Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
File:                     fitobmq6qC0Tpu6fS-fmmmuN_3k.mft (raw, json)
Hash identifier:          T79QBLZSVPMVXO9jtZiRFrhrUkSEM8DeKw0fJ5/fbUY=
Subject key identifier:   BC:B2:ED:8B:1A:49:78:5F:83:77:D8:78:A5:90:8C:13:C8:43:01:10
Authority key identifier: 7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79
Certificate issuer:       /CN=F366AE59AR/serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
Certificate serial:       2D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
Manifest number:          2C
Signing time:             Sat 18 May 2024 02:37:33 +0000
Manifest this update:     Sat 18 May 2024 02:37:32 +0000
Manifest next update:     Mon 20 May 2024 02:37:32 +0000
Files and hashes:         1: fitobmq6qC0Tpu6fS-fmmmuN_3k.crl (hash: iDaFSKCFrdhNILbRSvwdo1HAhkEm1y+fc49K3mSSNMQ=)
                          2: D55071E2F57711EE9C79B75F775412E6.roa (hash: JwIZwppDkh7nSLuQ5FmIaDKSeTXhtwFxqvQi4jhkWJQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                          rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AR/serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
        Validity
            Not Before: May 18 02:37:32 2024 GMT
            Not After : May 20 02:37:32 2024 GMT
        Subject: CN=6648146c-2b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c2:db:f8:65:6a:b2:35:af:b1:29:f6:0c:b0:
                    92:03:78:26:6b:56:4d:9b:dd:1d:e1:25:2b:88:1a:
                    b5:98:c3:cd:bd:2d:8c:43:5f:5e:4b:57:b7:c3:23:
                    c1:4d:c4:fe:c2:1b:ef:9a:fb:72:bb:df:14:8f:31:
                    69:e1:c5:f3:ed:04:af:90:fe:da:af:99:68:ba:08:
                    2b:31:01:a2:ef:67:e3:4a:ef:34:b6:8a:f2:85:d4:
                    46:40:96:53:34:d0:05:3e:cc:7a:ca:22:dc:64:21:
                    e3:9c:01:67:59:aa:ae:c6:c7:0b:76:ed:03:85:11:
                    ac:6d:73:b9:86:cb:a4:95:e6:e9:47:d4:66:0b:85:
                    b0:00:7a:07:74:bd:1d:21:49:30:5e:69:4c:9b:a4:
                    c1:4e:63:92:e0:6b:7e:ae:f4:1a:66:8c:12:a7:a0:
                    7b:e4:33:8b:9a:b9:a6:88:78:16:01:fd:8f:6e:01:
                    68:82:14:70:4a:69:8e:06:86:38:6f:0d:ef:50:0a:
                    71:0e:53:15:94:62:5c:19:45:5b:4b:79:52:04:1c:
                    bf:c4:fb:85:94:65:87:09:6d:7d:4d:a2:3f:48:32:
                    82:ce:98:45:75:85:89:37:81:4f:1e:b6:ae:4d:54:
                    c8:3f:35:e5:71:01:2e:94:f7:31:b5:16:d2:1e:4e:
                    ea:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B2:ED:8B:1A:49:78:5F:83:77:D8:78:A5:90:8C:13:C8:43:01:10
            X509v3 Authority Key Identifier:
                keyid:7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ba:fd:7a:3d:7a:ce:45:7f:d1:7e:15:14:49:67:22:68:5b:
         cc:fe:e7:3f:46:ec:71:4d:4d:f5:69:e4:21:43:a6:7a:b8:f1:
         77:7c:97:74:fa:38:f8:19:29:30:f7:75:2e:5d:40:6b:bc:03:
         10:84:c6:60:f0:cd:fa:22:2c:0c:27:2c:2a:35:52:21:de:c5:
         1c:85:b2:57:cd:68:2d:29:1b:a2:2b:72:07:18:a2:bb:4f:2a:
         77:9e:e4:cc:46:77:ce:f3:d1:eb:68:c4:bc:68:f6:2c:e7:f5:
         0e:ed:49:f9:2a:2f:b0:08:b0:a8:b8:0c:70:50:00:91:97:2d:
         30:1a:c3:f9:d8:63:01:c8:ab:b4:ac:2e:17:aa:b6:14:35:b3:
         77:f8:5e:86:15:18:c1:70:d6:0c:72:de:72:5b:3d:21:8c:ef:
         a1:73:62:34:e7:d9:05:b5:16:d2:f1:a0:c1:80:a2:ae:76:57:
         48:52:7f:63:19:0f:52:39:ad:e3:b3:87:dc:10:07:af:6c:02:
         55:70:93:a8:26:3d:61:d8:2d:b6:78:5c:58:0f:3c:8f:0a:79:
         39:34:e4:37:cd:74:71:74:fd:64:a7:7f:bc:07:ae:cb:f8:aa:
         f8:6a:00:bb:42:22:69:3c:5d:52:2a:47:57:ac:a2:e9:cf:62:
         6f:dd:b2:d5
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBLTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
QUU1OUFSMTEwLwYDVQQFEyg3RTJCNjg2RTZBQkFBODJEMTNBNkVFOUY0QkU3RTY5
QTZCOERGRjc5MB4XDTI0MDUxODAyMzczMloXDTI0MDUyMDAyMzczMlowGDEWMBQG
A1UEAxMNNjY0ODE0NmMtMmI2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM7C2/hlarI1r7Ep9gywkgN4JmtWTZvdHeElK4gatZjDzb0tjENfXktXt8Mj
wU3E/sIb75r7crvfFI8xaeHF8+0Er5D+2q+ZaLoIKzEBou9n40rvNLaK8oXURkCW
UzTQBT7Mesoi3GQh45wBZ1mqrsbHC3btA4URrG1zuYbLpJXm6UfUZguFsAB6B3S9
HSFJMF5pTJukwU5jkuBrfq70GmaMEqege+Qzi5q5poh4FgH9j24BaIIUcEppjgaG
OG8N71AKcQ5TFZRiXBlFW0t5UgQcv8T7hZRlhwltfU2iP0gygs6YRXWFiTeBTx62
rk1UyD815XEBLpT3MbUW0h5O6o0CAwEAAaOCArUwggKxMB0GA1UdDgQWBBS8su2L
Gkl4X4N32HilkIwTyEMBEDAfBgNVHSMEGDAWgBR+K2huarqoLROm7p9L5+aaa43/
eTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NkFFNTkvQ0Y1RTM2QzJGNTc1MTFFRUEwMEJDRDRGNzc1NDEyRTYvZml0b2Jt
cTZxQzBUcHU2ZlMtZm1tbXVOXzNrLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
Zml0b2JtcTZxQzBUcHU2ZlMtZm1tbXVOXzNrLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY2QUU1OS9DRjVFMzZDMkY1NzUxMUVFQTAwQkNENEY3NzU0MTJF
Ni9maXRvYm1xNnFDMFRwdTZmUy1mbW1tdU5fM2subWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBACm6/Xo9es5Ff9F+FRRJZyJoW8z+5z9G7HFN
TfVp5CFDpnq48Xd8l3T6OPgZKTD3dS5dQGu8AxCExmDwzfoiLAwnLCo1UiHexRyF
slfNaC0pG6IrcgcYortPKnee5MxGd87z0etoxLxo9izn9Q7tSfkqL7AIsKi4DHBQ
AJGXLTAaw/nYYwHIq7SsLheqthQ1s3f4XoYVGMFw1gxy3nJbPSGM76FzYjTn2QW1
FtLxoMGAoq52V0hSf2MZD1I5reOzh9wQB69sAlVwk6gmPWHYLbZ4XFgPPI8KeTk0
5DfNdHF0/WSnf7wHrsv4qvhqALtCImk8XVIqR1esounPYm/dstU=
-----END CERTIFICATE-----
Generated at Sat May 18 03:48:47 2024 by rpki-client on console-fra.rpki-client.org