Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
File:                     s4rg2ENn30CCL75YUHD2mDzRgFk.mft (raw, json)
Hash identifier:          ncH23QP5WAct26dYr14FTkL/hSGk68+nMfw1oxBOLDE=
Subject key identifier:   7C:A6:A5:E3:9E:08:70:A0:2E:18:E9:DE:33:0F:C2:F7:E4:3A:49:67
Authority key identifier: B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
Certificate issuer:       /CN=F3645590AR/serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
Certificate serial:       85
Authority info access:    rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
Manifest number:          84
Signing time:             Thu 17 Oct 2024 02:43:13 +0000
Manifest this update:     Thu 17 Oct 2024 02:43:13 +0000
Manifest next update:     Sat 19 Oct 2024 02:43:13 +0000
Files and hashes:         1: s4rg2ENn30CCL75YUHD2mDzRgFk.crl (hash: x/keAGTv05IMkgomvngHUzL4fVOGMstDVWHNKZdvfsA=)
                          2: 0630E34C27F911EF99C5B7167DDC24C2.roa (hash: u1Kgum9/rIa3gu9tEpPcpHBCjsDs7Hpw84FU4EIS7uY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                          rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Oct 2024 00:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AR/serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
        Validity
            Not Before: Oct 17 02:43:13 2024 GMT
            Not After : Oct 19 02:43:13 2024 GMT
        Subject: CN=671079c1-5082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cb:34:98:1a:18:6a:e5:e3:ae:18:02:2b:ef:
                    6c:93:96:3d:8f:79:5a:02:3d:00:5b:f9:a0:88:1e:
                    ed:10:98:3e:8c:f4:84:87:57:a9:00:21:28:a3:f0:
                    ff:0d:89:af:99:42:fb:4e:b6:5b:f7:12:e5:b0:ec:
                    a7:58:68:8d:55:bf:71:84:16:e3:ae:97:61:27:93:
                    bf:6c:13:1e:32:fc:90:a4:e1:0d:82:7c:cc:e2:9b:
                    e2:f2:79:ae:0f:4e:70:43:a4:55:f9:58:28:ee:b2:
                    01:f4:da:38:fe:ed:33:df:d1:be:05:20:fc:42:eb:
                    43:50:1c:ed:d5:c6:f5:be:be:5c:79:09:86:28:2a:
                    ee:7d:db:40:ff:04:41:28:74:f3:a9:56:43:26:21:
                    ed:d2:80:90:86:ee:72:5c:85:5c:6f:d5:c3:62:07:
                    bc:d6:f4:5b:34:fc:0a:0a:9f:3b:61:86:4b:5d:77:
                    f2:05:93:82:e3:ad:c2:ae:f8:76:be:1f:a5:66:f1:
                    8d:ac:fd:46:fa:db:23:ed:50:69:09:57:82:06:ec:
                    ee:75:6e:60:fb:f3:97:a7:ee:01:5c:20:86:78:7a:
                    2e:82:46:41:36:65:44:f5:1f:85:a2:58:81:9d:fe:
                    50:b1:62:a5:ff:bb:8e:ec:d5:cf:a1:e9:fe:96:51:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:A5:E3:9E:08:70:A0:2E:18:E9:DE:33:0F:C2:F7:E4:3A:49:67
            X509v3 Authority Key Identifier:
                keyid:B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fe:8f:75:a8:b8:79:e7:c4:15:64:fb:8a:c5:c7:cd:37:f5:
         d0:b9:74:ab:3b:8e:29:41:e3:84:71:f2:21:a1:9b:be:7a:1d:
         4c:16:66:aa:53:98:26:10:4c:19:8b:73:ce:25:9d:0c:bd:03:
         14:82:f8:5d:96:4b:70:4d:86:e0:b8:8c:ef:5b:7f:64:03:4d:
         2b:4b:7a:6e:12:ea:ce:3d:39:b9:03:ca:a5:2f:62:4a:86:de:
         17:a0:24:dc:3b:96:42:59:87:fe:a1:fd:e4:ad:a9:81:05:2d:
         6e:f3:da:75:93:f3:92:7e:64:75:ab:44:13:58:92:9e:0e:8d:
         71:98:b9:bd:a0:b3:e6:98:a0:09:65:b7:41:ff:68:79:36:c0:
         d0:c6:fb:3d:69:c1:1a:d5:95:01:d9:43:c3:83:b6:3e:57:d9:
         52:31:9c:80:ed:f0:7e:7a:a0:e6:54:11:e1:8f:4c:20:48:5a:
         16:8b:6f:b5:3b:40:6a:5a:75:d0:6b:6b:c2:9e:0c:3b:1a:eb:
         94:6a:54:47:df:af:72:f4:ea:51:86:86:9d:b0:d3:3e:c8:af:
         3f:df:a5:bd:a9:95:c8:a3:ed:4a:40:67:cd:4f:54:53:ca:c6:
         48:8f:c5:22:b5:5f:6a:ad:cd:4f:11:1d:ed:a2:3e:64:bf:55:
         cc:e3:46:d7
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU1OTBBUjExMC8GA1UEBRMoQjM4QUUwRDg0MzY3REY0MDgyMkZCRTU4NTA3MEY2
OTgzQ0QxODA1OTAeFw0yNDEwMTcwMjQzMTNaFw0yNDEwMTkwMjQzMTNaMBgxFjAU
BgNVBAMTDTY3MTA3OWMxLTUwODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdyzSYGhhq5eOuGAIr72yTlj2PeVoCPQBb+aCIHu0QmD6M9ISHV6kAISij
8P8Nia+ZQvtOtlv3EuWw7KdYaI1Vv3GEFuOul2Enk79sEx4y/JCk4Q2CfMzim+Ly
ea4PTnBDpFX5WCjusgH02jj+7TPf0b4FIPxC60NQHO3VxvW+vlx5CYYoKu5920D/
BEEodPOpVkMmIe3SgJCG7nJchVxv1cNiB7zW9Fs0/AoKnzthhktdd/IFk4LjrcKu
+Ha+H6Vm8Y2s/Ub62yPtUGkJV4IG7O51bmD785en7gFcIIZ4ei6CRkE2ZUT1H4Wi
WIGd/lCxYqX/u47s1c+h6f6WURgnAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUfKal
454IcKAuGOneMw/C9+Q6SWcwHwYDVR0jBBgwFoAUs4rg2ENn30CCL75YUHD2mDzR
gFkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NTkwLzc2MUEzMjIyMjdGODExRUY5NjhGQzIxNTdEREMyNEMyL3M0cmcy
RU5uMzBDQ0w3NVlVSEQybUR6UmdGay5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3M0cmcyRU5uMzBDQ0w3NVlVSEQybUR6UmdGay5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDU1OTAvNzYxQTMyMjIyN0Y4MTFFRjk2OEZDMjE1N0REQzI0
QzIvczRyZzJFTm4zMENDTDc1WVVIRDJtRHpSZ0ZrLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCA/o91qLh558QVZPuKxcfNN/XQuXSrO44p
QeOEcfIhoZu+eh1MFmaqU5gmEEwZi3POJZ0MvQMUgvhdlktwTYbguIzvW39kA00r
S3puEurOPTm5A8qlL2JKht4XoCTcO5ZCWYf+of3kramBBS1u89p1k/OSfmR1q0QT
WJKeDo1xmLm9oLPmmKAJZbdB/2h5NsDQxvs9acEa1ZUB2UPDg7Y+V9lSMZyA7fB+
eqDmVBHhj0wgSFoWi2+1O0BqWnXQa2vCngw7GuuUalRH369y9OpRhoadsNM+yK8/
36W9qZXIo+1KQGfNT1RTysZIj8UitV9qrc1PER3toj5kv1XM40bX
-----END CERTIFICATE-----
Generated at Thu Oct 17 04:15:49 2024 by rpki-client on console-ams.rpki-client.org