Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
File:                     2_aMnFwB1o68DJDe5MB0naI6L9Y.mft (raw, json)
Hash identifier:          vxVOaiODD+6ozmgrDPj6CvNxtQTo60iS3xZvCaA1yJU=
Subject key identifier:   88:61:EE:63:8B:25:43:30:7C:CB:50:57:7E:60:5D:65:FE:D6:00:64
Authority key identifier: DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
Certificate issuer:       /CN=F36576E8AF/serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Certificate serial:       02C0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
Manifest number:          02BD
Signing time:             Fri 03 May 2024 01:53:53 +0000
Manifest this update:     Fri 03 May 2024 01:53:52 +0000
Manifest next update:     Sun 05 May 2024 01:53:52 +0000
Files and hashes:         1: 2_aMnFwB1o68DJDe5MB0naI6L9Y.crl (hash: dt+EU70gR0mkQDQUqf/HzBCSjmn28jmixZh2GnMxtMs=)
                          2: E10AF0E22C4211EEB4DC88104AD9E6FC.roa (hash: 42KgK6RdN4y6CGvKncWwBdL1NNaaBRBg0A8wytUPgDU=)
                          3: 94A6F8682C4211EE9CAAB80F4AD9E6FC.roa (hash: o0TXx110b3JBiu3Cl6xOs7wBGLlTo9OQb+P0VILZhd0=)
                          4: 95E5589CFCF911EC91C59591F1222468.roa (hash: rnLUsfXlrYCyRp7IztJ9xzb5+MMJaSe1lmd7KitFfus=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36576E8AF/serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
        Validity
            Not Before: May  3 01:53:52 2024 GMT
            Not After : May  5 01:53:52 2024 GMT
        Subject: CN=663443b1-0a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:ac:b6:cb:1c:05:32:31:d9:39:d5:f0:f9:
                    eb:72:ad:98:f7:07:51:64:0c:0b:5f:d1:a1:ac:fc:
                    b8:d9:4f:43:e2:e5:3b:c3:72:e8:5f:51:a1:bf:92:
                    07:18:42:54:07:dd:d2:5e:3c:9c:3c:2a:47:b2:62:
                    82:a5:c3:cc:47:6b:20:74:5e:01:b3:e5:69:39:b3:
                    7f:f0:23:b4:47:2b:ce:29:76:1d:bd:3c:38:15:c4:
                    bc:47:9e:f3:28:d5:8c:9a:fc:3d:4e:5d:2b:87:cb:
                    39:2f:fd:cd:70:98:e3:8f:ac:5e:3a:b1:da:83:15:
                    dd:b2:0b:b1:a3:82:da:71:33:bb:a1:fb:25:43:40:
                    32:b9:c1:79:5c:79:68:c4:09:b1:c6:4e:c2:b2:a9:
                    18:61:e6:78:55:91:59:1f:7a:df:80:10:b2:cc:65:
                    cd:32:01:73:0c:5e:b0:b0:f3:48:09:59:5d:26:64:
                    54:80:f1:cd:4b:f4:a3:f8:ff:6d:4e:2e:c9:1a:c0:
                    b5:c6:1b:51:b9:1e:33:28:b9:a2:1d:57:b6:77:de:
                    71:d8:f9:2a:f1:11:db:8d:43:7b:7b:15:6a:ac:ba:
                    ee:ba:84:c6:d4:23:e3:30:90:dd:dd:df:71:0d:81:
                    25:dd:78:d1:1c:73:d2:7c:15:ad:17:c3:e3:46:3a:
                    a2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:61:EE:63:8B:25:43:30:7C:CB:50:57:7E:60:5D:65:FE:D6:00:64
            X509v3 Authority Key Identifier:
                keyid:DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ea:af:cd:1f:0c:5e:51:4a:19:74:b9:39:c3:a6:64:24:06:
         7e:63:77:1b:5f:43:2e:1a:2e:0e:14:b5:93:68:eb:ba:9d:3d:
         c6:e3:0e:e0:d2:aa:1b:a8:66:27:41:50:d8:54:81:5e:d8:6b:
         29:23:24:cc:45:97:fd:2a:60:9d:7e:be:e9:02:dd:81:a5:b5:
         df:4a:2e:d5:9e:a6:13:91:a8:af:34:b2:66:78:52:d3:46:54:
         18:87:2b:34:0e:0b:c1:19:e0:b9:09:da:71:86:85:87:20:6e:
         d7:51:e7:4f:44:52:4e:24:93:2b:5d:36:71:99:15:fa:e4:7d:
         e1:03:ca:f0:28:ac:ed:98:73:fe:17:92:d2:7f:e9:1c:09:d7:
         b4:29:b1:1e:c4:31:28:5e:76:e0:62:fc:4d:70:bd:c8:17:37:
         22:ee:75:34:0c:8f:a6:2e:12:8e:e8:2d:d2:10:e0:b8:bd:8b:
         cf:af:9f:10:6d:a8:e9:41:78:71:4d:04:ea:5e:33:13:4e:66:
         f5:66:0a:52:3e:9e:cc:a9:e2:3e:15:5d:f9:8b:0f:0c:3c:c5:
         72:7d:50:5a:54:9f:7e:a5:56:16:e6:ab:10:d3:a9:b8:c3:8b:
         80:3b:ee:bb:68:54:e1:29:0a:ac:97:ac:d4:e2:8e:8e:fa:6a:
         be:e3:01:5e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTc2RThBRjExMC8GA1UEBRMoREJGNjhDOUM1QzAxRDY4RUJDMEM5MERFRTRDMDc0
OURBMjNBMkZENjAeFw0yNDA1MDMwMTUzNTJaFw0yNDA1MDUwMTUzNTJaMBgxFjAU
BgNVBAMTDTY2MzQ0M2IxLTBhMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/nKy2yxwFMjHZOdXw+etyrZj3B1FkDAtf0aGs/LjZT0Pi5TvDcuhfUaG/
kgcYQlQH3dJePJw8KkeyYoKlw8xHayB0XgGz5Wk5s3/wI7RHK84pdh29PDgVxLxH
nvMo1Yya/D1OXSuHyzkv/c1wmOOPrF46sdqDFd2yC7GjgtpxM7uh+yVDQDK5wXlc
eWjECbHGTsKyqRhh5nhVkVkfet+AELLMZc0yAXMMXrCw80gJWV0mZFSA8c1L9KP4
/21OLskawLXGG1G5HjMouaIdV7Z33nHY+SrxEduNQ3t7FWqsuu66hMbUI+MwkN3d
33ENgSXdeNEcc9J8Fa0Xw+NGOqLxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiGHu
Y4slQzB8y1BXfmBdZf7WAGQwHwYDVR0jBBgwFoAU2/aMnFwB1o68DJDe5MB0naI6
L9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU3NkU4L0MzODA4OTg2RkM2MTExRUNCMTdFMjJBQkYxMjIyNDY4LzJfYU1u
RndCMW82OERKRGU1TUIwbmFJNkw5WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJfYU1uRndCMW82OERKRGU1TUIwbmFJNkw5WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTc2RTgvQzM4MDg5ODZGQzYxMTFFQ0IxN0UyMkFCRjEy
MjI0NjgvMl9hTW5Gd0IxbzY4REpEZTVNQjBuYUk2TDlZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBm6q/NHwxeUUoZdLk5w6ZkJAZ+Y3cb
X0MuGi4OFLWTaOu6nT3G4w7g0qobqGYnQVDYVIFe2GspIyTMRZf9KmCdfr7pAt2B
pbXfSi7VnqYTkaivNLJmeFLTRlQYhys0DgvBGeC5CdpxhoWHIG7XUedPRFJOJJMr
XTZxmRX65H3hA8rwKKztmHP+F5LSf+kcCde0KbEexDEoXnbgYvxNcL3IFzci7nU0
DI+mLhKO6C3SEOC4vYvPr58QbajpQXhxTQTqXjMTTmb1ZgpSPp7MqeI+FV35iw8M
PMVyfVBaVJ9+pVYW5qsQ06m4w4uAO+67aFThKQqsl6zU4o6O+mq+4wFe
-----END CERTIFICATE-----
Generated at Fri May 3 03:10:07 2024 by rpki-client on console-ams.rpki-client.org