Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
File:                     gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft (raw, json)
Hash identifier:          BYg5XrbLRm2seBdgGXcE3ndOxteCHe+HMs8uTQfO/Jw=
Subject key identifier:   14:4C:9D:1F:EE:F1:04:31:9E:2F:5E:90:DB:4C:99:FA:73:78:8A:7B
Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Certificate issuer:       /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Certificate serial:       68
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
Manifest number:          66
Signing time:             Mon 27 May 2024 02:32:20 +0000
Manifest this update:     Mon 27 May 2024 02:32:20 +0000
Manifest next update:     Wed 29 May 2024 02:32:20 +0000
Files and hashes:         1: gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl (hash: iBkuf6Lvm0jKmWW22VsQBBvBnVHHv7EBmONdB5TIHgw=)
                          2: F970A942CF0311EEAED7B6BD775412E6.roa (hash: 32sD43LbWALTuJUF3vyPCwh1TO7oJGgAAqLfaaTeevk=)
                          3: 33681320D7DC11EE9259264F775412E6.roa (hash: b5C9mOpkyivNZP5nj1Xz3UEoIi/Rbog0RSzap2Ofofw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 May 2024 00:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
        Validity
            Not Before: May 27 02:32:20 2024 GMT
            Not After : May 29 02:32:20 2024 GMT
        Subject: CN=6653f0b4-38e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0f:fd:8b:a8:8a:02:eb:01:47:e7:29:3b:c7:
                    56:b5:69:15:94:ba:83:fa:98:a7:9b:d8:f5:4c:56:
                    7b:41:88:0c:44:5d:5f:cc:d3:cd:c4:fd:e2:46:a7:
                    a0:59:26:a0:bc:6c:40:08:4b:ef:9e:07:20:8b:06:
                    cb:ca:f0:e6:3c:06:9e:1d:44:62:54:4b:f1:ff:56:
                    66:60:e6:cf:10:a0:cb:68:ee:be:67:9e:ba:f8:26:
                    08:31:03:19:cd:5a:ea:d7:43:63:da:d9:e0:26:eb:
                    62:3b:57:91:02:b2:4c:d8:31:44:91:e5:54:7f:bd:
                    58:ff:be:be:61:d7:11:c5:a0:42:ac:58:0c:7f:8e:
                    1b:4b:fe:f4:94:5a:0c:ff:9c:11:ad:8e:fd:f8:43:
                    0c:af:86:f9:02:e7:0e:46:bb:2d:8f:cb:8e:71:d7:
                    fc:de:c0:d8:d3:26:32:17:72:03:84:39:4d:e5:58:
                    92:2c:05:eb:22:07:44:4c:d6:49:91:54:a9:2f:49:
                    c3:52:58:9d:33:7d:3f:29:36:72:f3:11:d4:3b:60:
                    e7:3e:d5:09:76:f7:cc:37:d0:79:9d:dd:df:03:51:
                    29:81:ec:43:4a:69:8e:79:d8:ee:69:e6:d8:37:7b:
                    fa:6b:36:33:91:8f:15:1c:b3:b9:3e:a0:6e:08:e8:
                    a5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4C:9D:1F:EE:F1:04:31:9E:2F:5E:90:DB:4C:99:FA:73:78:8A:7B
            X509v3 Authority Key Identifier:
                keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:23:6d:6f:84:18:fe:37:ce:ed:05:11:10:40:e1:37:3a:48:
         76:57:37:91:45:0b:83:e7:dd:5b:af:78:68:19:5a:c7:35:f0:
         82:95:6a:1b:2d:c8:53:25:8f:85:3e:2f:1f:7d:e6:8b:2d:f7:
         d2:2e:4d:4b:09:88:7e:11:e6:37:25:ee:85:b5:30:a4:bd:d5:
         ef:f5:14:17:ef:44:6f:f3:57:e6:a4:32:4c:1f:5e:80:92:05:
         e7:e4:d1:db:6c:10:fd:b3:c5:a2:b0:14:bc:5f:42:6f:53:ad:
         76:b7:ea:20:8e:c8:b8:bc:0f:7c:b1:33:a4:b7:01:6a:e8:70:
         47:fe:65:a6:31:a0:a8:f8:c6:7a:0b:a5:6f:75:1f:58:0e:21:
         fa:6f:9e:a8:fd:f8:6f:f9:a7:58:e6:7c:d8:77:d7:3e:2f:10:
         3a:1f:74:10:fd:23:ea:9e:6f:4b:4c:23:82:90:1c:21:cf:00:
         4f:75:ea:0f:ec:0d:1f:f0:32:e9:37:a5:5f:4c:0f:da:ca:fe:
         9e:1a:5a:3f:30:51:87:1e:59:26:4a:44:dd:cb:d6:eb:33:46:
         35:c7:ff:2e:24:80:12:6d:6e:e1:be:04:1e:cd:6a:09:da:7f:
         b7:3a:0d:35:90:0c:e6:c0:5d:b4:5a:b9:45:6d:b6:ce:21:58:
         b6:52:55:d3
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBaDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
NEFEMUFGMTEwLwYDVQQFEyg4MEQ0MzVCQkM3NzA5NEU4NUI3QkYzMDgyNTgwRDEy
N0I5MTA3NzlFMB4XDTI0MDUyNzAyMzIyMFoXDTI0MDUyOTAyMzIyMFowGDEWMBQG
A1UEAxMNNjY1M2YwYjQtMzhlODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANMP/YuoigLrAUfnKTvHVrVpFZS6g/qYp5vY9UxWe0GIDERdX8zTzcT94kan
oFkmoLxsQAhL754HIIsGy8rw5jwGnh1EYlRL8f9WZmDmzxCgy2juvmeeuvgmCDED
Gc1a6tdDY9rZ4CbrYjtXkQKyTNgxRJHlVH+9WP++vmHXEcWgQqxYDH+OG0v+9JRa
DP+cEa2O/fhDDK+G+QLnDka7LY/LjnHX/N7A2NMmMhdyA4Q5TeVYkiwF6yIHREzW
SZFUqS9Jw1JYnTN9Pyk2cvMR1Dtg5z7VCXb3zDfQeZ3d3wNRKYHsQ0ppjnnY7mnm
2Dd7+ms2M5GPFRyzuT6gbgjopVECAwEAAaOCArgwggK0MB0GA1UdDgQWBBQUTJ0f
7vEEMZ4vXpDbTJn6c3iKezAfBgNVHSMEGDAWgBSA1DW7x3CU6Ft78wglgNEnuRB3
njAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTRBRDEvMjI4RjVCMzJDRjAxMTFFRTk0RjU4NkI5Nzc1NDEyRTYvZ05RMXU4
ZHdsT2hiZV9NSUpZRFJKN2tRZDU0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZ05RMXU4ZHdsT2hiZV9NSUpZRFJKN2tRZDU0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY1NEFEMS8yMjhGNUIzMkNGMDExMUVFOTRGNTg2Qjk3NzU0
MTJFNi9nTlExdThkd2xPaGJlX01JSllEUko3a1FkNTQubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBACsjbW+EGP43zu0FERBA4Tc6SHZXN5FF
C4Pn3VuveGgZWsc18IKVahstyFMlj4U+Lx995ost99IuTUsJiH4R5jcl7oW1MKS9
1e/1FBfvRG/zV+akMkwfXoCSBefk0dtsEP2zxaKwFLxfQm9TrXa36iCOyLi8D3yx
M6S3AWrocEf+ZaYxoKj4xnoLpW91H1gOIfpvnqj9+G/5p1jmfNh31z4vEDofdBD9
I+qeb0tMI4KQHCHPAE916g/sDR/wMuk3pV9MD9rK/p4aWj8wUYceWSZKRN3L1usz
RjXH/y4kgBJtbuG+BB7Nagnaf7c6DTWQDObAXbRauUVtts4hWLZSVdM=
-----END CERTIFICATE-----
Generated at Mon May 27 04:53:34 2024 by rpki-client on console-fra.rpki-client.org