Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
File:                     h4TuSgLa-JcmVvEkUr8npJEcNik.mft (raw, json)
Hash identifier:          3DzbtGT4yLv7qNuRrbK21YYwfPAtgg8l7NTQhlrwulM=
Subject key identifier:   94:0D:4F:B8:16:90:7D:18:50:A9:55:79:B7:37:81:5D:B3:2D:D9:FE
Authority key identifier: 87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
Certificate issuer:       /CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Certificate serial:       0B38
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
Manifest number:          0B35
Signing time:             Sat 04 May 2024 00:43:56 +0000
Manifest this update:     Sat 04 May 2024 00:43:55 +0000
Manifest next update:     Mon 06 May 2024 00:43:55 +0000
Files and hashes:         1: h4TuSgLa-JcmVvEkUr8npJEcNik.crl (hash: 82mYESvDfBPLf2G4dN1tzaIXAWznoR0iH5cGm8MgJSo=)
                          2: F9EF37C6A9A011EAB3F8E035F8AEA228.roa (hash: hv8nqq5P9PSxsiqqebiaxojUmKUtWuVUeKogAVthKqk=)
                          3: 322E59C89B8511ECA6E8B6A05A40D577.roa (hash: BnWYJ3FTlStYEMUn5ujbi/xmcBESttAp1iVk0y8JFFk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2872 (0xb38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
        Validity
            Not Before: May  4 00:43:55 2024 GMT
            Not After : May  6 00:43:55 2024 GMT
        Subject: CN=663584cc-3c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:1b:4b:be:4d:b9:12:21:24:59:6b:59:7f:
                    48:36:53:1e:04:ef:ba:7e:24:ae:f6:15:41:9e:b3:
                    a7:02:0f:07:a0:d6:18:01:35:d5:bd:26:6f:0e:5f:
                    17:e0:dd:38:1e:30:a7:a6:9d:5e:e6:5a:45:1c:80:
                    d7:55:3f:25:fb:e7:f2:9f:54:06:9a:64:bc:c8:8e:
                    6d:cd:c2:dc:b5:74:39:db:3d:88:a6:37:69:88:4c:
                    c8:02:1c:d8:f1:49:b3:b4:1a:3f:b2:08:16:19:34:
                    78:f0:03:9b:a2:f5:1a:56:1c:cb:5b:5b:4a:70:91:
                    56:49:e9:d3:86:77:42:e9:7e:c4:ce:58:19:8a:60:
                    74:1b:5f:30:11:22:62:8c:a8:49:7b:74:3d:a4:2b:
                    f3:b4:7a:35:ac:08:09:90:95:08:47:30:02:08:eb:
                    1a:71:ce:fd:b5:c4:5b:df:91:42:2a:37:61:fa:1e:
                    da:14:53:7c:f2:65:74:46:6c:03:49:38:d0:a9:9c:
                    2e:e5:ec:61:85:eb:21:7e:7d:a0:e8:a6:32:fc:de:
                    4f:e9:89:f5:6c:cf:f4:9a:c2:73:d9:3c:6a:d3:0d:
                    46:d3:68:58:df:d5:ec:02:07:6a:39:1a:a3:55:a3:
                    8c:fd:2f:03:d3:d9:4e:a9:74:8a:7e:92:52:d1:e4:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0D:4F:B8:16:90:7D:18:50:A9:55:79:B7:37:81:5D:B3:2D:D9:FE
            X509v3 Authority Key Identifier:
                keyid:87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1b:0c:fe:2a:26:c1:cf:3a:b8:9d:2e:7c:e5:d8:68:81:92:
         ee:5d:a8:dc:88:7e:9a:87:35:db:9c:61:c9:4e:71:80:46:5a:
         12:dc:fb:16:24:2c:2d:f0:01:b5:3c:9d:c1:37:16:8b:7e:9c:
         2e:50:50:ed:32:c1:b7:81:f6:03:0a:5c:8f:9b:d4:be:23:ea:
         38:dc:cb:d2:fa:f4:0a:99:52:94:d4:a0:c5:a4:0a:0e:6c:09:
         73:d2:45:62:bf:4e:2b:4c:73:06:3f:4b:9f:a3:21:e4:da:cc:
         4a:ff:4e:84:ad:7c:b9:9e:90:76:86:2f:74:2f:80:4e:f5:c9:
         ab:03:41:c6:7a:f1:dd:97:83:21:12:20:e5:0f:30:e7:8c:ba:
         b6:0b:e3:e0:20:40:87:69:5f:6b:dd:81:82:8e:ff:7c:82:69:
         3d:83:0b:2a:ae:a9:04:83:ed:97:20:76:6f:ab:98:83:bc:7f:
         28:78:68:7b:78:29:e8:d1:eb:c6:f7:b8:34:71:48:05:85:57:
         b0:6e:a0:88:29:94:c5:12:2d:e7:bd:27:7a:18:9e:7c:97:9c:
         28:41:ed:91:73:50:f0:81:fe:c4:35:0e:88:96:1f:52:cd:1c:
         66:57:a6:5e:d1:92:17:99:17:b0:7b:0a:ff:b5:c3:e6:6e:99:
         2c:04:00:26
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTFFNzNBRjExMC8GA1UEBRMoODc4NEVFNEEwMkRBRjg5NzI2NTZGMTI0NTJCRjI3
QTQ5MTFDMzYyOTAeFw0yNDA1MDQwMDQzNTVaFw0yNDA1MDYwMDQzNTVaMBgxFjAU
BgNVBAMTDTY2MzU4NGNjLTNjMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkWhtLvk25EiEkWWtZf0g2Ux4E77p+JK72FUGes6cCDweg1hgBNdW9Jm8O
Xxfg3TgeMKemnV7mWkUcgNdVPyX75/KfVAaaZLzIjm3Nwty1dDnbPYimN2mITMgC
HNjxSbO0Gj+yCBYZNHjwA5ui9RpWHMtbW0pwkVZJ6dOGd0LpfsTOWBmKYHQbXzAR
ImKMqEl7dD2kK/O0ejWsCAmQlQhHMAII6xpxzv21xFvfkUIqN2H6HtoUU3zyZXRG
bANJONCpnC7l7GGF6yF+faDopjL83k/pifVsz/SawnPZPGrTDUbTaFjf1ewCB2o5
GqNVo4z9LwPT2U6pdIp+klLR5FVrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUlA1P
uBaQfRhQqVV5tzeBXbMt2f4wHwYDVR0jBBgwFoAUh4TuSgLa+JcmVvEkUr8npJEc
NikwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUxRTczLzNDRjBFMDlBNzhDNDExRTY4NDhEM0EzMUY4QUVBMjI4L2g0VHVT
Z0xhLUpjbVZ2RWtVcjhucEpFY05pay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2g0VHVTZ0xhLUpjbVZ2RWtVcjhucEpFY05pay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTFFNzMvM0NGMEUwOUE3OEM0MTFFNjg0OEQzQTMxRjhB
RUEyMjgvaDRUdVNnTGEtSmNtVnZFa1VyOG5wSkVjTmlrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVGwz+KibBzzq4nS585dhogZLuXajc
iH6ahzXbnGHJTnGARloS3PsWJCwt8AG1PJ3BNxaLfpwuUFDtMsG3gfYDClyPm9S+
I+o43MvS+vQKmVKU1KDFpAoObAlz0kViv04rTHMGP0ufoyHk2sxK/06ErXy5npB2
hi90L4BO9cmrA0HGevHdl4MhEiDlDzDnjLq2C+PgIECHaV9r3YGCjv98gmk9gwsq
rqkEg+2XIHZvq5iDvH8oeGh7eCno0evG97g0cUgFhVewbqCIKZTFEi3nvSd6GJ58
l5woQe2Rc1Dwgf7ENQ6Ilh9SzRxmV6Ze0ZIXmRewewr/tcPmbpksBAAm
-----END CERTIFICATE-----
Generated at Sat May 4 01:52:46 2024 by rpki-client on console-ams.rpki-client.org