Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
File:                     QoqJMY5QZ92cjs9n5355xf2jeSs.mft (raw, json)
Hash identifier:          CYSbTupo4S214VSDQUOMD8w8mavqEjA6pVDMEEO8XDc=
Subject key identifier:   F3:63:26:46:4C:F2:E6:CF:37:CD:F8:51:12:FA:CB:B3:8B:4F:EA:D6
Authority key identifier: 42:8A:89:31:8E:50:67:DD:9C:8E:CF:67:E7:7E:79:C5:FD:A3:79:2B
Certificate issuer:       /CN=F3643835AF/serialNumber=428A89318E5067DD9C8ECF67E77E79C5FDA3792B
Certificate serial:       06D5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
Manifest number:          06CF
Signing time:             Thu 02 May 2024 01:04:49 +0000
Manifest this update:     Thu 02 May 2024 01:04:49 +0000
Manifest next update:     Sat 04 May 2024 01:04:49 +0000
Files and hashes:         1: QoqJMY5QZ92cjs9n5355xf2jeSs.crl (hash: RQMvJE2QDZpdLIcSexrMNx1ssyMqpbhPH7gZMEoxhzQ=)
                          2: 96F143A4E4E711E9B8915410F8AEA228.roa (hash: zm3YN7AFZ7BWxdBhPzmjQdqjaH4X6z5W4MSW9J0ipCo=)
                          3: 06790CE8E4E811E9A6E7B210F8AEA228.roa (hash: 3FK+sU9EsywdjoaV3PADXyQzo9SoU1mDVNi/r4tmF6E=)
                          4: 5E4429F4E4E711E995912310F8AEA228.roa (hash: CSKEv24WJq2rSIqhdKHY7ezulnm1GEl0XlEPfSauyvI=)
                          5: 8F85BED4D55F11E9A0A39B43F8AEA228.roa (hash: 6Uo+JJP2STlyRtTl2viFHjgVYtIrz3te0pfJXrN3Em4=)
                          6: D6CFCEFAE4E711E98D4D8510F8AEA228.roa (hash: c7DaldmCVPjpuumPlhE9K/tUWBg94JNU91iBaGrs7WA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1749 (0x6d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3643835AF/serialNumber=428A89318E5067DD9C8ECF67E77E79C5FDA3792B
        Validity
            Not Before: May  2 01:04:49 2024 GMT
            Not After : May  4 01:04:49 2024 GMT
        Subject: CN=6632e6b1-2225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:97:98:a4:ba:b0:77:d4:03:3e:5d:ef:98:
                    b7:29:b0:e8:63:a9:4a:52:5b:52:14:58:13:cc:06:
                    d5:48:83:48:19:91:d4:70:e0:2b:da:22:56:06:50:
                    da:a8:99:cc:f2:70:df:4c:32:aa:c9:f3:b2:e0:b3:
                    88:c7:37:60:51:06:9b:75:e5:b2:9f:e4:ed:a6:ae:
                    78:b6:97:f0:f5:7f:b5:26:c5:fc:90:81:50:08:10:
                    80:ba:93:87:84:ea:07:6f:77:b4:22:aa:fb:1b:3a:
                    5e:d9:53:dc:d9:34:39:bb:d9:23:50:a7:9c:a9:0c:
                    64:4f:52:1b:91:91:46:f8:8d:75:d2:52:dc:7b:ea:
                    5f:80:5e:e0:71:68:f0:84:b9:ba:72:63:61:1b:53:
                    b5:74:0e:32:58:fd:d0:91:72:aa:6c:7f:6b:d7:b6:
                    bb:1d:77:32:b0:4e:ce:c9:f6:28:2b:e9:07:76:e4:
                    fa:40:78:d0:63:4e:0d:e1:84:d1:ce:e0:c2:c9:b3:
                    17:ad:6b:a5:d1:cd:6c:25:21:7c:64:e3:e4:45:1e:
                    82:6e:e5:a0:62:d0:ea:06:ad:dc:75:ef:77:38:07:
                    82:6a:35:97:10:0e:cc:0c:20:f0:56:36:a3:01:4f:
                    ea:97:f3:40:1a:b7:2b:2c:7e:be:7b:16:58:0a:c4:
                    02:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:63:26:46:4C:F2:E6:CF:37:CD:F8:51:12:FA:CB:B3:8B:4F:EA:D6
            X509v3 Authority Key Identifier:
                keyid:42:8A:89:31:8E:50:67:DD:9C:8E:CF:67:E7:7E:79:C5:FD:A3:79:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:74:16:47:3d:ec:8a:c0:b4:a6:8f:d7:ae:ca:42:50:5c:2a:
         86:57:25:9f:fe:07:cd:e8:0b:76:38:f0:12:c0:91:39:43:67:
         16:e0:ad:aa:e0:83:eb:67:41:56:49:ea:61:55:f8:08:11:6e:
         aa:de:56:1b:bd:ac:0d:bc:72:a6:69:dc:7a:0e:b8:eb:87:3a:
         81:e7:a6:58:de:20:97:d4:17:83:1d:43:61:4c:95:cb:37:b4:
         42:20:2c:b7:0a:67:15:4f:36:48:52:64:6d:5d:45:a3:1c:62:
         5e:69:89:b8:52:c9:24:7c:73:36:ec:02:13:e3:99:3b:b1:d4:
         f6:54:5e:66:f6:c6:37:17:cd:23:e8:87:65:f3:61:08:df:5b:
         06:c0:d1:31:88:00:d5:a2:50:3d:31:87:ca:d8:38:d1:48:ee:
         29:57:23:4b:82:b4:5b:14:84:e0:91:07:c4:4d:59:aa:26:4e:
         12:da:5a:eb:6e:3a:76:40:79:9b:66:a8:0f:f1:39:68:1a:4b:
         65:0e:66:39:f3:a7:6b:d0:40:21:0f:42:7c:ea:b0:38:4f:b9:
         e3:a2:f5:c5:aa:70:3c:7f:06:99:63:07:be:75:77:1a:99:5e:
         a4:36:7c:c8:81:fb:57:95:70:ca:17:04:59:d9:44:3f:6c:9e:
         ac:2b:1d:48
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDM4MzVBRjExMC8GA1UEBRMoNDI4QTg5MzE4RTUwNjdERDlDOEVDRjY3RTc3RTc5
QzVGREEzNzkyQjAeFw0yNDA1MDIwMTA0NDlaFw0yNDA1MDQwMTA0NDlaMBgxFjAU
BgNVBAMTDTY2MzJlNmIxLTIyMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQs5eYpLqwd9QDPl3vmLcpsOhjqUpSW1IUWBPMBtVIg0gZkdRw4CvaIlYG
UNqomczycN9MMqrJ87Lgs4jHN2BRBpt15bKf5O2mrni2l/D1f7UmxfyQgVAIEIC6
k4eE6gdvd7QiqvsbOl7ZU9zZNDm72SNQp5ypDGRPUhuRkUb4jXXSUtx76l+AXuBx
aPCEubpyY2EbU7V0DjJY/dCRcqpsf2vXtrsddzKwTs7J9igr6Qd25PpAeNBjTg3h
hNHO4MLJsxeta6XRzWwlIXxk4+RFHoJu5aBi0OoGrdx173c4B4JqNZcQDswMIPBW
NqMBT+qX80Aatyssfr57FlgKxAJ3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU82Mm
Rkzy5s83zfhREvrLs4tP6tYwHwYDVR0jBBgwFoAUQoqJMY5QZ92cjs9n5355xf2j
eSswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzODM1L0Q1Qjk5NEE4RDU1RTExRTlCNzU3MTA0M0Y4QUVBMjI4L1FvcUpN
WTVRWjkyY2pzOW41MzU1eGYyamVTcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FvcUpNWTVRWjkyY2pzOW41MzU1eGYyamVTcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDM4MzUvRDVCOTk0QThENTVFMTFFOUI3NTcxMDQzRjhB
RUEyMjgvUW9xSk1ZNVFaOTJjanM5bjUzNTV4ZjJqZVNzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxdBZHPeyKwLSmj9euykJQXCqGVyWf
/gfN6At2OPASwJE5Q2cW4K2q4IPrZ0FWSephVfgIEW6q3lYbvawNvHKmadx6Drjr
hzqB56ZY3iCX1BeDHUNhTJXLN7RCICy3CmcVTzZIUmRtXUWjHGJeaYm4UskkfHM2
7AIT45k7sdT2VF5m9sY3F80j6Idl82EI31sGwNExiADVolA9MYfK2DjRSO4pVyNL
grRbFITgkQfETVmqJk4S2lrrbjp2QHmbZqgP8TloGktlDmY586dr0EAhD0J86rA4
T7njovXFqnA8fwaZYwe+dXcamV6kNnzIgftXlXDKFwRZ2UQ/bJ6sKx1I
-----END CERTIFICATE-----
Generated at Thu May 2 04:03:37 2024 by rpki-client on console-fra.rpki-client.org