Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
File:                     QVvN73HfdO_cZVY4QJM9lPIraRM.mft (raw, json)
Hash identifier:          fBWPlZiyQUtsTRCheUQMuY/MlvTHQJedUpYk9HIOSqY=
Subject key identifier:   8C:E0:A6:5E:83:5C:96:3A:B0:D3:5B:1B:84:A4:58:D4:A6:60:B5:97
Authority key identifier: 41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13
Certificate issuer:       /CN=F36374C9AR/serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
Certificate serial:       0C7A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
Manifest number:          0C79
Signing time:             Sun 16 Feb 2025 00:57:31 +0000
Manifest this update:     Sun 16 Feb 2025 00:57:31 +0000
Manifest next update:     Tue 18 Feb 2025 00:57:31 +0000
Files and hashes:         1: QVvN73HfdO_cZVY4QJM9lPIraRM.crl (hash: DYpkytyRXSfeb7w2eX7K/gAwIvNJJtFIa+miJtcVdDI=)
                          2: A3321ED8542E11E6BE4E521EF8AEA228.roa (hash: sJ9cmmKEMJXtaW4GTF37G3rJicRaTpT/POSsPQBapsQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                          rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3194 (0xc7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36374C9AR
        Validity
            Not Before: Feb 16 00:57:31 2025 GMT
            Not After : Feb 18 00:57:31 2025 GMT
        Subject: CN=67b137fb-3fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:5d:96:d6:24:26:4e:95:ce:d5:4c:ba:ab:
                    9a:3d:7e:76:82:a9:0c:f6:e9:fa:94:f3:cd:43:67:
                    a0:9e:a8:6d:ba:1c:6a:17:d4:f7:66:62:69:b8:40:
                    8b:4d:24:81:34:18:ee:b2:c3:07:61:cd:65:86:95:
                    80:46:b2:c8:e1:10:25:ae:7f:8c:b0:6e:4b:77:15:
                    d0:82:25:75:a7:5c:cb:bc:49:56:d5:1c:52:98:6a:
                    cb:cb:28:c0:d8:76:ac:a6:ea:3b:fe:f5:91:71:fc:
                    0c:29:c4:9f:95:00:5d:bd:33:c6:e0:b1:89:ec:5d:
                    44:7d:c3:6b:52:61:e4:1d:b4:21:98:bc:56:7f:c1:
                    0f:e6:74:ff:6c:2f:5f:c4:be:90:4a:32:25:ea:90:
                    1d:36:17:6c:8e:c4:03:b9:1b:f0:52:b6:6b:e5:a4:
                    23:40:de:1c:c0:d3:80:3b:89:f2:28:8b:1d:37:18:
                    ab:67:b6:ea:33:da:be:be:d9:87:9c:06:44:fd:3a:
                    27:3e:d7:51:74:b9:7f:23:4d:c7:80:82:86:3b:a1:
                    12:02:80:a4:64:54:d1:57:6a:68:33:05:f6:17:6c:
                    57:0b:e3:d4:d3:ac:f3:5c:96:24:aa:38:db:2e:88:
                    fe:fc:cd:d6:ea:cd:ab:66:77:26:c2:ff:52:43:7b:
                    10:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E0:A6:5E:83:5C:96:3A:B0:D3:5B:1B:84:A4:58:D4:A6:60:B5:97
            X509v3 Authority Key Identifier:
                keyid:41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ed:81:a2:ac:9a:39:f5:c8:89:f4:5a:f4:14:24:8a:97:84:
         e4:ef:1a:71:a7:37:01:fe:50:4b:03:20:8b:de:19:f3:79:6a:
         21:83:6d:60:e9:ef:c4:7f:05:23:7f:3f:41:1c:77:3b:08:bc:
         b9:8e:34:09:0c:c9:de:7c:d5:5c:23:8d:4e:65:0c:29:d4:ac:
         51:cb:9e:82:be:dc:70:59:3b:33:f2:bc:2b:3c:92:9e:92:3d:
         90:fe:fb:59:d3:b8:2d:d6:a8:ab:75:b3:65:b5:7d:1e:4f:d6:
         8e:1d:93:ae:bf:bb:7d:69:56:d2:dd:b2:53:82:02:4a:8d:7a:
         f7:96:f9:7b:7e:bb:07:4a:c9:9d:87:1a:c8:2f:7a:fa:4f:f7:
         0c:a2:b9:f0:82:f5:2d:b3:5e:a8:64:61:9e:c5:c1:1e:62:23:
         74:29:de:07:10:89:6e:ea:bd:e2:f8:43:52:15:e2:0e:84:96:
         e7:e2:2e:55:6c:88:54:b3:e0:77:aa:3f:49:b1:a5:1f:b2:7d:
         67:59:45:ef:d3:f4:d3:51:28:ea:6c:99:47:16:c4:4c:1d:11:
         33:cd:b9:47:01:e1:71:a1:33:9d:73:d3:2d:2f:b4:37:c9:54:
         a7:dc:f4:62:2d:cb:f3:96:00:ea:89:7d:1e:75:ad:62:6f:81:
         c8:b4:8e:97
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDHowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Mzc0QzlBUjExMC8GA1UEBRMoNDE1QkNERUY3MURGNzRFRkRDNjU1NjM4NDA5MzNE
OTRGMjJCNjkxMzAeFw0yNTAyMTYwMDU3MzFaFw0yNTAyMTgwMDU3MzFaMBgxFjAU
BgNVBAMTDTY3YjEzN2ZiLTNmYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCo3F2W1iQmTpXO1Uy6q5o9fnaCqQz26fqU881DZ6CeqG26HGoX1PdmYmm4
QItNJIE0GO6ywwdhzWWGlYBGssjhECWuf4ywbkt3FdCCJXWnXMu8SVbVHFKYasvL
KMDYdqym6jv+9ZFx/AwpxJ+VAF29M8bgsYnsXUR9w2tSYeQdtCGYvFZ/wQ/mdP9s
L1/EvpBKMiXqkB02F2yOxAO5G/BStmvlpCNA3hzA04A7ifIoix03GKtntuoz2r6+
2YecBkT9Oic+11F0uX8jTceAgoY7oRICgKRkVNFXamgzBfYXbFcL49TTrPNcliSq
ONsuiP78zdbqzatmdybC/1JDexDLAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUjOCm
XoNcljqw01sbhKRY1KZgtZcwHwYDVR0jBBgwFoAUQVvN73HfdO/cZVY4QJM9lPIr
aRMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM3NEM5LzUwMjRERTQyNTQyRTExRTZCOEJFMDcxRUY4QUVBMjI4L1FWdk43
M0hmZE9fY1pWWTRRSk05bFBJcmFSTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1FWdk43M0hmZE9fY1pWWTRRSk05bFBJcmFSTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Mzc0QzkvNTAyNERFNDI1NDJFMTFFNkI4QkUwNzFFRjhBRUEy
MjgvUVZ2TjczSGZkT19jWlZZNFFKTTlsUElyYVJNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCv7YGirJo59ciJ9Fr0FCSKl4Tk7xpxpzcB
/lBLAyCL3hnzeWohg21g6e/EfwUjfz9BHHc7CLy5jjQJDMnefNVcI41OZQwp1KxR
y56CvtxwWTsz8rwrPJKekj2Q/vtZ07gt1qirdbNltX0eT9aOHZOuv7t9aVbS3bJT
ggJKjXr3lvl7frsHSsmdhxrIL3r6T/cMornwgvUts16oZGGexcEeYiN0Kd4HEIlu
6r3i+ENSFeIOhJbn4i5VbIhUs+B3qj9JsaUfsn1nWUXv0/TTUSjqbJlHFsRMHREz
zblHAeFxoTOdc9MtL7Q3yVSn3PRiLcvzlgDqiX0eda1ib4HItI6X
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:43 2025 by rpki-client