Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
File:                     mwftdzFoum4LC-Pl3LLPeB96yCo.mft (raw, json)
Hash identifier:          Tm2syzSvd9/5ZcaF2ZDXQC5c4S3zEtH+HFXmoOF5bdU=
Subject key identifier:   DA:72:BB:E2:85:9C:F9:2C:6E:F0:90:14:D0:9B:2A:04:CF:9F:8B:C1
Authority key identifier: 9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A
Certificate issuer:       /CN=F3668037RI/serialNumber=9B07ED773168BA6E0B0BE3E5DCB2CF781F7AC82A
Certificate serial:       0C04
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
Manifest number:          0C02
Signing time:             Fri 22 Nov 2024 00:48:13 +0000
Manifest this update:     Fri 22 Nov 2024 00:48:12 +0000
Manifest next update:     Sun 24 Nov 2024 00:48:12 +0000
Files and hashes:         1: mwftdzFoum4LC-Pl3LLPeB96yCo.crl (hash: iyhXqLgd5An29qM/VlRXUm66qteeauVuaEs0VVactdQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
                          rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3076 (0xc04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037RI/serialNumber=9B07ED773168BA6E0B0BE3E5DCB2CF781F7AC82A
        Validity
            Not Before: Nov 22 00:48:12 2024 GMT
            Not After : Nov 24 00:48:12 2024 GMT
        Subject: CN=673fd4cd-55e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:35:b1:e5:a2:1c:a1:48:5c:c6:b3:9a:33:e8:
                    b5:93:4f:68:12:f1:ea:0f:2f:ee:dd:d7:54:5b:71:
                    49:d8:58:9c:a0:38:13:27:b8:94:d8:78:28:31:fb:
                    b6:f3:5c:3e:54:f3:e5:f4:a2:71:43:53:f1:63:9f:
                    0e:ff:10:a8:4c:d1:9a:e7:21:30:b6:8f:f6:cd:8e:
                    4c:08:8c:87:9f:a4:38:b0:cf:da:9b:3a:53:6f:13:
                    57:69:c8:69:72:3a:d2:43:af:9e:44:a0:4b:73:e6:
                    39:96:20:66:7f:50:d9:8f:f9:de:61:c5:e3:86:2e:
                    3b:06:ff:58:54:87:e4:2b:58:a9:27:b9:f7:fb:57:
                    e1:09:84:9d:e7:d5:0c:75:77:6a:7c:03:29:5f:eb:
                    ca:50:ef:48:67:9c:3a:87:41:c8:23:a4:05:96:4e:
                    f2:3a:4a:ac:39:ef:02:8f:02:3d:ca:d8:cd:6f:f2:
                    28:1b:fe:f9:2e:bb:da:07:7f:2a:66:8a:0a:3c:26:
                    d9:05:b4:e7:80:da:30:23:bc:8f:18:15:e8:3c:a7:
                    b4:0c:6f:39:5e:55:f9:67:40:1f:f9:b1:ab:02:55:
                    04:76:9e:77:48:1d:30:ab:b3:39:f6:aa:f4:52:ff:
                    1a:33:85:55:00:58:50:fa:4d:1c:8c:06:6f:2b:14:
                    34:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:72:BB:E2:85:9C:F9:2C:6E:F0:90:14:D0:9B:2A:04:CF:9F:8B:C1
            X509v3 Authority Key Identifier:
                keyid:9B:07:ED:77:31:68:BA:6E:0B:0B:E3:E5:DC:B2:CF:78:1F:7A:C8:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/mwftdzFoum4LC-Pl3LLPeB96yCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/3B24CCAC6DC711E68C5C442DF8AEA228/mwftdzFoum4LC-Pl3LLPeB96yCo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:29:56:a2:68:c8:77:67:a3:86:9b:84:5a:92:2a:f3:0b:06:
         4a:a4:0d:a4:3f:ae:fc:ca:25:10:d5:46:f7:ba:0b:4c:62:10:
         90:89:56:28:64:9d:42:8b:c9:16:26:fb:97:74:f6:c2:e0:23:
         46:16:4e:ab:3e:fe:7d:7f:77:3a:c6:f7:6f:05:a1:98:10:b5:
         1a:5d:f7:ae:87:78:6a:18:2f:e3:56:27:a4:38:b2:25:db:73:
         49:ad:80:1c:0e:b6:30:c0:13:5f:18:c9:33:2b:a2:0d:c8:54:
         25:66:ed:b8:6d:ec:48:86:c9:af:6d:23:b9:ed:46:e8:35:06:
         25:3a:e8:f8:9c:fb:40:80:44:c7:4e:d4:7b:9a:15:96:1a:0b:
         09:3a:6c:3e:c3:79:6a:e3:d2:92:f2:55:be:2a:04:d5:c5:69:
         99:4b:99:f7:4f:26:14:e6:5a:c4:b1:53:9b:c5:68:01:6d:8e:
         2e:f4:dc:07:ed:f2:86:d3:ee:fb:5f:87:8e:42:ce:70:d1:2b:
         df:15:c5:0b:a7:0f:69:c4:a8:34:56:44:ee:69:de:2a:a3:c0:
         5e:44:8b:66:49:07:b7:95:51:a3:12:43:c2:b7:58:ab:a6:bf:
         b9:22:09:34:d4:21:e1:12:a9:33:e7:23:b5:6c:9f:55:12:4d:
         3e:65:2b:fe
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDAQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjgwMzdSSTExMC8GA1UEBRMoOUIwN0VENzczMTY4QkE2RTBCMEJFM0U1RENCMkNG
NzgxRjdBQzgyQTAeFw0yNDExMjIwMDQ4MTJaFw0yNDExMjQwMDQ4MTJaMBgxFjAU
BgNVBAMTDTY3M2ZkNGNkLTU1ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcNbHlohyhSFzGs5oz6LWTT2gS8eoPL+7d11RbcUnYWJygOBMnuJTYeCgx
+7bzXD5U8+X0onFDU/Fjnw7/EKhM0ZrnITC2j/bNjkwIjIefpDiwz9qbOlNvE1dp
yGlyOtJDr55EoEtz5jmWIGZ/UNmP+d5hxeOGLjsG/1hUh+QrWKknuff7V+EJhJ3n
1Qx1d2p8Aylf68pQ70hnnDqHQcgjpAWWTvI6Sqw57wKPAj3K2M1v8igb/vkuu9oH
fypmigo8JtkFtOeA2jAjvI8YFeg8p7QMbzleVflnQB/5sasCVQR2nndIHTCrszn2
qvRS/xozhVUAWFD6TRyMBm8rFDThAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU2nK7
4oWc+Sxu8JAU0JsqBM+fi8EwHwYDVR0jBBgwFoAUmwftdzFoum4LC+Pl3LLPeB96
yCowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4MDM3LzNCMjRDQ0FDNkRDNzExRTY4QzVDNDQyREY4QUVBMjI4L213ZnRk
ekZvdW00TEMtUGwzTExQZUI5NnlDby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L213ZnRkekZvdW00TEMtUGwzTExQZUI5NnlDby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjgwMzcvM0IyNENDQUM2REM3MTFFNjhDNUM0NDJERjhBRUEy
MjgvbXdmdGR6Rm91bTRMQy1QbDNMTFBlQjk2eUNvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC4KVaiaMh3Z6OGm4RakirzCwZKpA2kP678
yiUQ1Ub3ugtMYhCQiVYoZJ1Ci8kWJvuXdPbC4CNGFk6rPv59f3c6xvdvBaGYELUa
Xfeuh3hqGC/jViekOLIl23NJrYAcDrYwwBNfGMkzK6INyFQlZu24bexIhsmvbSO5
7UboNQYlOuj4nPtAgETHTtR7mhWWGgsJOmw+w3lq49KS8lW+KgTVxWmZS5n3TyYU
5lrEsVObxWgBbY4u9NwH7fKG0+77X4eOQs5w0SvfFcULpw9pxKg0VkTuad4qo8Be
RItmSQe3lVGjEkPCt1irpr+5Igk01CHhEqkz5yO1bJ9VEk0+ZSv+
-----END CERTIFICATE-----