:
                    b8:2a:af:a4:79:a0:6e:ed:d9:47:c0:cf:31:76:74:
                    3f:76:8d:38:45:e4:93:8e:d3:4b:cf:9f:32:92:91:
                    5c:54:8a:61:5f:22:95:70:5c:99:dc:6b:14:1b:30:
                    fd:3a:8f:5e:a4:58:4b:cb:79:84:85:bd:de:07:ac:
                    e6:c2:f4:35:18:f3:1f:d8:6c:65:ad:1a:f3:a8:4e:
                    ad:67:69:4a:a3:ff:11:86:a2:51:dd:5c:b8:c7:58:
                    b2:dc:89:55:0c:e5:4d:ed:9b:a6:7a:1e:b3:0b:82:
                    4d:1f:b1:53:3a:57:98:85:1d:76:a0:55:f4:94:4d:
                    dc:13:52:8d:3e:5f:ce:16:fc:ed:45:11:a8:1e:fd:
                    b6:c5:be:35:99:ce:30:3a:87:40:60:ef:86:ec:b1:
                    76:6c:df:7a:dc:46:42:bd:5f:8c:1e:12:93:c1:1a:
                    2e:a4:b4:32:a8:1e:b3:59:bd:01:31:e3:ad:3f:2c:
                    cf:55:7c:d1:54:35:2f:70:aa:d7:61:79:9e:a1:32:
                    71:3e:02:c2:98:30:27:c9:05:11:d4:c3:ba:5a:d5:
                    d3:17:01:39:97:05:42:18:93:f3:da:2f:96:29:d5:
                    5e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:70:9A:E5:95:4A:BD:75:24:C8:5A:09:7D:CF:C0:6A:E7:C5:9E:FB
            X509v3 Authority Key Identifier:
                keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b4:3c:5c:94:f8:34:40:86:2c:ab:4b:45:90:af:75:cc:c1:
         af:f3:10:ba:aa:73:ae:6c:7d:41:48:06:26:9f:f5:c2:bc:73:
         80:c2:ba:ce:01:d7:06:17:34:8b:18:92:c8:c7:c6:45:61:02:
         58:15:d8:b3:a5:5b:46:10:37:68:d5:61:ec:82:6e:b4:43:c7:
         01:c0:e5:ac:eb:32:2b:4e:8c:64:4b:40:ee:8e:9f:51:43:1e:
         64:f1:02:3e:9a:1a:84:1e:ff:14:ca:8c:49:8c:c9:69:f0:f7:
         b3:4f:97:1c:03:58:66:e2:17:51:1f:c4:15:33:cf:c7:f9:e3:
         23:14:16:5d:9e:50:72:6a:09:f4:72:46:c0:e4:4f:3a:ad:f8:
         c5:ba:61:a4:62:06:c4:c6:c1:e6:f5:3a:ba:a1:d2:62:f8:25:
         6c:0d:b0:6f:73:bd:e3:f7:f7:d3:fc:fc:3c:88:34:4f:ae:75:
         5e:4b:78:c2:0d:50:df:45:f3:39:99:8a:35:57:64:e7:de:4c:
         4e:4b:f9:0c:8c:5c:6b:90:a4:d1:fd:6c:68:82:02:c9:3c:83:
         d4:a4:74:5a:95:a9:27:81:13:27:05:aa:18:5a:33:b6:0a:2b:
         74:bf:5f:5e:ed:51:ce:69:f3:b0:95:2b:87:65:4f:a9:43:5b:
         72:88:16:00
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzIxNTlBUjExMC8GA1UEBRMoNjcyMUExOTJGQ0ZEMjYxQTc3QzFDRERDNDc4OTFD
NzgxNEZBQzc3NzAeFw0yNDA1MDMwMjAxNThaFw0yNDA1MDUwMjAxNThaMBgxFjAU
BgNVBAMTDTY2MzQ0NTk2LWU1MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8nzMe6Cp24qsV9jneWpb/rHTh8y4pWKTRUEWl+Lgqr6R5oG7t2UfAzzF2
dD92jThF5JOO00vPnzKSkVxUimFfIpVwXJncaxQbMP06j16kWEvLeYSFvd4HrObC
9DUY8x/YbGWtGvOoTq1naUqj/xGGolHdXLjHWLLciVUM5U3tm6Z6HrMLgk0fsVM6
V5iFHXagVfSUTdwTUo0+X84W/O1FEage/bbFvjWZzjA6h0Bg74bssXZs33rcRkK9
X4weEpPBGi6ktDKoHrNZvQEx460/LM9VfNFUNS9wqtdheZ6hMnE+AsKYMCfJBRHU
w7pa1dMXATmXBUIYk/PaL5Yp1V7nAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUwHCa
5ZVKvXUkyFoJfc/AaufFnvswHwYDVR0jBBgwFoAUZyGhkvz9Jhp3wc3cR4kceBT6
x3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMyMTU5LzhBMEE1QUU4NEFCQzExRURBQ0ZEMzE4NEYxMjIyNDY4L1p5R2hr
dno5SmhwM3djM2NSNGtjZUJUNngzYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1p5R2hrdno5SmhwM3djM2NSNGtjZUJUNngzYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MzIxNTkvOEEwQTVBRTg0QUJDMTFFREFDRkQzMTg0RjEyMjI0
NjgvWnlHaGt2ejlKaHAzd2MzY1I0a2NlQlQ2eDNjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxtDxclPg0QIYsq0tFkK91zMGv8xC6qnOu
bH1BSAYmn/XCvHOAwrrOAdcGFzSLGJLIx8ZFYQJYFdizpVtGEDdo1WHsgm60Q8cB
wOWs6zIrToxkS0Dujp9RQx5k8QI+mhqEHv8UyoxJjMlp8PezT5ccA1hm4hdRH8QV
M8/H+eMjFBZdnlByagn0ckbA5E86rfjFumGkYgbExsHm9Tq6odJi+CVsDbBvc73j
9/fT/Pw8iDRPrnVeS3jCDVDfRfM5mYo1V2Tn3kxOS/kMjFxrkKTR/WxoggLJPIPU
pHRalakngRMnBaoYWjO2Cit0v19e7VHOafOwlSuHZU+pQ1tyiBYA
-----END CERTIFICATE-----
Generated at Fri May 3 03:10:06 2024 by rpki-client on console-ams.rpki-client.org