Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
File:                     GAGTeoaGkejdxAoaQ6Y47cyb134.mft (raw, json)
Hash identifier:          ViP1TW74r5QMKqOrcZy/BHvcAAfDxwAOxTcURA2AsQY=
Subject key identifier:   5D:20:F0:AD:79:7B:B0:D4:2E:F9:A1:29:AF:EE:A1:6B:E7:AA:25:F2
Authority key identifier: 18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E
Certificate issuer:       /CN=F3645A60AF/serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
Certificate serial:       0158
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
Manifest number:          0157
Signing time:             Sun 19 May 2024 02:15:11 +0000
Manifest this update:     Sun 19 May 2024 02:15:10 +0000
Manifest next update:     Tue 21 May 2024 02:15:10 +0000
Files and hashes:         1: GAGTeoaGkejdxAoaQ6Y47cyb134.crl (hash: AIe6/xhUm5400K0u+6vn+PWSVSYzLOh2gcWygHXMsME=)
                          2: D9BB7DAA119111EE9EC8824F4AD9E6FC.roa (hash: z8n6q+oUQGHtnZrxmlHyDPpdETGxOMXPu63Xt71Wevg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645A60AF/serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
        Validity
            Not Before: May 19 02:15:10 2024 GMT
            Not After : May 21 02:15:10 2024 GMT
        Subject: CN=664960af-3ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:0d:8e:57:78:aa:72:06:19:dd:2c:51:60:
                    81:ed:33:69:ea:fb:ac:53:c8:24:f8:1f:c0:c8:b8:
                    ed:7a:18:08:25:24:34:4a:f5:f1:4d:34:cb:9c:7e:
                    e0:1b:49:10:55:bc:7b:0e:85:4d:5d:5b:cb:d2:3e:
                    35:c9:88:c6:70:b5:ac:79:a0:3d:05:0a:ba:85:51:
                    7c:fb:e4:4f:8e:c4:6f:32:59:01:37:bc:9c:4b:7e:
                    54:a3:17:3d:47:35:22:0a:88:d2:70:85:05:d4:5e:
                    00:71:59:3b:af:e1:49:68:36:1e:54:3d:69:33:eb:
                    2d:98:00:e2:48:f6:c4:36:e8:ef:7e:b0:ea:27:7e:
                    a3:38:3b:0b:c2:07:ad:53:a3:81:0c:51:a0:e4:9d:
                    ef:58:6a:70:b1:c6:20:36:0a:7a:a8:aa:74:9b:99:
                    81:4e:4c:8a:7c:b4:1d:d2:ff:ee:d0:bc:68:3a:e2:
                    0f:36:4f:46:6f:e5:0c:36:67:84:f3:6e:d2:4c:06:
                    11:1f:e9:c9:2d:bb:ff:90:92:a5:86:57:bd:8f:06:
                    80:61:b2:c3:f6:83:d2:b6:2c:17:e1:fc:4c:5a:2f:
                    41:d8:3f:30:ac:27:2e:bb:2b:fc:0f:3f:1b:33:39:
                    58:99:a7:64:98:15:4d:00:92:78:95:9f:57:f2:12:
                    8e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:20:F0:AD:79:7B:B0:D4:2E:F9:A1:29:AF:EE:A1:6B:E7:AA:25:F2
            X509v3 Authority Key Identifier:
                keyid:18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9a:1b:25:26:18:f4:fe:7f:e3:b2:b2:19:52:5d:60:e7:9f:
         c5:2f:bb:c4:70:fe:3a:17:d0:a1:6c:04:dd:34:ee:54:55:e3:
         7d:7e:75:27:48:c2:96:23:49:c0:d4:c0:23:07:91:6a:8a:5f:
         00:09:7d:23:c6:90:02:62:95:ab:ad:63:1f:d1:ec:01:93:3d:
         16:83:80:7a:60:56:1a:4a:d5:89:99:46:fb:e4:1e:ac:78:c4:
         97:cf:ba:5b:11:3a:77:2b:b1:bd:95:b6:1a:df:73:b6:c2:86:
         aa:e6:60:c8:5b:a6:cc:c8:de:09:01:78:d2:16:fa:aa:78:71:
         5f:fd:9d:54:37:56:ac:02:ec:a1:fc:e9:0c:99:df:22:aa:ed:
         94:1a:00:84:e2:38:ab:21:2b:83:57:5b:0d:56:e8:4a:f3:81:
         50:36:cb:56:9c:bf:7f:6c:8b:af:d0:87:17:cf:e5:99:58:72:
         8e:70:00:ff:86:ba:20:9a:28:af:68:6c:59:21:cd:e7:4c:66:
         df:3b:84:3d:28:22:2e:2d:4a:67:49:9c:ec:f1:d8:96:aa:09:
         c9:1c:f7:96:ec:9f:95:2f:54:af:53:ad:51:ac:8d:9f:20:5d:
         1c:20:e6:92:50:ca:04:27:77:22:97:93:a5:33:8c:30:04:54:
         9c:0b:b9:6d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDVBNjBBRjExMC8GA1UEBRMoMTgwMTkzN0E4Njg2OTFFOEREQzQwQTFBNDNBNjM4
RURDQzlCRDc3RTAeFw0yNDA1MTkwMjE1MTBaFw0yNDA1MjEwMjE1MTBaMBgxFjAU
BgNVBAMTDTY2NDk2MGFmLTNjY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7UQ2OV3iqcgYZ3SxRYIHtM2nq+6xTyCT4H8DIuO16GAglJDRK9fFNNMuc
fuAbSRBVvHsOhU1dW8vSPjXJiMZwtax5oD0FCrqFUXz75E+OxG8yWQE3vJxLflSj
Fz1HNSIKiNJwhQXUXgBxWTuv4UloNh5UPWkz6y2YAOJI9sQ26O9+sOonfqM4OwvC
B61To4EMUaDkne9YanCxxiA2CnqoqnSbmYFOTIp8tB3S/+7QvGg64g82T0Zv5Qw2
Z4TzbtJMBhEf6cktu/+QkqWGV72PBoBhssP2g9K2LBfh/ExaL0HYPzCsJy67K/wP
PxszOViZp2SYFU0AkniVn1fyEo49AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUXSDw
rXl7sNQu+aEpr+6ha+eqJfIwHwYDVR0jBBgwFoAUGAGTeoaGkejdxAoaQ6Y47cyb
134wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1QTYwLzI0QkIxODEyMTE5MDExRUU4RDBCQzQ0QTRBRDlFNkZDL0dBR1Rl
b2FHa2VqZHhBb2FRNlk0N2N5YjEzNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dBR1Rlb2FHa2VqZHhBb2FRNlk0N2N5YjEzNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDVBNjAvMjRCQjE4MTIxMTkwMTFFRThEMEJDNDRBNEFE
OUU2RkMvR0FHVGVvYUdrZWpkeEFvYVE2WTQ3Y3liMTM0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1mhslJhj0/n/jsrIZUl1g55/FL7vE
cP46F9ChbATdNO5UVeN9fnUnSMKWI0nA1MAjB5Fqil8ACX0jxpACYpWrrWMf0ewB
kz0Wg4B6YFYaStWJmUb75B6seMSXz7pbETp3K7G9lbYa33O2woaq5mDIW6bMyN4J
AXjSFvqqeHFf/Z1UN1asAuyh/OkMmd8iqu2UGgCE4jirISuDV1sNVuhK84FQNstW
nL9/bIuv0IcXz+WZWHKOcAD/hrogmiivaGxZIc3nTGbfO4Q9KCIuLUpnSZzs8diW
qgnJHPeW7J+VL1SvU61RrI2fIF0cIOaSUMoEJ3cil5OlM4wwBFScC7lt
-----END CERTIFICATE-----
Generated at Sun May 19 03:14:46 2024 by rpki-client on console-fra.rpki-client.org