Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File:                     3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier:          ROKplUvLRMXzkQ7NU3uvaSOEMCX01kj3as7zf6zFoAQ=
Subject key identifier:   8D:1C:03:8D:3B:21:41:49:B6:F6:5E:0E:94:CB:BC:D9:4B:94:CB:98
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer:       /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial:       012B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number:          012A
Signing time:             Fri 24 May 2024 02:18:16 +0000
Manifest this update:     Fri 24 May 2024 02:18:15 +0000
Manifest next update:     Sun 26 May 2024 02:18:15 +0000
Files and hashes:         1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: Pfd4C07xKSotMuVipOj0ZvPK4GabIAh7HBKmd5HfQ6k=)
                          2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                          rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
        Validity
            Not Before: May 24 02:18:15 2024 GMT
            Not After : May 26 02:18:15 2024 GMT
        Subject: CN=664ff8e8-fe3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:86:17:e4:f3:94:0a:ef:43:8c:c1:60:cb:
                    fa:5f:a6:57:d1:5f:2b:5f:d2:30:8a:dc:75:b4:56:
                    52:a2:9c:c2:1b:1d:7f:07:70:a8:a2:7a:0a:59:ae:
                    08:e3:6e:56:02:75:61:61:54:b6:9a:bf:96:32:77:
                    7d:f9:40:4c:74:8a:21:dd:2e:12:dd:d0:af:a0:8f:
                    28:de:13:f7:28:70:21:36:b7:df:3f:85:28:c7:ca:
                    d2:bd:7a:ac:e2:49:a7:14:fc:0b:95:c4:3e:61:f5:
                    1d:fc:98:38:f3:6e:50:17:53:5a:8d:e9:be:03:02:
                    b0:45:9c:72:dc:10:5f:49:7b:a9:ac:a2:7e:2b:5c:
                    0d:c3:d6:bd:20:eb:ac:f8:f3:e9:12:69:a8:13:95:
                    4c:86:1f:d8:fa:35:06:d6:61:56:d9:63:b9:79:8d:
                    53:40:0d:23:5f:ba:a7:7d:53:84:2e:b5:1d:87:66:
                    d0:bb:40:f2:86:e6:a8:5c:61:a7:d8:3b:ba:d1:de:
                    85:32:9e:40:1e:1e:dd:fc:ff:92:95:6c:94:09:44:
                    17:5b:cc:42:91:1f:41:08:d5:fb:8f:8e:84:dc:4d:
                    d8:36:0f:51:5c:32:1c:6b:03:8b:ec:0b:17:73:65:
                    b7:d4:16:00:71:76:c4:f7:c7:f8:66:a9:3e:2c:a0:
                    e7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1C:03:8D:3B:21:41:49:B6:F6:5E:0E:94:CB:BC:D9:4B:94:CB:98
            X509v3 Authority Key Identifier:
                keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:7b:58:62:60:e7:fe:37:9f:3f:9c:f7:53:0f:18:ac:cc:f9:
         78:cb:93:7e:05:76:28:c3:c7:23:f2:17:e2:bd:77:b6:78:98:
         77:c1:8b:fc:a4:80:cf:05:7d:90:5e:a3:f3:0f:6e:43:37:c7:
         db:8b:87:d7:c2:62:7a:fe:a5:57:32:66:d1:5c:34:8a:92:58:
         a9:5a:aa:38:30:56:d9:76:86:bd:44:82:10:4e:9a:7d:04:f2:
         90:3d:25:8b:7f:9b:15:67:2c:d3:77:06:ff:cd:a3:e3:b0:97:
         2d:37:c8:35:15:7e:f2:08:6b:65:5d:50:27:5b:8e:7b:a8:66:
         53:c1:e6:d1:a1:7f:30:0e:83:ef:a2:7e:9f:be:c2:d2:dc:00:
         05:81:09:f7:ef:76:b5:fd:c4:60:bd:83:37:1b:47:2f:89:35:
         e6:0e:7c:89:86:8e:d8:84:34:02:36:83:dd:49:e2:27:34:60:
         8c:c5:6f:7b:48:b8:de:a3:00:40:c9:66:f2:70:c8:e2:1f:db:
         79:2c:d3:09:60:71:29:6e:a7:6a:bc:c7:94:b7:67:1d:b6:69:
         e0:77:0c:ab:03:fa:a3:78:a7:4d:e0:eb:f3:35:84:8f:af:91:
         55:2a:03:c8:47:e3:95:bc:dc:5f:ab:27:0d:98:3a:9c:e2:96:
         ab:06:40:74
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICASswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhDRkVBUjExMC8GA1UEBRMoRERDQjRDOUM1QkEyMkQ4ODlGMjUwOTJEQzVDRUM5
MjVCQTg0M0I3ODAeFw0yNDA1MjQwMjE4MTVaFw0yNDA1MjYwMjE4MTVaMBgxFjAU
BgNVBAMTDTY2NGZmOGU4LWZlM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/oIYX5POUCu9DjMFgy/pfplfRXytf0jCK3HW0VlKinMIbHX8HcKiiegpZ
rgjjblYCdWFhVLaav5Yyd335QEx0iiHdLhLd0K+gjyjeE/cocCE2t98/hSjHytK9
eqziSacU/AuVxD5h9R38mDjzblAXU1qN6b4DArBFnHLcEF9Je6mson4rXA3D1r0g
66z48+kSaagTlUyGH9j6NQbWYVbZY7l5jVNADSNfuqd9U4QutR2HZtC7QPKG5qhc
YafYO7rR3oUynkAeHt38/5KVbJQJRBdbzEKRH0EI1fuPjoTcTdg2D1FcMhxrA4vs
CxdzZbfUFgBxdsT3x/hmqT4soOf/AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUjRwD
jTshQUm29l4OlMu82UuUy5gwHwYDVR0jBBgwFoAU3ctMnFuiLYifJQktxc7JJbqE
O3gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4Q0ZFL0E1RjI3MUVBMzc1NzExRUVBQUFBNTMxODRBRDlFNkZDLzNjdE1u
RnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNjdE1uRnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjhDRkUvQTVGMjcxRUEzNzU3MTFFRUFBQUE1MzE4NEFEOUU2
RkMvM2N0TW5GdWlMWWlmSlFrdHhjN0pKYnFFTzNnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCqe1hiYOf+N58/nPdTDxiszPl4y5N+BXYo
w8cj8hfivXe2eJh3wYv8pIDPBX2QXqPzD25DN8fbi4fXwmJ6/qVXMmbRXDSKklip
Wqo4MFbZdoa9RIIQTpp9BPKQPSWLf5sVZyzTdwb/zaPjsJctN8g1FX7yCGtlXVAn
W457qGZTwebRoX8wDoPvon6fvsLS3AAFgQn373a1/cRgvYM3G0cviTXmDnyJho7Y
hDQCNoPdSeInNGCMxW97SLjeowBAyWbycMjiH9t5LNMJYHEpbqdqvMeUt2cdtmng
dwyrA/qjeKdN4OvzNYSPr5FVKgPIR+OVvNxfqycNmDqc4parBkB0
-----END CERTIFICATE-----
Generated at Fri May 24 04:35:51 2024 by rpki-client on console-ams.rpki-client.org