Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
File:                     PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft (raw, json)
Hash identifier:          rrqF0drswB3kPxY3QsT0HFyA7qBjzAjZE10gn2rc54k=
Subject key identifier:   13:51:A3:CF:C8:78:5E:68:E2:A0:8B:FF:E4:85:CD:44:14:55:8B:42
Authority key identifier: 3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
Certificate issuer:       /CN=F3645590AF/serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Certificate serial:       86
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
Manifest number:          85
Signing time:             Fri 18 Oct 2024 02:42:18 +0000
Manifest this update:     Fri 18 Oct 2024 02:42:17 +0000
Manifest next update:     Sun 20 Oct 2024 02:42:17 +0000
Files and hashes:         1: PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl (hash: EybxwfA3mje8rleEk6Svm2NyVGYYBe+SohTxfPqFVfk=)
                          2: 098CB55C27F911EF9DB4BD167DDC24C2.roa (hash: MnuSnmQB8rdokjiI++mFKj9UCdOQLKSSBfHFFf46+p0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Oct 2024 00:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AF/serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
        Validity
            Not Before: Oct 18 02:42:17 2024 GMT
            Not After : Oct 20 02:42:17 2024 GMT
        Subject: CN=6711cb0a-a6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:ad:fe:88:d7:8a:c7:bd:9d:83:8e:ae:34:
                    fe:38:6b:eb:ed:b3:33:1a:af:31:36:a8:03:47:69:
                    c8:ab:db:ec:d6:8f:91:e8:52:e3:df:f1:a1:82:06:
                    6b:13:67:ca:fd:9a:a7:db:24:ab:04:ad:27:28:53:
                    c5:79:6f:bd:33:ab:a9:e3:05:ab:7d:20:2f:21:02:
                    9c:f3:3d:ca:ee:58:7b:46:6b:bc:b4:82:0f:e3:c0:
                    7c:7b:59:79:6f:10:fe:6e:ce:59:6c:f9:03:e9:37:
                    7a:ea:f2:bc:32:29:69:3e:8b:27:6e:a3:24:c5:da:
                    86:b6:57:4e:6b:10:84:7d:99:27:76:10:44:7a:33:
                    78:35:f1:df:33:34:5a:0f:c7:ff:56:a6:9d:30:c8:
                    fe:c6:d3:75:f8:a2:80:59:54:5d:26:ba:db:81:be:
                    4f:38:f0:28:d0:25:55:3a:ae:99:d4:2f:42:7a:a0:
                    69:2d:21:72:62:2d:6f:af:64:6a:36:ed:66:1c:3f:
                    e3:e0:e8:ed:b8:61:bd:31:11:37:91:59:0d:69:91:
                    22:71:59:15:18:e8:c7:44:14:87:f8:30:5a:d8:88:
                    d7:02:b9:c8:45:5f:18:b8:9b:72:83:75:f3:43:6a:
                    7f:26:f4:c4:ad:c3:8d:57:74:5b:95:22:29:f4:6f:
                    03:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:51:A3:CF:C8:78:5E:68:E2:A0:8B:FF:E4:85:CD:44:14:55:8B:42
            X509v3 Authority Key Identifier:
                keyid:3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0c:12:47:a0:70:09:6c:57:6a:30:49:18:d2:ee:c2:56:e6:
         ed:c5:c8:64:c7:bf:38:33:e0:31:49:ea:59:72:d1:25:5c:7a:
         b2:b3:d9:76:3b:75:e8:c9:3d:92:47:1e:01:41:30:d7:f0:e0:
         36:69:d0:6b:f4:ee:46:79:6a:14:67:99:70:e4:18:65:ee:01:
         68:61:8b:10:21:5c:b8:12:27:38:7b:1c:a6:ab:a5:b7:6a:93:
         51:bb:0e:bf:d6:7f:b5:1b:5f:f2:9b:9c:ac:47:c3:f5:15:bc:
         5b:0a:ad:b9:68:e6:2c:68:85:e7:19:56:96:45:9d:bb:59:73:
         9a:6f:31:94:ab:ba:32:ee:c6:bd:06:2f:7b:f7:9f:b7:80:49:
         95:7f:02:56:b1:7a:f2:d5:a1:47:20:ad:dd:c4:11:0f:fe:63:
         f3:7f:5d:8a:fd:65:70:2c:f9:85:e5:1e:66:7f:38:25:e1:6a:
         de:69:98:93:e1:d6:8c:ed:3e:5e:75:66:a0:ea:b2:40:ef:19:
         f9:cf:c4:ee:b3:a9:c4:e9:14:90:6f:79:9e:01:d4:b1:5d:57:
         3b:7b:8b:17:14:2b:5f:aa:74:26:ce:ea:46:1c:f3:54:0f:f5:
         7b:ec:e5:70:9b:40:04:f0:83:ae:8b:68:ec:71:95:ed:3c:50:
         ee:40:f9:90
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU1OTBBRjExMC8GA1UEBRMoM0RENTc0MTg2NzZCNTZBQjlERTU2RkFBODBDMjc4
ODc5QkQ5NDVDRTAeFw0yNDEwMTgwMjQyMTdaFw0yNDEwMjAwMjQyMTdaMBgxFjAU
BgNVBAMTDTY3MTFjYjBhLWE2ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8wa3+iNeKx72dg46uNP44a+vtszMarzE2qANHacir2+zWj5HoUuPf8aGC
BmsTZ8r9mqfbJKsErScoU8V5b70zq6njBat9IC8hApzzPcruWHtGa7y0gg/jwHx7
WXlvEP5uzlls+QPpN3rq8rwyKWk+iyduoyTF2oa2V05rEIR9mSd2EER6M3g18d8z
NFoPx/9Wpp0wyP7G03X4ooBZVF0mutuBvk848CjQJVU6rpnUL0J6oGktIXJiLW+v
ZGo27WYcP+Pg6O24Yb0xETeRWQ1pkSJxWRUY6MdEFIf4MFrYiNcCuchFXxi4m3KD
dfNDan8m9MStw41XdFuVIin0bwPnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUE1Gj
z8h4XmjioIv/5IXNRBRVi0IwHwYDVR0jBBgwFoAUPdV0GGdrVqud5W+qgMJ4h5vZ
Rc4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NTkwLzk1QzFBMzhBMjdGODExRUZBNDgxMjYxNjdEREMyNEMyL1BkVjBH
R2RyVnF1ZDVXLXFnTUo0aDV2WlJjNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BkVjBHR2RyVnF1ZDVXLXFnTUo0aDV2WlJjNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDU1OTAvOTVDMUEzOEEyN0Y4MTFFRkE0ODEyNjE2N0RE
QzI0QzIvUGRWMEdHZHJWcXVkNVctcWdNSjRoNXZaUmM0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnDBJHoHAJbFdqMEkY0u7CVubtxchk
x784M+AxSepZctElXHqys9l2O3XoyT2SRx4BQTDX8OA2adBr9O5GeWoUZ5lw5Bhl
7gFoYYsQIVy4Eic4exymq6W3apNRuw6/1n+1G1/ym5ysR8P1FbxbCq25aOYsaIXn
GVaWRZ27WXOabzGUq7oy7sa9Bi9795+3gEmVfwJWsXry1aFHIK3dxBEP/mPzf12K
/WVwLPmF5R5mfzgl4WreaZiT4daM7T5edWag6rJA7xn5z8Tus6nE6RSQb3meAdSx
XVc7e4sXFCtfqnQmzupGHPNUD/V77OVwm0AE8IOui2jscZXtPFDuQPmQ
-----END CERTIFICATE-----
Generated at Fri Oct 18 03:34:54 2024 by rpki-client on console-fra.rpki-client.org