Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
File:                     RGKi49FTZoSmrSMoDP2hhYW6Rug.mft (raw, json)
Hash identifier:          BAr7svuJaIJzLHn1IgDPkvy2mew2GE6IVrxNyRs1c/I=
Subject key identifier:   F6:51:8D:8F:2C:E6:AE:42:77:1D:51:73:BC:7B:1B:84:BF:9E:7E:DC
Authority key identifier: 44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
Certificate issuer:       /CN=F36455FBAF/serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Certificate serial:       0259
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
Manifest number:          0252
Signing time:             Tue 07 May 2024 02:01:27 +0000
Manifest this update:     Tue 07 May 2024 02:01:26 +0000
Manifest next update:     Thu 09 May 2024 02:01:26 +0000
Files and hashes:         1: RGKi49FTZoSmrSMoDP2hhYW6Rug.crl (hash: jhW00T5A80Zg7rGWjr2ORGbaGCD82Nny78pEX6NYl5c=)
                          2: 0F114F527ACF11EDAC6D79A5F1222468.roa (hash: 46X5epXs0VFCJD66bt/bhtHNaIaecq5dD1lqndSuoV0=)
                          3: 04F6FEFE55CC11ED9C17B393F1222468.roa (hash: JFxqQtwYQ6GCSD4A94ECbukEigF4S2ClwmoBMIrahsI=)
                          4: 4BC60282563811ED9EF1C284F1222468.roa (hash: NvKZJdaH3Sxug7NJzmQ6XjmgQrcY9ZIaoRd4i6mNa08=)
                          5: CB200990B0EE11ED9130F4BDF1222468.roa (hash: fQ09LEmlKPbkg+C38k1zz+KfIUo55sSASlLjZwmLSCM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36455FBAF/serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
        Validity
            Not Before: May  7 02:01:26 2024 GMT
            Not After : May  9 02:01:26 2024 GMT
        Subject: CN=66398b77-974f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:4a:91:53:c0:3b:38:7f:4c:37:7c:d5:b8:
                    01:3b:e2:ea:9e:8f:aa:ba:ea:98:87:61:ea:5d:ff:
                    be:eb:85:ce:12:0a:b1:57:8b:ba:43:9e:9a:8f:0d:
                    7f:04:55:53:2a:70:97:cf:a8:91:cd:82:a9:8d:33:
                    66:a1:cc:62:2c:17:e4:2a:c5:73:2a:3e:e0:76:20:
                    95:b5:e8:86:da:fa:bc:74:f5:20:2b:b2:d3:3e:c1:
                    5e:b9:0e:32:07:84:a4:6b:dd:3f:53:68:d0:1a:56:
                    ea:8a:b5:49:16:64:0a:80:84:eb:2a:53:2c:32:05:
                    aa:66:4e:43:1b:37:d2:f8:ec:23:31:8e:c5:59:a8:
                    10:2e:51:82:49:3a:20:12:32:e8:03:76:63:3c:68:
                    b5:c3:cc:fe:27:45:a6:bd:07:ac:af:65:5e:1c:1d:
                    a6:cb:c0:db:7e:0b:54:3b:0f:20:8f:7f:c2:c0:ee:
                    3a:f2:44:6c:44:c4:df:90:21:69:c6:98:8d:f0:78:
                    d4:c3:14:d0:ab:38:26:95:f3:97:09:c0:8d:79:15:
                    55:a8:b7:c7:cd:d7:dd:2d:ae:63:e3:b8:53:b4:47:
                    4d:f4:ab:4d:74:29:97:d3:73:d3:85:fa:05:88:6b:
                    9f:d1:e1:5d:1d:28:60:18:b8:ea:72:b0:ec:fe:1c:
                    8b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:51:8D:8F:2C:E6:AE:42:77:1D:51:73:BC:7B:1B:84:BF:9E:7E:DC
            X509v3 Authority Key Identifier:
                keyid:44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c6:91:3b:cf:1c:bc:01:cc:b5:fc:39:35:98:20:33:64:01:
         f6:87:02:7a:7f:fe:5c:7b:7f:13:ae:8f:9a:5f:9f:4e:44:6b:
         ef:89:df:b9:7f:37:7e:1d:b2:ec:84:02:99:ab:04:29:6e:ef:
         e2:10:50:09:08:f4:dd:9a:cf:3d:fa:48:88:87:91:d7:ef:13:
         0d:92:f1:1e:0e:c8:b6:b1:37:c8:a8:a2:c3:72:eb:08:bb:0d:
         dd:ed:74:a1:2b:6c:37:69:6a:8b:f4:bc:74:f6:b7:c6:9c:e8:
         15:65:99:4d:8d:79:cf:a7:14:be:af:fb:f6:1a:6a:da:ef:5c:
         c6:78:c4:02:6e:81:73:a5:58:55:bd:5f:dc:4d:2f:78:fa:10:
         0c:cc:86:89:e8:ff:93:69:f1:15:bc:f1:a3:4d:a7:3f:37:0b:
         12:32:1f:8b:89:76:0a:66:75:b5:47:da:e5:e5:3b:cb:07:35:
         a4:92:37:fe:53:7e:17:b0:8d:4c:63:67:df:5c:c7:37:c4:da:
         1d:af:92:bf:14:6f:65:23:0b:4d:bd:d2:10:27:9b:fa:44:1b:
         bf:8e:7e:93:54:e3:c0:01:2d:44:41:a2:09:e4:39:d9:9d:72:
         77:0f:45:1a:bd:d4:a1:1b:34:28:90:6e:eb:a4:02:d3:a9:29:
         d6:3a:f3:38
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU1RkJBRjExMC8GA1UEBRMoNDQ2MkEyRTNEMTUzNjY4NEE2QUQyMzI4MENGREEx
ODU4NUJBNDZFODAeFw0yNDA1MDcwMjAxMjZaFw0yNDA1MDkwMjAxMjZaMBgxFjAU
BgNVBAMTDTY2Mzk4Yjc3LTk3NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsK0qRU8A7OH9MN3zVuAE74uqej6q66piHYepd/77rhc4SCrFXi7pDnpqP
DX8EVVMqcJfPqJHNgqmNM2ahzGIsF+QqxXMqPuB2IJW16Iba+rx09SArstM+wV65
DjIHhKRr3T9TaNAaVuqKtUkWZAqAhOsqUywyBapmTkMbN9L47CMxjsVZqBAuUYJJ
OiASMugDdmM8aLXDzP4nRaa9B6yvZV4cHabLwNt+C1Q7DyCPf8LA7jryRGxExN+Q
IWnGmI3weNTDFNCrOCaV85cJwI15FVWot8fN190trmPjuFO0R030q010KZfTc9OF
+gWIa5/R4V0dKGAYuOpysOz+HIu/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU9lGN
jyzmrkJ3HVFzvHsbhL+eftwwHwYDVR0jBBgwFoAURGKi49FTZoSmrSMoDP2hhYW6
RugwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NUZCLzE1N0Q1NEY0NTVDQjExRUQ5N0RGOTY5MUYxMjIyNDY4L1JHS2k0
OUZUWm9TbXJTTW9EUDJoaFlXNlJ1Zy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JHS2k0OUZUWm9TbXJTTW9EUDJoaFlXNlJ1Zy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDU1RkIvMTU3RDU0RjQ1NUNCMTFFRDk3REY5NjkxRjEy
MjI0NjgvUkdLaTQ5RlRab1NtclNNb0RQMmhoWVc2UnVnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJxpE7zxy8Acy1/Dk1mCAzZAH2hwJ6
f/5ce38Tro+aX59ORGvvid+5fzd+HbLshAKZqwQpbu/iEFAJCPTdms89+kiIh5HX
7xMNkvEeDsi2sTfIqKLDcusIuw3d7XShK2w3aWqL9Lx09rfGnOgVZZlNjXnPpxS+
r/v2Gmra71zGeMQCboFzpVhVvV/cTS94+hAMzIaJ6P+TafEVvPGjTac/NwsSMh+L
iXYKZnW1R9rl5TvLBzWkkjf+U34XsI1MY2ffXMc3xNodr5K/FG9lIwtNvdIQJ5v6
RBu/jn6TVOPAAS1EQaIJ5DnZnXJ3D0UavdShGzQokG7rpALTqSnWOvM4
-----END CERTIFICATE-----
Generated at Tue May 7 03:09:38 2024 by rpki-client on console-ams.rpki-client.org