Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
File:                     3IJjhe1IHHwjMIBE24nEU5kq3E8.mft (raw, json)
Hash identifier:          TtSGRdBdBYMmIi4xvyXIW2eSdU6CitVMMvABcsdJspo=
Subject key identifier:   05:70:71:CC:61:A6:F5:A8:3E:21:80:2C:EE:74:B6:68:1B:8B:C5:8A
Authority key identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
Certificate issuer:       /CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Certificate serial:       03B5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
Manifest number:          03B3
Signing time:             Sun 24 Nov 2024 01:49:16 +0000
Manifest this update:     Sun 24 Nov 2024 01:49:15 +0000
Manifest next update:     Tue 26 Nov 2024 01:49:15 +0000
Files and hashes:         1: 3IJjhe1IHHwjMIBE24nEU5kq3E8.crl (hash: NFBwUSozImblWl719EAIC3mUn17GvTzCaW8zp6NlTfw=)
                          2: DAB5B58871A111EF9A6AEC6F762E951A.roa (hash: YivpnequhZt8XqJ2qMGWn/m6KFZdSXQEvVcrsKtKSmY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
                          rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949 (0x3b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
        Validity
            Not Before: Nov 24 01:49:15 2024 GMT
            Not After : Nov 26 01:49:15 2024 GMT
        Subject: CN=6742861c-f2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:ff:08:86:6a:13:71:07:d6:c8:4a:9a:22:
                    fd:21:10:d9:6e:14:d3:72:da:a9:ff:d6:4e:4b:88:
                    d3:1a:62:18:62:c3:ce:20:cf:b1:96:a8:bd:14:bd:
                    f9:7f:5d:44:26:0a:d8:19:b4:c8:e6:5d:0d:c7:d1:
                    4a:8e:10:48:e9:96:f9:86:58:07:a7:d8:6d:3f:3f:
                    07:d9:78:82:d7:e7:67:0e:d2:cd:dc:f4:6c:47:77:
                    e1:fb:4e:7a:1e:b5:b1:0e:03:88:0a:7d:d1:71:7b:
                    1f:1e:fa:cd:b9:e2:b2:1d:55:62:13:7c:2c:c5:27:
                    32:5e:9e:b7:c0:94:e1:ef:11:51:34:a3:a1:cb:0f:
                    48:05:79:3c:e2:4f:3d:8a:60:14:1b:6c:c6:41:6b:
                    cf:c6:8f:55:73:65:84:ef:22:63:a3:f9:d4:dd:da:
                    1d:f5:a7:ff:4d:60:ad:dd:84:47:c5:c2:cf:87:e6:
                    81:25:a2:40:5b:42:92:55:ec:e2:15:14:da:ae:c1:
                    b4:dc:8d:4b:cc:7e:73:27:e3:13:4f:ad:e3:ad:1f:
                    3b:6b:72:37:0a:fe:26:a8:ab:9a:89:ed:a8:75:d8:
                    b0:83:26:68:f9:36:de:0f:85:f6:6e:11:09:96:b4:
                    3a:a0:7b:ee:c6:26:74:3f:8b:a4:06:9f:44:5d:56:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:70:71:CC:61:A6:F5:A8:3E:21:80:2C:EE:74:B6:68:1B:8B:C5:8A
            X509v3 Authority Key Identifier:
                keyid:DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:dd:5d:f3:94:e6:be:1f:ce:57:e9:d6:fd:c7:4b:f1:d1:e0:
         f9:bd:a9:e7:f4:02:e2:b9:d1:84:e6:71:8b:7e:93:9b:5a:70:
         4e:2c:cc:a2:6a:ae:04:4e:11:13:f5:31:fe:b8:0b:e4:c6:cd:
         9c:a4:36:6b:3f:a6:17:f4:4a:fe:85:dc:8b:d6:1c:ca:d9:55:
         7e:c0:5a:ef:7f:f9:aa:e5:cc:38:01:cf:3e:07:71:b2:ba:7d:
         77:52:11:99:68:ae:95:e5:ea:9d:82:ed:9c:09:e6:07:82:9d:
         40:2c:c7:67:fd:e6:57:e8:a8:3d:30:1a:be:d6:c9:19:59:e7:
         65:24:cd:0f:06:f2:84:94:e9:38:53:c4:a8:27:50:9c:5a:11:
         5a:56:5a:be:f6:eb:d9:69:c3:2a:84:3e:02:b6:f2:32:b2:ee:
         77:3e:a3:a0:55:a8:5c:ff:78:d8:01:92:d8:1c:7e:73:72:22:
         2a:47:9a:84:21:82:0c:ce:f5:c2:38:63:84:50:59:6f:1c:3c:
         22:09:4d:3c:7d:b7:98:9d:27:02:66:a4:7b:1f:cb:a0:c0:13:
         87:4a:38:75:bc:7c:13:71:d1:b7:ec:b0:28:a3:3e:a8:19:0f:
         97:10:02:4c:ca:48:0b:ac:d1:09:9c:82:ff:82:73:b2:30:6e:
         fb:39:66:07
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA7UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUUwRUZBUjExMC8GA1UEBRMoREM4MjYzODVFRDQ4MUM3QzIzMzA4MDQ0REI4OUM0
NTM5OTJBREM0RjAeFw0yNDExMjQwMTQ5MTVaFw0yNDExMjYwMTQ5MTVaMBgxFjAU
BgNVBAMTDTY3NDI4NjFjLWYyZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNof8IhmoTcQfWyEqaIv0hENluFNNy2qn/1k5LiNMaYhhiw84gz7GWqL0U
vfl/XUQmCtgZtMjmXQ3H0UqOEEjplvmGWAen2G0/PwfZeILX52cO0s3c9GxHd+H7
TnoetbEOA4gKfdFxex8e+s254rIdVWITfCzFJzJenrfAlOHvEVE0o6HLD0gFeTzi
Tz2KYBQbbMZBa8/Gj1VzZYTvImOj+dTd2h31p/9NYK3dhEfFws+H5oElokBbQpJV
7OIVFNquwbTcjUvMfnMn4xNPreOtHztrcjcK/iaoq5qJ7ah12LCDJmj5Nt4PhfZu
EQmWtDqge+7GJnQ/i6QGn0RdVtfLAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUBXBx
zGGm9ag+IYAs7nS2aBuLxYowHwYDVR0jBBgwFoAU3IJjhe1IHHwjMIBE24nEU5kq
3E8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVFMEVGLzRBRkY5NEQ2REFBRTExRUM5OEI4RjBEM0YxMjIyNDY4LzNJSmpo
ZTFJSEh3ak1JQkUyNG5FVTVrcTNFOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNJSmpoZTFJSEh3ak1JQkUyNG5FVTVrcTNFOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NUUwRUYvNEFGRjk0RDZEQUFFMTFFQzk4QjhGMEQzRjEyMjI0
NjgvM0lKamhlMUlISHdqTUlCRTI0bkVVNWtxM0U4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ3V3zlOa+H85X6db9x0vx0eD5vann9ALi
udGE5nGLfpObWnBOLMyiaq4EThET9TH+uAvkxs2cpDZrP6YX9Er+hdyL1hzK2VV+
wFrvf/mq5cw4Ac8+B3Gyun13UhGZaK6V5eqdgu2cCeYHgp1ALMdn/eZX6Kg9MBq+
1skZWedlJM0PBvKElOk4U8SoJ1CcWhFaVlq+9uvZacMqhD4CtvIysu53PqOgVahc
/3jYAZLYHH5zciIqR5qEIYIMzvXCOGOEUFlvHDwiCU08fbeYnScCZqR7H8ugwBOH
Sjh1vHwTcdG37LAooz6oGQ+XEAJMykgLrNEJnIL/gnOyMG77OWYH
-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:14 2024 by rpki-client on console-fra.rpki-client.org