Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          rhsq2kW+TFz4TQNqAQ1k3s5958Hjvd5BZDYJrTqQgJE=
Subject key identifier:   49:87:5B:51:23:67:A1:DD:58:98:94:59:D3:A1:E9:F1:34:63:00:D7
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       048E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          048B
Signing time:             Wed 01 May 2024 01:22:10 +0000
Manifest this update:     Wed 01 May 2024 01:22:09 +0000
Manifest next update:     Fri 03 May 2024 01:22:09 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: UIcCqt99JuFMURmL9vqJ1oU6JFfFH1x8U8VuTLDGu+A=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 03 May 2024 00:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1166 (0x48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: May  1 01:22:09 2024 GMT
            Not After : May  3 01:22:09 2024 GMT
        Subject: CN=66319942-d8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:82:ad:88:b6:bf:3c:9c:1e:df:d9:b2:10:f8:
                    e9:52:e4:4d:8a:70:93:96:2b:58:5d:db:2e:c0:df:
                    84:b4:4a:5a:38:50:d2:5b:4d:23:44:f1:c4:bf:87:
                    13:d8:ed:d1:a3:d7:38:95:1c:b6:1b:b2:01:e8:98:
                    bb:72:36:32:69:1e:60:a2:a1:8d:f5:1a:66:1e:60:
                    ea:95:72:1f:e9:22:73:f8:a8:6b:21:be:19:54:2e:
                    5d:4c:39:fb:dd:08:a2:9a:83:f6:20:b8:24:5d:e0:
                    28:67:4c:20:3b:d0:ba:4e:40:23:32:51:86:6e:4b:
                    f2:a8:ec:51:6b:99:01:83:ea:5e:6a:0a:ab:bb:f3:
                    71:fd:6c:7c:0c:c7:87:30:55:7b:a1:3b:3b:bc:8e:
                    fd:aa:7b:5b:21:93:86:a0:36:7c:91:2d:c0:1b:9a:
                    39:86:c5:90:f5:6d:ee:db:ca:f3:73:03:f1:d1:6f:
                    9d:82:f8:ae:fe:62:95:ce:bb:a1:bc:02:46:aa:e1:
                    38:50:ea:89:75:64:3b:d0:a4:4c:d7:0b:9c:c0:33:
                    ab:f4:1e:bc:19:3a:4e:87:79:e0:89:7e:e2:ab:30:
                    1b:52:71:1f:89:09:eb:b4:93:7c:a3:b0:fa:79:34:
                    35:16:6e:ae:ba:22:a8:d6:76:0f:f0:45:74:39:c9:
                    6e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:87:5B:51:23:67:A1:DD:58:98:94:59:D3:A1:E9:F1:34:63:00:D7
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:dd:40:9d:ac:e1:85:f5:f8:2b:61:87:e4:96:d6:75:c7:d0:
         12:ef:8c:1c:d1:b2:c7:4a:99:99:a1:00:45:16:33:e0:76:64:
         1e:44:08:d7:46:5a:f2:bb:f7:f2:86:32:60:93:b1:ad:20:e0:
         32:57:49:c6:95:fd:d8:91:24:91:88:7e:b5:d5:c4:0c:42:f4:
         0d:a4:b7:16:a2:b5:6b:41:d2:e7:eb:9c:d8:36:cf:16:1b:b4:
         ca:69:74:fa:6b:4e:b2:8d:b0:d2:43:8a:d3:d3:b5:54:a8:4a:
         89:e1:bb:36:9c:bb:fb:5b:44:a2:e3:d4:5e:28:d4:fc:4a:04:
         75:c1:df:99:a4:1a:2b:7a:54:d0:68:ba:01:52:fe:b8:4f:77:
         81:f2:ca:48:52:12:5e:b2:45:0d:cb:93:05:c7:74:da:d5:aa:
         9b:df:00:10:62:99:d9:f8:88:ee:0b:a6:df:d2:25:8b:01:8f:
         9d:09:b1:2b:4f:96:c0:17:d6:3c:61:84:9f:5d:0c:6c:5d:99:
         e1:b4:f2:15:3d:0a:55:f2:c7:96:c7:36:a7:08:e9:99:16:57:
         0e:ea:33:df:65:99:19:a2:bd:69:34:61:4c:6f:1e:a0:f9:da:
         bd:16:fa:0a:0c:23:c3:09:2d:d2:c1:fd:3e:b4:fd:ff:25:0f:
         13:4b:e3:a5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDREQUVBRjExMC8GA1UEBRMoNzA3QTFGMjg2QUUyOTg2REY2NDkxMEMzMDM0RTUx
ODlBN0MyMTZERDAeFw0yNDA1MDEwMTIyMDlaFw0yNDA1MDMwMTIyMDlaMBgxFjAU
BgNVBAMTDTY2MzE5OTQyLWQ4Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcgq2Itr88nB7f2bIQ+OlS5E2KcJOWK1hd2y7A34S0Slo4UNJbTSNE8cS/
hxPY7dGj1ziVHLYbsgHomLtyNjJpHmCioY31GmYeYOqVch/pInP4qGshvhlULl1M
OfvdCKKag/YguCRd4ChnTCA70LpOQCMyUYZuS/Ko7FFrmQGD6l5qCqu783H9bHwM
x4cwVXuhOzu8jv2qe1shk4agNnyRLcAbmjmGxZD1be7byvNzA/HRb52C+K7+YpXO
u6G8Akaq4ThQ6ol1ZDvQpEzXC5zAM6v0HrwZOk6HeeCJfuKrMBtScR+JCeu0k3yj
sPp5NDUWbq66IqjWdg/wRXQ5yW59AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSYdb
USNnod1YmJRZ06Hp8TRjANcwHwYDVR0jBBgwFoAUcHofKGrimG32SRDDA05RiafC
Ft0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0REFFL0Y3MUU3NjU0OTcwNDExRUJCOTM2MzczMEY4QUVBMjI4L2NIb2ZL
R3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NIb2ZLR3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDREQUUvRjcxRTc2NTQ5NzA0MTFFQkI5MzYzNzMwRjhB
RUEyMjgvY0hvZktHcmltRzMyU1JEREEwNVJpYWZDRnQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAT3UCdrOGF9fgrYYfkltZ1x9AS74wc
0bLHSpmZoQBFFjPgdmQeRAjXRlryu/fyhjJgk7GtIOAyV0nGlf3YkSSRiH611cQM
QvQNpLcWorVrQdLn65zYNs8WG7TKaXT6a06yjbDSQ4rT07VUqEqJ4bs2nLv7W0Si
49ReKNT8SgR1wd+ZpBorelTQaLoBUv64T3eB8spIUhJeskUNy5MFx3Ta1aqb3wAQ
YpnZ+IjuC6bf0iWLAY+dCbErT5bAF9Y8YYSfXQxsXZnhtPIVPQpV8seWxzanCOmZ
FlcO6jPfZZkZor1pNGFMbx6g+dq9FvoKDCPDCS3Swf0+tP3/JQ8TS+Ol
-----END CERTIFICATE-----
Generated at Wed May 1 02:46:10 2024 by rpki-client on console-ams.rpki-client.org