Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
File:                     3XSZqMjBKrZ-FetJKAimku1LWfQ.mft (raw, json)
Hash identifier:          s7FIWMBrLAiQcB0QO3Mir3nI3kO8XqAfpq4X4MV9HjY=
Subject key identifier:   73:FD:36:9E:8D:2E:2A:9D:EC:BC:45:89:AA:0A:97:CF:32:CE:6A:94
Authority key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Certificate issuer:       /CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Certificate serial:       0457
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
Manifest number:          0453
Signing time:             Sun 28 Apr 2024 01:26:34 +0000
Manifest this update:     Sun 28 Apr 2024 01:26:34 +0000
Manifest next update:     Tue 30 Apr 2024 01:26:34 +0000
Files and hashes:         1: 3XSZqMjBKrZ-FetJKAimku1LWfQ.crl (hash: 10c243Ee2ar5iE75NkhodfR9tXQ5qFwJbTtgBTQEesQ=)
                          2: 070F2760F29911EDA25C144E4AD9E6FC.roa (hash: GrvI1abg2Gd+aHLPxabudCCsOf9yh/GweA93oui/3BU=)
                          3: EAF11992861611EDB82711AAF1222468.roa (hash: d1nrOPduQlx7uqYjDydPxBcSQGDAGmtbyhdJuJyFCUQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Apr 2024 00:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
        Validity
            Not Before: Apr 28 01:26:34 2024 GMT
            Not After : Apr 30 01:26:34 2024 GMT
        Subject: CN=662da5ca-aead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:5b:10:41:39:1a:e4:b1:48:d7:0c:49:ae:
                    99:96:62:42:65:4c:fa:76:d7:de:08:d9:ed:5b:b7:
                    56:13:49:d2:4f:78:32:d5:9e:2c:19:9a:ad:ee:97:
                    48:8b:c4:2e:82:f3:07:16:7d:77:9a:f6:e0:9c:5e:
                    e5:64:8a:b1:c8:76:be:23:f6:ee:9d:12:f1:41:70:
                    55:c8:64:18:ac:1b:15:7a:7f:57:d1:83:3b:7a:c9:
                    bc:b5:1d:64:f6:35:11:4e:fa:14:b1:76:80:08:37:
                    cc:5d:4f:5d:d6:23:89:79:3d:a8:28:4d:f5:25:4c:
                    6a:87:42:30:4b:fc:22:de:81:91:62:87:f5:af:21:
                    da:86:b0:b9:8e:c4:c1:d3:ae:9d:c2:a8:73:6a:fd:
                    a3:c7:d7:80:1b:87:d9:36:53:86:56:cc:cb:94:8d:
                    c3:c9:bf:ff:85:07:a9:a5:59:0d:4e:bc:95:c4:2e:
                    ef:a9:f7:1b:02:57:3f:a9:f8:8d:53:4c:b6:32:91:
                    44:09:32:46:05:63:9f:9f:45:1d:ea:2a:1a:32:52:
                    dc:1d:6b:bc:36:c7:30:b7:fb:11:c0:cb:b4:28:d0:
                    4d:4e:14:d1:ea:56:47:c3:2a:83:ab:49:5b:de:59:
                    d2:37:be:92:87:a5:85:28:eb:fe:4b:e3:e8:a4:dd:
                    bd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FD:36:9E:8D:2E:2A:9D:EC:BC:45:89:AA:0A:97:CF:32:CE:6A:94
            X509v3 Authority Key Identifier:
                keyid:DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:03:ca:b9:88:ab:3e:5e:1c:af:c8:89:68:a1:fb:95:b4:5c:
         5d:1b:f8:96:31:21:d0:ba:1f:3a:22:f4:03:71:9b:56:5f:d0:
         81:2b:9a:08:2b:82:60:5b:35:3d:75:7a:82:c3:27:3c:a3:8d:
         75:17:b8:1d:0a:eb:23:e1:5a:91:bb:f9:6c:d9:b1:d2:54:12:
         fe:f9:34:ca:24:13:58:8a:92:4c:05:ed:aa:21:80:44:86:1f:
         23:ec:d7:5e:fa:1e:fb:73:db:aa:e8:8a:2f:ef:32:ca:4f:95:
         e6:2a:6b:a8:5f:69:03:cb:19:0f:b9:74:50:33:20:e9:4b:b8:
         eb:8d:ca:3b:c4:56:a4:da:de:52:aa:17:e7:34:c5:f0:0f:b8:
         f2:e0:fb:47:27:34:a1:e1:ee:c7:d1:66:10:04:ca:7c:05:27:
         bf:8c:99:da:e9:0c:f0:9c:1e:b9:f6:fc:66:f5:1d:0c:a2:7c:
         c5:34:6f:b0:b4:72:b3:13:fc:e4:f0:d2:97:7c:4f:9a:a5:8e:
         8d:8c:46:74:b9:c0:a0:d6:d1:ca:6d:41:3c:ae:26:f0:78:13:
         3d:05:cc:61:83:0d:a6:f1:56:c2:c2:62:d7:df:79:b2:e7:6e:
         ec:c8:06:94:37:b0:ba:2a:cc:32:fd:de:3f:6c:72:f5:43:5a:
         22:32:b3:c2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUM3OUVBRjExMC8GA1UEBRMoREQ3NDk5QThDOEMxMkFCNjdFMTVFQjQ5MjgwOEE2
OTJFRDRCNTlGNDAeFw0yNDA0MjgwMTI2MzRaFw0yNDA0MzAwMTI2MzRaMBgxFjAU
BgNVBAMTDTY2MmRhNWNhLWFlYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRBlsQQTka5LFI1wxJrpmWYkJlTPp2194I2e1bt1YTSdJPeDLVniwZmq3u
l0iLxC6C8wcWfXea9uCcXuVkirHIdr4j9u6dEvFBcFXIZBisGxV6f1fRgzt6yby1
HWT2NRFO+hSxdoAIN8xdT13WI4l5PagoTfUlTGqHQjBL/CLegZFih/WvIdqGsLmO
xMHTrp3CqHNq/aPH14Abh9k2U4ZWzMuUjcPJv/+FB6mlWQ1OvJXELu+p9xsCVz+p
+I1TTLYykUQJMkYFY5+fRR3qKhoyUtwda7w2xzC3+xHAy7Qo0E1OFNHqVkfDKoOr
SVveWdI3vpKHpYUo6/5L4+ik3b0RAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUc/02
no0uKp3svEWJqgqXzzLOapQwHwYDVR0jBBgwFoAU3XSZqMjBKrZ+FetJKAimku1L
WfQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVDNzlFLzFGQzM0QkU2QkVEQTExRUI4RjVDRTI0M0Y4QUVBMjI4LzNYU1px
TWpCS3JaLUZldEpLQWlta3UxTFdmUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzNYU1pxTWpCS3JaLUZldEpLQWlta3UxTFdmUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUM3OUUvMUZDMzRCRTZCRURBMTFFQjhGNUNFMjQzRjhB
RUEyMjgvM1hTWnFNakJLclotRmV0SktBaW1rdTFMV2ZRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCiA8q5iKs+XhyvyIloofuVtFxdG/iW
MSHQuh86IvQDcZtWX9CBK5oIK4JgWzU9dXqCwyc8o411F7gdCusj4VqRu/ls2bHS
VBL++TTKJBNYipJMBe2qIYBEhh8j7Nde+h77c9uq6Iov7zLKT5XmKmuoX2kDyxkP
uXRQMyDpS7jrjco7xFak2t5SqhfnNMXwD7jy4PtHJzSh4e7H0WYQBMp8BSe/jJna
6QzwnB659vxm9R0MonzFNG+wtHKzE/zk8NKXfE+apY6NjEZ0ucCg1tHKbUE8ribw
eBM9Bcxhgw2m8VbCwmLX33my527syAaUN7C6Kswy/d4/bHL1Q1oiMrPC
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:10:31 2024 by rpki-client on console-ams.rpki-client.org