Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
File:                     cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft (raw, json)
Hash identifier:          1q1cc3PqAuqSpCnoqkzK7x16/cjaOMreA0lre1lhRaM=
Subject key identifier:   3C:BC:6E:B9:5A:26:5F:F5:CC:DE:54:09:A1:9F:69:D9:34:49:B9:59
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Certificate issuer:       /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial:       087B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
Manifest number:          087A
Signing time:             Thu 21 Nov 2024 00:56:08 +0000
Manifest this update:     Thu 21 Nov 2024 00:56:08 +0000
Manifest next update:     Sat 23 Nov 2024 00:56:08 +0000
Files and hashes:         1: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl (hash: z1zI6ABF92kgZLqEmSXTNS6l7pPJyL97QyqrtD5thJE=)
                          2: 8506A5F2291811E9A5145C67F8AEA228.roa (hash: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                          rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171 (0x87b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
        Validity
            Not Before: Nov 21 00:56:08 2024 GMT
            Not After : Nov 23 00:56:08 2024 GMT
        Subject: CN=673e8528-85a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:53:e2:e5:d7:9b:52:56:c3:b4:29:4e:41:
                    44:72:7f:e4:7f:5b:56:9b:2d:48:2b:61:dc:51:19:
                    62:37:ad:d6:bb:0c:ca:de:05:94:96:b4:cc:fa:33:
                    d4:f9:24:6c:dd:08:a4:94:01:ed:13:bd:b7:4a:7b:
                    76:b2:87:90:14:7c:44:e9:d8:2e:33:73:6e:f8:92:
                    fc:57:21:2c:4f:8f:9b:20:19:17:1a:5e:fa:0e:18:
                    f0:f7:e4:a7:77:07:02:84:86:c2:67:8d:7f:dd:10:
                    39:a0:61:1e:d8:05:ed:fd:2f:ed:18:3d:30:1a:0c:
                    44:bd:66:a7:48:dd:59:d5:60:49:aa:ce:d8:5a:ab:
                    2c:92:09:32:6e:58:e6:04:f2:13:d7:f2:25:33:f1:
                    9b:9c:a7:99:c1:a8:7b:0f:4e:20:63:7a:39:5a:ca:
                    0b:d3:27:c3:a4:21:93:44:53:0a:d1:60:c1:c8:84:
                    23:3c:fd:ac:33:e2:e3:d9:8d:0a:49:e7:68:c9:25:
                    ef:b0:d4:c1:d8:9f:c5:e4:58:4a:ad:c2:b8:80:7f:
                    26:8e:ec:f0:6a:96:e5:4d:4d:38:95:8d:d1:15:0a:
                    7d:a7:23:72:e9:7e:4c:5f:a9:a7:f7:3a:16:3d:7b:
                    91:cd:4b:c7:40:2a:35:92:eb:a3:b1:e0:5b:c5:8a:
                    5c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BC:6E:B9:5A:26:5F:F5:CC:DE:54:09:A1:9F:69:D9:34:49:B9:59
            X509v3 Authority Key Identifier:
                keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:53:c0:b7:9a:f5:55:4c:45:d4:e8:63:80:5f:2a:dd:30:bb:
         93:b1:22:c4:97:1e:7e:c6:ee:da:e6:6b:77:6f:7d:33:07:d1:
         05:51:0d:c6:fb:f2:7d:ea:f3:7d:bc:cd:fa:e7:09:2e:19:78:
         0a:8b:7e:0a:98:15:ae:e1:ad:ff:80:11:51:93:1f:6d:b1:6d:
         f0:cc:3d:ff:65:86:a0:c4:b3:6b:79:25:8e:c2:a8:0c:54:17:
         d1:5e:87:e4:e3:e6:04:43:de:89:69:03:69:5b:12:a3:d5:12:
         e0:8b:6f:f1:0f:59:80:21:f0:74:b9:ce:ab:b5:4c:aa:3e:3d:
         4a:e2:4f:4d:62:a4:b1:03:7b:8d:3a:05:e8:36:92:05:c7:48:
         53:c5:bc:61:d2:9f:41:39:05:38:35:76:ba:e0:99:ef:ff:64:
         60:43:92:80:7e:71:af:d1:54:53:63:9a:90:42:cf:f4:fd:70:
         31:fb:38:e0:8d:d7:12:7b:7c:e3:b9:0a:77:08:b7:43:be:79:
         12:3d:a6:60:61:b8:10:02:8d:4e:62:0f:1d:3e:c4:22:b8:17:
         17:40:3c:2d:e0:15:b2:dd:3f:8a:ae:a1:38:5b:1a:4d:17:a8:
         0f:22:1b:db:b5:88:03:1c:3a:be:f4:b9:68:53:2f:f5:34:84:
         8d:0b:b0:4d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCHswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEU2N0NBUjExMC8GA1UEBRMoNzEyRUU0NkNDRjEzMjgwODdGMkUzRjI4NjU3NjEx
OEMxMDY5Qjk3RDAeFw0yNDExMjEwMDU2MDhaFw0yNDExMjMwMDU2MDhaMBgxFjAU
BgNVBAMTDTY3M2U4NTI4LTg1YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpAFPi5debUlbDtClOQURyf+R/W1abLUgrYdxRGWI3rda7DMreBZSWtMz6
M9T5JGzdCKSUAe0TvbdKe3ayh5AUfETp2C4zc274kvxXISxPj5sgGRcaXvoOGPD3
5Kd3BwKEhsJnjX/dEDmgYR7YBe39L+0YPTAaDES9ZqdI3VnVYEmqzthaqyySCTJu
WOYE8hPX8iUz8Zucp5nBqHsPTiBjejlaygvTJ8OkIZNEUwrRYMHIhCM8/awz4uPZ
jQpJ52jJJe+w1MHYn8XkWEqtwriAfyaO7PBqluVNTTiVjdEVCn2nI3Lpfkxfqaf3
OhY9e5HNS8dAKjWS66Ox4FvFily1AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUPLxu
uVomX/XM3lQJoZ9p2TRJuVkwHwYDVR0jBBgwFoAUcS7kbM8TKAh/Lj8oZXYRjBBp
uX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRFNjdDLzgyMjBCRTZBMjkxNjExRTk5NEExRTM2NUY4QUVBMjI4L2NTN2ti
TThUS0FoX0xqOG9aWFlSakJCcHVYMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2NTN2tiTThUS0FoX0xqOG9aWFlSakJCcHVYMC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NEU2N0MvODIyMEJFNkEyOTE2MTFFOTk0QTFFMzY1RjhBRUEy
MjgvY1M3a2JNOFRLQWhfTGo4b1pYWVJqQkJwdVgwLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0U8C3mvVVTEXU6GOAXyrdMLuTsSLElx5+
xu7a5mt3b30zB9EFUQ3G+/J96vN9vM365wkuGXgKi34KmBWu4a3/gBFRkx9tsW3w
zD3/ZYagxLNreSWOwqgMVBfRXofk4+YEQ96JaQNpWxKj1RLgi2/xD1mAIfB0uc6r
tUyqPj1K4k9NYqSxA3uNOgXoNpIFx0hTxbxh0p9BOQU4NXa64Jnv/2RgQ5KAfnGv
0VRTY5qQQs/0/XAx+zjgjdcSe3zjuQp3CLdDvnkSPaZgYbgQAo1OYg8dPsQiuBcX
QDwt4BWy3T+KrqE4WxpNF6gPIhvbtYgDHDq+9LloUy/1NISNC7BN
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:10:16 2024 by rpki-client on console-fra.rpki-client.org