Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
File:                     jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft (raw, json)
Hash identifier:          YVpEGUsbvHw87Kpf+c8+rV8jyzMhj78Wamh0yD0G1Jc=
Subject key identifier:   72:8F:73:92:8C:C9:FC:4A:DD:E8:54:74:04:E2:74:03:E9:57:0A:4C
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Certificate issuer:       /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial:       0E60
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
Manifest number:          0DFF
Signing time:             Tue 25 Jun 2024 00:35:12 +0000
Manifest this update:     Tue 25 Jun 2024 00:35:11 +0000
Manifest next update:     Thu 27 Jun 2024 00:35:11 +0000
Files and hashes:         1: jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl (hash: NWtUScHjDgi+KjPZgzq9LDUXNfguvbYBGNtty5t0E5A=)
                          2: 9197D976A12811EDAC9FF6E5F1222468.roa (hash: 8I9I8vbvMsUG+4z3fIfY+KU6Y52YPL2nZp2iOUDsfFg=)
                          3: 765417BC1D2E11ECAAEDBE7DD8A014CE.roa (hash: 5WWbRjD6pDmOSLHf/PFuJbjWXS0clYQDxfYvXXSTerE=)
                          4: 6CA06204A12911EDA95084E8F1222468.roa (hash: B3MLucWl52HaPisX4myUBfeTvIS+UfC3YFpOg0QZL0c=)
                          5: E1DC4648A12711EDA25615E4F1222468.roa (hash: p52WGMg4vphoUXgIjwgTMc5aIhKT7WXQ3LP5Iv3CEuo=)
                          6: 12DABEF21D2E11ECBCBC137DD8A014CE.roa (hash: tDj4uKwJSrFzOnsYHLFZ7vzy5fUR6KImcfVzMv0D2po=)
                          7: A5A4503A93DA11ED8E391690F1222468.roa (hash: ySjl0UDkIARejGhei4KzMEdBPcVin4Zh1NL5myY+3Kk=)
                          8: 342561F474AE11EAA9987F43F8AEA228.roa (hash: Y2Btzl10X7fiZfNzxGxyn6744v2/Ww/4qELzIXTfjgU=)
                          9: 70995F103F1C11EDA979E6D3F1222468.roa (hash: fvZzd6V8viI4ax/8PEugm7fwwO/auDkznM5WO/SuDvU=)
                          10: F87528A6A12811EDB5D240E7F1222468.roa (hash: vHYExMtQIEcTE0uFspL7BR88kLFQ8kCFxteexWuEzOY=)
                          11: C3FA6B6693D811EDB97B6F8BF1222468.roa (hash: 21i4HRSeRUN5cxRqwY5/w9zdVxvnSqwp1Amz3DL/gW0=)
                          12: 41260B7AA12811EDBC2E43E5F1222468.roa (hash: UsudKW8ggEByg442sH8KfbmQS8Wkjp97HkUNC0eC6B4=)
                          13: 0837CF6293D911ED8388138CF1222468.roa (hash: dykJ+gUPvSBQPyyDRhwioZtmgpWlaPh9itkwUzmas84=)
                          14: B3287F00435611EB90244384F8AEA228.roa (hash: SlsmD7iX8RbuxhgHGmwpNw7Dejp7k6rpgCZBpXxG1IQ=)
                          15: ADC9EADA3F1C11EDB4A666D4F1222468.roa (hash: zf+HF4m1hIRsrWAg5uKQM4omEAgOT8hMHJdYMUftl0Q=)
                          16: 20A24EFC93DD11EDA6760996F1222468.roa (hash: 0gjhKZEga0GHpw3rTSTf/B5t+TBRrTywPRuXfAT6Utw=)
                          17: AF78092A333C11EDA5A408E9F1222468.roa (hash: E3/f7D5E8D5/pNbbRfu3LfUAHueGwmD0q/WRKgWbj5o=)
                          18: F4E6D36E93DC11EDB3C88F95F1222468.roa (hash: OTf5sFd+9zzQ+J7wDsq5yKqjr9tKTPDrLVxlMedHBWs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 27 Jun 2024 00:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3680 (0xe60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
        Validity
            Not Before: Jun 25 00:35:11 2024 GMT
            Not After : Jun 27 00:35:11 2024 GMT
        Subject: CN=667a10c0-7034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:63:5b:d5:30:9d:49:ea:41:e1:e0:71:0b:be:
                    b7:fe:4a:f6:a1:2f:7f:8d:68:5f:dc:1e:a3:f9:15:
                    05:ee:51:21:4d:e5:1c:00:d2:93:b2:26:d1:62:fb:
                    53:2f:f1:22:02:17:65:71:a9:fd:41:6e:47:05:34:
                    f9:5d:2e:cf:82:e5:fe:5e:3f:4d:7f:14:29:85:fa:
                    fb:22:d0:9b:79:67:6e:d4:d2:50:9f:eb:08:42:11:
                    b8:22:d6:07:35:4d:94:15:03:a9:d9:2d:ad:8b:c7:
                    60:48:b1:7c:e3:83:ab:5f:02:43:48:72:f5:16:27:
                    bd:35:f9:7c:d7:82:5d:ae:07:83:75:b3:33:c4:11:
                    b8:1c:d5:82:21:df:e6:8a:de:df:c7:5c:88:7e:1f:
                    b7:cd:38:2c:ec:50:ff:2f:71:44:48:e3:65:d4:3a:
                    27:30:91:05:8a:e4:8b:cc:d5:a5:ab:42:6e:82:ed:
                    f5:5d:5b:99:d4:ff:6f:03:e5:a3:b3:dd:3a:71:51:
                    74:80:7c:63:58:64:98:aa:c7:e5:04:f8:d0:12:68:
                    83:32:ec:25:1c:fb:a3:76:41:35:ce:a9:48:f5:58:
                    32:21:e5:48:3d:ae:df:23:e7:c4:f2:49:f3:0d:05:
                    a6:9d:e6:e0:d1:45:ca:ad:12:7e:8b:a5:b9:8b:55:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8F:73:92:8C:C9:FC:4A:DD:E8:54:74:04:E2:74:03:E9:57:0A:4C
            X509v3 Authority Key Identifier:
                keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:68:7c:5b:82:21:be:25:65:25:40:4f:6a:c5:52:68:f0:69:
         9d:1c:78:18:35:01:73:57:11:b6:eb:0c:a1:28:56:9b:0f:a6:
         e9:31:6d:e9:a0:7d:38:d1:09:ea:7d:cb:3a:0a:3a:ea:67:8c:
         93:b5:d1:1e:3c:01:35:f5:89:15:b6:a6:c5:18:dc:fc:76:d9:
         84:60:94:ac:c4:94:a1:f7:0a:9f:0d:fa:30:8a:ff:4c:fe:18:
         0f:54:09:76:67:b1:46:bd:c1:1b:36:f5:b7:53:70:26:cc:f0:
         d3:9f:e5:87:7b:db:a3:69:c5:8e:d9:bb:a6:eb:43:b1:45:02:
         5e:32:30:9a:1c:b8:07:91:ef:95:0b:f4:24:63:87:cc:7d:97:
         db:e7:97:97:2e:18:a7:a1:b5:f4:af:23:45:60:26:6c:80:ac:
         3e:8f:cd:8f:44:0f:fe:c2:8a:e9:5c:f3:67:b6:18:b2:ff:b2:
         d6:d5:3d:ed:ab:ca:f3:c5:ae:9e:d6:91:fd:23:23:b8:ce:61:
         a0:d2:a0:a3:00:72:dc:60:a5:cc:3e:f4:26:18:eb:26:9e:9e:
         8b:4e:5c:34:e2:b7:c8:ba:0e:77:e1:63:56:e3:b3:e4:a9:c4:
         06:04:02:83:29:d6:99:e5:da:ed:05:f9:a9:59:c5:c7:26:ab:
         62:22:bc:8f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDmAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzREMjJBRjExMC8GA1UEBRMoOEQwMUQ4MDhFODk3NzQ1NDNERTIyRDBEQTg0NDM3
OEVDRUE4QkI5QjAeFw0yNDA2MjUwMDM1MTFaFw0yNDA2MjcwMDM1MTFaMBgxFjAU
BgNVBAMTDTY2N2ExMGMwLTcwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCZY1vVMJ1J6kHh4HELvrf+SvahL3+NaF/cHqP5FQXuUSFN5RwA0pOyJtFi
+1Mv8SICF2Vxqf1BbkcFNPldLs+C5f5eP01/FCmF+vsi0Jt5Z27U0lCf6whCEbgi
1gc1TZQVA6nZLa2Lx2BIsXzjg6tfAkNIcvUWJ701+XzXgl2uB4N1szPEEbgc1YIh
3+aK3t/HXIh+H7fNOCzsUP8vcURI42XUOicwkQWK5IvM1aWrQm6C7fVdW5nU/28D
5aOz3TpxUXSAfGNYZJiqx+UE+NASaIMy7CUc+6N2QTXOqUj1WDIh5Ug9rt8j58Ty
SfMNBaad5uDRRcqtEn6LpbmLVbIzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUco9z
kozJ/Erd6FR0BOJ0A+lXCkwwHwYDVR0jBBgwFoAUjQHYCOiXdFQ94i0NqEQ3js6o
u5swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM0RDIyLzFENUY3QzI2MDQ3MzExRTU4MEMxOEEwNkY4QUVBMjI4L2pRSFlD
T2lYZEZROTRpME5xRVEzanM2b3U1cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pRSFlDT2lYZEZROTRpME5xRVEzanM2b3U1cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzREMjIvMUQ1RjdDMjYwNDczMTFFNTgwQzE4QTA2RjhB
RUEyMjgvalFIWUNPaVhkRlE5NGkwTnFFUTNqczZvdTVzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/aHxbgiG+JWUlQE9qxVJo8GmdHHgY
NQFzVxG26wyhKFabD6bpMW3poH040Qnqfcs6CjrqZ4yTtdEePAE19YkVtqbFGNz8
dtmEYJSsxJSh9wqfDfowiv9M/hgPVAl2Z7FGvcEbNvW3U3AmzPDTn+WHe9ujacWO
2bum60OxRQJeMjCaHLgHke+VC/QkY4fMfZfb55eXLhinobX0ryNFYCZsgKw+j82P
RA/+worpXPNnthiy/7LW1T3tq8rzxa6e1pH9IyO4zmGg0qCjAHLcYKXMPvQmGOsm
np6LTlw04rfIug534WNW47PkqcQGBAKDKdaZ5drtBfmpWcXHJqtiIryP
-----END CERTIFICATE-----
Generated at Tue Jun 25 02:52:14 2024 by rpki-client on console-fra.rpki-client.org