Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
File:                     KSWEoez-KvMJMi1y5i2NXGpe968.mft (raw, json)
Hash identifier:          LqbCFoNHy494Uyn/CiIZsddU5SNsSi6BaZXcheQmQLU=
Subject key identifier:   73:DE:2D:1E:19:FD:1C:6F:31:97:85:97:E1:17:DD:1C:F6:3C:67:A3
Authority key identifier: 29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
Certificate issuer:       /CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Certificate serial:       01F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
Manifest number:          01F2
Signing time:             Thu 21 Nov 2024 02:21:24 +0000
Manifest this update:     Thu 21 Nov 2024 02:21:23 +0000
Manifest next update:     Sat 23 Nov 2024 02:21:23 +0000
Files and hashes:         1: KSWEoez-KvMJMi1y5i2NXGpe968.crl (hash: ZeSE0odbjEZ3b1MH/xTF6JusrS2bzJo74alhOUkR/ug=)
                          2: BF7E3710144311EFA22B150D017001B1.roa (hash: 8/PkEBIvQqXhRj2NABgd13CMYm/zHriVEu3SoXyW4r4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
        Validity
            Not Before: Nov 21 02:21:23 2024 GMT
            Not After : Nov 23 02:21:23 2024 GMT
        Subject: CN=673e9924-47d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:37:89:c7:09:14:25:4d:ce:c0:ba:52:11:
                    10:d9:f4:13:45:9f:45:4d:58:14:e7:cd:95:72:5b:
                    d9:7b:46:f6:07:72:07:e9:ea:60:f4:f2:e5:23:25:
                    12:37:07:8a:1e:4c:d2:d4:ab:cb:55:c3:a4:65:dd:
                    63:91:d9:50:ae:aa:01:f8:24:a2:1e:fd:ed:4a:c2:
                    f5:b3:92:6e:74:48:eb:d8:db:a3:41:6c:bd:91:76:
                    c9:69:9e:7a:c7:b1:a6:55:43:81:16:37:46:c3:26:
                    55:05:c9:53:f0:64:d4:a6:30:d9:66:ad:be:a9:0d:
                    c9:ba:54:f3:2e:19:8f:f2:9a:29:7a:86:11:62:04:
                    44:cc:58:da:c5:ac:9f:b0:5c:10:b1:71:22:af:29:
                    81:4b:8e:61:d5:88:83:50:50:2a:6e:d8:1c:d4:a5:
                    d9:04:23:83:73:63:58:f5:c4:49:18:9a:84:34:2c:
                    0b:54:29:40:a5:fd:92:a7:6f:71:f3:da:1b:f2:63:
                    cc:e3:d1:df:e7:b2:b5:a0:0f:47:c8:20:29:b4:d7:
                    6b:a5:4c:cf:e0:85:63:8e:20:bb:67:6c:ee:7d:6a:
                    c1:fd:8a:c0:51:04:ae:11:08:19:1b:bc:99:ad:4d:
                    48:66:fe:67:20:47:07:85:6e:c5:ba:bb:cf:60:12:
                    70:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DE:2D:1E:19:FD:1C:6F:31:97:85:97:E1:17:DD:1C:F6:3C:67:A3
            X509v3 Authority Key Identifier:
                keyid:29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:4b:f9:48:1e:7f:68:c2:d4:0f:a8:31:95:0f:43:0c:db:c1:
         b0:31:ec:91:bd:40:b5:38:3d:6a:f1:c5:73:e6:4e:04:cf:67:
         63:98:0f:de:de:8f:45:1f:01:c2:cf:54:f8:31:fd:87:70:1c:
         54:7f:e6:73:7a:06:70:8e:c5:21:3e:2e:0d:e9:e2:15:4f:58:
         a3:1f:96:54:e6:e7:20:12:db:64:ab:81:2b:d4:6b:4c:b3:3a:
         a2:07:9a:58:71:57:c3:d3:d7:c0:31:5a:85:36:bd:3d:f4:d1:
         85:65:4a:0a:e9:a5:0f:b2:26:ec:14:3e:07:e0:9e:79:6c:db:
         b4:d6:3d:54:c6:15:b9:f1:52:81:55:f8:22:9b:9b:0f:4b:da:
         36:3b:d3:68:c3:56:3d:73:e5:35:e5:eb:48:42:b8:d8:f5:8c:
         64:6f:a6:3b:7a:e7:c9:b8:60:0c:82:56:e4:06:5a:80:78:08:
         0e:f8:d5:4c:2b:ed:6e:e4:f8:fb:19:d1:41:bf:89:6e:fe:2b:
         c0:d8:b6:ac:8d:a9:09:41:3b:3b:49:88:49:ab:98:58:0f:47:
         a4:f2:95:ba:11:f2:f5:bd:02:71:5f:86:17:e1:26:15:f4:5a:
         13:87:82:86:cd:52:16:db:0e:1a:f9:fe:eb:09:b9:a2:1e:17:
         4d:ad:30:f2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDc5MUVBRjExMC8GA1UEBRMoMjkyNTg0QTFFQ0ZFMkFGMzA5MzIyRDcyRTYyRDhE
NUM2QTVFRjdBRjAeFw0yNDExMjEwMjIxMjNaFw0yNDExMjMwMjIxMjNaMBgxFjAU
BgNVBAMTDTY3M2U5OTI0LTQ3ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkODeJxwkUJU3OwLpSERDZ9BNFn0VNWBTnzZVyW9l7RvYHcgfp6mD08uUj
JRI3B4oeTNLUq8tVw6Rl3WOR2VCuqgH4JKIe/e1KwvWzkm50SOvY26NBbL2Rdslp
nnrHsaZVQ4EWN0bDJlUFyVPwZNSmMNlmrb6pDcm6VPMuGY/ymil6hhFiBETMWNrF
rJ+wXBCxcSKvKYFLjmHViINQUCpu2BzUpdkEI4NzY1j1xEkYmoQ0LAtUKUCl/ZKn
b3Hz2hvyY8zj0d/nsrWgD0fIICm012ulTM/ghWOOILtnbO59asH9isBRBK4RCBkb
vJmtTUhm/mcgRweFbsW6u89gEnCpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUc94t
Hhn9HG8xl4WX4RfdHPY8Z6MwHwYDVR0jBBgwFoAUKSWEoez+KvMJMi1y5i2NXGpe
968wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3OTFFLzdFQzNGNjM2MkY4NTExRUVBODM5NzY3MjRBRDlFNkZDL0tTV0Vv
ZXotS3ZNSk1pMXk1aTJOWEdwZTk2OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tTV0VvZXotS3ZNSk1pMXk1aTJOWEdwZTk2OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDc5MUUvN0VDM0Y2MzYyRjg1MTFFRUE4Mzk3NjcyNEFE
OUU2RkMvS1NXRW9lei1Ldk1KTWkxeTVpMk5YR3BlOTY4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWS/lIHn9owtQPqDGVD0MM28GwMeyR
vUC1OD1q8cVz5k4Ez2djmA/e3o9FHwHCz1T4Mf2HcBxUf+ZzegZwjsUhPi4N6eIV
T1ijH5ZU5ucgEttkq4Er1GtMszqiB5pYcVfD09fAMVqFNr099NGFZUoK6aUPsibs
FD4H4J55bNu01j1UxhW58VKBVfgim5sPS9o2O9Now1Y9c+U15etIQrjY9Yxkb6Y7
eufJuGAMglbkBlqAeAgO+NVMK+1u5Pj7GdFBv4lu/ivA2LasjakJQTs7SYhJq5hY
D0ek8pW6EfL1vQJxX4YX4SYV9FoTh4KGzVIW2w4a+f7rCbmiHhdNrTDy
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:19:40 2024 by rpki-client on console-ams.rpki-client.org