Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
File:                     -_THz17IYtQtyBCgQwAhG6K3xQg.mft (raw, json)
Hash identifier:          yd6KiqP6P5o1ufkX4pOdRZyeTR0+x5hRyTl8S/SbyIc=
Subject key identifier:   78:AC:5D:05:1D:10:E7:C3:EF:F5:9B:49:E9:0B:21:00:E9:0C:0E:AF
Authority key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
Certificate issuer:       /CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Certificate serial:       78
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
Manifest number:          78
Signing time:             Sun 24 Nov 2024 02:47:44 +0000
Manifest this update:     Sun 24 Nov 2024 02:47:43 +0000
Manifest next update:     Tue 26 Nov 2024 02:47:43 +0000
Files and hashes:         1: -_THz17IYtQtyBCgQwAhG6K3xQg.crl (hash: nkeg3lyICtFaU5wY5bQ7nz1GYE441bWt0tua2P0ZuO4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
        Validity
            Not Before: Nov 24 02:47:43 2024 GMT
            Not After : Nov 26 02:47:43 2024 GMT
        Subject: CN=674293cf-4a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:ee:de:68:64:09:8c:b7:a1:b4:32:1e:61:
                    79:bc:5e:ec:a2:de:d4:02:8e:31:7b:8a:99:43:4c:
                    be:5b:9d:05:ea:5d:09:5c:9a:32:95:d6:a8:93:10:
                    a3:5e:c0:f4:f8:28:80:52:d6:de:62:9c:27:85:35:
                    a8:98:d0:a2:a8:ca:3f:6b:3b:11:06:93:b5:9c:95:
                    3c:da:29:5b:6f:98:72:f5:eb:0a:2d:d5:92:83:69:
                    e0:47:2f:94:68:84:e9:16:29:17:5e:6b:d0:b4:1a:
                    26:b3:db:50:23:c6:dd:8b:5b:46:77:24:5d:dc:e4:
                    9d:ff:64:b2:d6:87:2f:fd:28:69:de:49:ab:a7:b7:
                    13:b6:db:e4:74:62:4c:73:e8:6c:84:9a:c8:4b:cc:
                    9d:50:27:d6:6a:9c:2a:6e:cd:0b:7d:e3:a3:4e:ea:
                    e8:db:1e:b4:79:62:e1:d1:b5:ca:6d:a9:9f:f5:37:
                    91:a1:87:0a:38:a2:58:66:bd:8c:51:2f:72:33:c2:
                    33:29:a4:b7:ca:44:36:8f:dd:2d:7e:c5:26:34:74:
                    bf:12:9f:84:af:d4:63:46:69:7b:cc:b2:22:ce:4a:
                    49:1c:23:2a:b4:6a:69:82:bf:d3:d8:d7:0f:0c:d3:
                    d7:13:d2:44:66:f6:ce:c6:fe:b8:ee:e4:29:7c:6a:
                    5a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AC:5D:05:1D:10:E7:C3:EF:F5:9B:49:E9:0B:21:00:E9:0C:0E:AF
            X509v3 Authority Key Identifier:
                keyid:FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:69:74:e1:52:e3:9e:75:dc:9a:53:a8:b2:2d:50:cd:2d:c1:
         bb:a6:04:c0:28:1c:29:c2:a5:d1:31:98:08:0f:c0:82:8a:be:
         6d:83:e8:87:8e:d1:7d:50:1f:e6:7e:ea:30:61:bc:76:c2:90:
         34:e4:2e:55:cd:f9:97:c9:f4:9f:69:76:4c:43:26:54:a2:0e:
         96:a0:50:07:77:37:91:6d:61:e3:16:45:86:da:bd:16:7f:16:
         33:ae:a1:44:cd:b2:da:5c:73:fb:61:42:33:62:c0:34:05:b8:
         17:8d:e9:f9:41:45:64:a6:01:0b:37:2b:32:c5:95:bf:44:d6:
         c5:c9:0e:22:42:7a:15:18:a1:a2:70:4a:82:46:84:e3:99:c3:
         ef:6d:5a:5d:09:84:aa:5b:f0:55:ff:b0:ac:19:4f:2e:14:00:
         a3:bc:89:52:b5:45:be:b8:f7:4d:e3:ef:48:f6:3e:80:7b:bc:
         d7:f7:99:30:d6:22:a6:ab:04:fa:b2:59:2f:d7:ab:f1:0e:d2:
         fe:85:01:d1:c7:6b:eb:91:b4:b2:d6:a7:bb:5a:a1:ab:8c:be:
         6b:d2:c2:b5:3e:8b:62:73:c7:bf:12:a3:ed:ad:0c:f5:88:35:
         2b:49:89:c0:fc:45:30:08:ec:4e:86:34:4d:a0:25:ec:43:86:
         46:88:d2:64
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBeDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
ODU4M0FGMTEwLwYDVQQFEyhGQkY0QzdDRjVFQzg2MkQ0MkRDODEwQTA0MzAwMjEx
QkEyQjdDNTA4MB4XDTI0MTEyNDAyNDc0M1oXDTI0MTEyNjAyNDc0M1owGDEWMBQG
A1UEAxMNNjc0MjkzY2YtNGE4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALoo7t5oZAmMt6G0Mh5hebxe7KLe1AKOMXuKmUNMvludBepdCVyaMpXWqJMQ
o17A9PgogFLW3mKcJ4U1qJjQoqjKP2s7EQaTtZyVPNopW2+YcvXrCi3VkoNp4Ecv
lGiE6RYpF15r0LQaJrPbUCPG3YtbRnckXdzknf9kstaHL/0oad5Jq6e3E7bb5HRi
THPobISayEvMnVAn1mqcKm7NC33jo07q6NsetHli4dG1ym2pn/U3kaGHCjiiWGa9
jFEvcjPCMymkt8pENo/dLX7FJjR0vxKfhK/UY0Zpe8yyIs5KSRwjKrRqaYK/09jX
DwzT1xPSRGb2zsb+uO7kKXxqWiUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBR4rF0F
HRDnw+/1m0npCyEA6QwOrzAfBgNVHSMEGDAWgBT79MfPXshi1C3IEKBDACEborfF
CDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTg1ODMvNkU1NTg5NDA0RTRDMTFFRkIzRjA2N0FGNzYyRTk1MUEvLV9USHox
N0lZdFF0eUJDZ1F3QWhHNkszeFFnLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvLV9USHoxN0lZdFF0eUJDZ1F3QWhHNkszeFFnLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY1ODU4My82RTU1ODk0MDRFNEMxMUVGQjNGMDY3QUY3NjJF
OTUxQS8tX1RIejE3SVl0UXR5QkNnUXdBaEc2SzN4UWcubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAExpdOFS45513JpTqLItUM0twbumBMAo
HCnCpdExmAgPwIKKvm2D6IeO0X1QH+Z+6jBhvHbCkDTkLlXN+ZfJ9J9pdkxDJlSi
DpagUAd3N5FtYeMWRYbavRZ/FjOuoUTNstpcc/thQjNiwDQFuBeN6flBRWSmAQs3
KzLFlb9E1sXJDiJCehUYoaJwSoJGhOOZw+9tWl0JhKpb8FX/sKwZTy4UAKO8iVK1
Rb64903j70j2PoB7vNf3mTDWIqarBPqyWS/Xq/EO0v6FAdHHa+uRtLLWp7taoauM
vmvSwrU+i2Jzx78So+2tDPWINStJicD8RTAI7E6GNE2gJexDhkaI0mQ=
-----END CERTIFICATE-----
Generated at Sun Nov 24 05:19:31 2024 by rpki-client on console-ams.rpki-client.org