Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
File:                     iO95xkHBXokYHnKdSKj-bnPOJac.mft (raw, json)
Hash identifier:          aNpnRs5H4NEGw9q/orBjZw0A0BLkldhm4M5ISGL8Q0w=
Subject key identifier:   B4:0D:62:1A:00:F0:6C:9F:94:1B:C8:AD:38:5E:39:4B:50:61:F2:FA
Authority key identifier: 88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
Certificate issuer:       /CN=F363C396AF/serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Certificate serial:       98
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
Manifest number:          97
Signing time:             Wed 23 Oct 2024 02:49:11 +0000
Manifest this update:     Wed 23 Oct 2024 02:49:10 +0000
Manifest next update:     Fri 25 Oct 2024 02:49:10 +0000
Files and hashes:         1: iO95xkHBXokYHnKdSKj-bnPOJac.crl (hash: aJPdFhB7NIWmqC1tClKFxJQ9fp2TKWYqgAN/FBaGkw4=)
                          2: AB00E3321E9D11EFAD20E30A7DDC24C2.roa (hash: jczqBl4rLfWV3D8zqP6XHofdCAQZu3xZe0wHy+hc42o=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C396AF/serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
        Validity
            Not Before: Oct 23 02:49:10 2024 GMT
            Not After : Oct 25 02:49:10 2024 GMT
        Subject: CN=67186427-0cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:65:37:60:e2:df:d0:90:c9:dd:82:77:76:
                    d7:fe:a4:1c:b8:ed:09:82:ca:99:dd:de:93:3e:25:
                    f5:09:dd:7b:83:1a:08:ba:61:fc:fe:05:99:9b:9a:
                    39:af:83:cb:55:5e:e0:8d:eb:f1:c8:85:3c:7d:67:
                    c1:4e:62:ea:a0:dd:de:b5:ff:a8:92:bd:2b:b6:19:
                    db:0b:b0:6d:25:d4:10:8e:78:d1:aa:c5:e3:d0:30:
                    c3:f0:2c:da:05:21:09:93:18:3a:27:f4:10:6a:30:
                    85:f6:56:9e:59:0e:dd:67:56:89:ec:c0:f2:5a:aa:
                    ae:2a:0e:34:b6:dd:dd:50:a4:0f:79:70:5a:94:08:
                    5a:cf:c2:6e:f1:37:00:e0:cc:ea:66:eb:6f:b3:15:
                    5b:83:a7:4c:3a:19:54:f8:bc:b2:db:df:87:a1:f3:
                    da:d1:9c:7b:90:f7:de:77:c1:8c:ee:d2:3a:0f:a0:
                    8b:a0:73:74:cf:7d:62:2f:5c:49:9e:d2:35:fb:d9:
                    db:fa:8b:0a:a3:8b:b5:b1:fd:ca:d0:14:6b:0b:0f:
                    d6:45:86:a3:88:9b:3e:f6:f0:66:37:a0:98:f5:40:
                    b6:8e:e6:9d:14:0c:22:d1:53:fc:4b:83:5f:8a:89:
                    78:09:8f:de:0d:00:65:37:85:fb:a7:de:90:8f:3a:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0D:62:1A:00:F0:6C:9F:94:1B:C8:AD:38:5E:39:4B:50:61:F2:FA
            X509v3 Authority Key Identifier:
                keyid:88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c3:b3:e7:f8:c5:ca:16:ef:7c:7b:df:fa:f8:d5:72:c7:06:
         9c:67:11:d8:30:b3:ed:6c:fa:a8:03:6c:4e:98:f6:cf:ae:8b:
         3e:8b:c1:1f:94:fe:61:b4:fc:9e:8f:37:10:f9:42:99:82:7e:
         7a:64:12:2e:ee:06:c0:fc:28:3d:65:67:2a:3b:89:eb:08:57:
         b2:b7:19:54:d9:f9:2d:04:7e:fe:82:3b:aa:1c:44:f2:b7:e7:
         46:51:4d:33:35:50:01:10:8e:a7:3a:f6:52:53:b7:ec:3c:8e:
         1b:15:79:8f:f2:ee:7f:cc:fe:60:fe:6a:ea:5d:15:bb:d9:d7:
         37:e2:8b:38:76:da:6b:d6:ce:93:25:14:74:08:71:c3:e3:18:
         37:d4:e7:09:57:a2:65:71:ca:ef:cb:2a:25:2c:89:40:89:f1:
         8b:c1:42:07:c5:1c:de:41:97:ff:e5:48:c5:1a:f5:f5:6d:e7:
         2b:ac:a3:e0:ed:f1:48:df:4f:61:f5:51:b8:20:ab:d8:24:38:
         07:a9:cf:ce:8b:a8:f8:36:82:ad:19:86:60:6f:17:1a:f6:ac:
         8a:6d:c7:35:50:86:08:ca:3e:bf:70:75:b2:2d:b4:28:18:7a:
         23:a6:7c:52:50:93:8c:f5:d8:f0:fe:97:2a:54:21:0e:8a:aa:
         4e:d5:96:9d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0MzOTZBRjExMC8GA1UEBRMoODhFRjc5QzY0MUMxNUU4OTE4MUU3MjlENDhBOEZF
NkU3M0NFMjVBNzAeFw0yNDEwMjMwMjQ5MTBaFw0yNDEwMjUwMjQ5MTBaMBgxFjAU
BgNVBAMTDTY3MTg2NDI3LTBjYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFmGU3YOLf0JDJ3YJ3dtf+pBy47QmCypnd3pM+JfUJ3XuDGgi6Yfz+BZmb
mjmvg8tVXuCN6/HIhTx9Z8FOYuqg3d61/6iSvSu2GdsLsG0l1BCOeNGqxePQMMPw
LNoFIQmTGDon9BBqMIX2Vp5ZDt1nVonswPJaqq4qDjS23d1QpA95cFqUCFrPwm7x
NwDgzOpm62+zFVuDp0w6GVT4vLLb34eh89rRnHuQ9953wYzu0joPoIugc3TPfWIv
XEme0jX72dv6iwqji7Wx/crQFGsLD9ZFhqOImz728GY3oJj1QLaO5p0UDCLRU/xL
g1+KiXgJj94NAGU3hfun3pCPOimPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUtA1i
GgDwbJ+UG8itOF45S1Bh8vowHwYDVR0jBBgwFoAUiO95xkHBXokYHnKdSKj+bnPO
JacwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNDMzk2L0NBRTBENEQ4MUU5QzExRUZCQ0ExQTQyMjdEREMyNEMyL2lPOTV4
a0hCWG9rWUhuS2RTS2otYm5QT0phYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2lPOTV4a0hCWG9rWUhuS2RTS2otYm5QT0phYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0MzOTYvQ0FFMEQ0RDgxRTlDMTFFRkJDQTFBNDIyN0RE
QzI0QzIvaU85NXhrSEJYb2tZSG5LZFNLai1iblBPSmFjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdw7Pn+MXKFu98e9/6+NVyxwacZxHY
MLPtbPqoA2xOmPbPros+i8EflP5htPyejzcQ+UKZgn56ZBIu7gbA/Cg9ZWcqO4nr
CFeytxlU2fktBH7+gjuqHETyt+dGUU0zNVABEI6nOvZSU7fsPI4bFXmP8u5/zP5g
/mrqXRW72dc34os4dtpr1s6TJRR0CHHD4xg31OcJV6JlccrvyyolLIlAifGLwUIH
xRzeQZf/5UjFGvX1becrrKPg7fFI309h9VG4IKvYJDgHqc/Oi6j4NoKtGYZgbxca
9qyKbcc1UIYIyj6/cHWyLbQoGHojpnxSUJOM9djw/pcqVCEOiqpO1Zad
-----END CERTIFICATE-----
Generated at Wed Oct 23 04:41:11 2024 by rpki-client on console-ams.rpki-client.org