Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.mft
File:                     byK7yHoPCEoE5IiukfRuyIoPtrs.mft (raw, json)
Hash identifier:          yXFeAcET8zOVrFZ/vBN6BER1LCdhbYuyl4q4bTUgggY=
Subject key identifier:   D3:2A:18:BD:DC:F2:6D:F3:CE:90:71:76:3E:46:10:EC:80:07:BF:B8
Authority key identifier: 6F:22:BB:C8:7A:0F:08:4A:04:E4:88:AE:91:F4:6E:C8:8A:0F:B6:BB
Certificate issuer:       /CN=F36709EDAF/serialNumber=6F22BBC87A0F084A04E488AE91F46EC88A0FB6BB
Certificate serial:       0153
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/byK7yHoPCEoE5IiukfRuyIoPtrs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.mft
Manifest number:          0150
Signing time:             Thu 21 Nov 2024 02:32:59 +0000
Manifest this update:     Thu 21 Nov 2024 02:32:58 +0000
Manifest next update:     Sat 23 Nov 2024 02:32:58 +0000
Files and hashes:         1: byK7yHoPCEoE5IiukfRuyIoPtrs.crl (hash: CcKN6PzhnpvBhZ4KM/gEuUf3ktYSDafe9F/nuph6hrY=)
                          2: 071179B6A99111EEACA6484F775412E6.roa (hash: zAp9wof5ZMQH3PsEdXrC4g1fzlJZDiNYk3CgTbvbu54=)
                          3: 41F9AFDEA97411EEB0AFAB9C775412E6.roa (hash: Pt7jFsZb/eRJPwvxWbE2QqRIPTR2VlpkPA1ZKM5aPIE=)
                          4: 0017E4D4A97211EEA3720099775412E6.roa (hash: H8fOPMFbPRz5oS0eFlNLre5s7jTcp4FGPiIDncTFMUk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/byK7yHoPCEoE5IiukfRuyIoPtrs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36709EDAF/serialNumber=6F22BBC87A0F084A04E488AE91F46EC88A0FB6BB
        Validity
            Not Before: Nov 21 02:32:58 2024 GMT
            Not After : Nov 23 02:32:58 2024 GMT
        Subject: CN=673e9bdb-22e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:97:bb:42:e7:f5:cb:df:c0:93:aa:0a:dd:61:
                    0f:9b:73:f6:98:01:7f:97:97:b8:d0:2e:4e:1c:70:
                    a8:d7:8f:ef:da:91:5e:11:f5:77:05:c5:15:a0:f4:
                    05:fd:3f:d9:90:ae:7d:8c:f0:43:7f:47:9e:18:2f:
                    91:14:1a:f5:6c:a4:4d:e0:26:4e:48:05:9e:7e:7c:
                    fb:3b:67:43:c1:9d:2f:06:bd:75:dd:87:c8:87:12:
                    83:a1:63:27:9a:f8:d6:4d:e1:75:85:69:21:fc:7c:
                    3a:3b:76:64:11:ff:6a:48:d3:a6:86:be:c2:ee:a0:
                    c7:e0:a5:2c:b6:b3:38:a0:14:b7:a2:aa:47:5e:91:
                    3e:c0:a2:03:c3:51:db:a7:5d:73:6c:d2:b7:e3:3c:
                    d5:08:a7:ba:d3:0f:e7:18:b1:18:a8:a5:5c:1d:99:
                    97:04:c3:5e:be:6b:d8:e0:00:8f:3a:b9:7b:ec:e6:
                    5c:28:39:49:42:de:5f:7a:e8:44:23:98:2f:3e:0f:
                    af:24:4d:f6:b2:e9:96:4f:13:2f:df:2a:95:61:ab:
                    17:0e:d7:00:7b:eb:0e:c4:b9:23:f0:1a:4e:ef:a5:
                    28:03:44:e5:01:65:df:8b:f8:74:8e:17:7c:41:0c:
                    7f:40:da:fa:c7:cb:75:e4:44:2a:a2:87:e2:6d:bb:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2A:18:BD:DC:F2:6D:F3:CE:90:71:76:3E:46:10:EC:80:07:BF:B8
            X509v3 Authority Key Identifier:
                keyid:6F:22:BB:C8:7A:0F:08:4A:04:E4:88:AE:91:F4:6E:C8:8A:0F:B6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/byK7yHoPCEoE5IiukfRuyIoPtrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:9c:8a:73:80:52:6c:92:09:ad:0e:85:e7:ea:75:6d:47:4f:
         82:c6:d8:cc:10:dd:00:1d:68:01:a5:0a:41:dd:35:ff:b9:48:
         8b:1e:14:9d:19:3b:0d:a1:8e:e9:05:72:98:e6:28:00:ae:3d:
         32:f6:55:d6:2d:57:c3:92:ef:67:06:54:35:d5:b9:5f:df:bf:
         b1:1e:31:ad:68:d3:12:dc:5c:f3:30:ee:dd:0c:82:d1:36:35:
         5a:8f:67:b6:39:6d:16:4c:80:4b:97:16:f8:6e:59:cb:8c:03:
         a2:b7:b6:37:76:81:e6:5e:94:4c:14:f5:77:97:40:8f:18:de:
         51:1a:2c:ab:7e:7a:74:78:70:35:b2:3f:cc:6c:cd:7b:d1:b0:
         e3:33:75:d0:a3:ad:04:e7:b3:69:09:12:90:b3:f3:9a:36:c5:
         a5:32:1e:cb:68:6c:c6:98:7e:a6:91:71:88:16:e4:3a:ab:7d:
         99:d3:f8:e3:3c:07:3b:fb:18:38:eb:79:82:ee:3f:15:29:45:
         5e:75:61:4d:df:68:2b:2d:d3:35:77:a1:e3:e2:b6:21:ee:97:
         f1:2e:19:cb:66:1b:3f:4f:32:f9:fc:41:87:0d:56:f5:3b:de:
         5b:d7:d8:78:81:b2:03:de:36:42:49:1e:4a:bf:0c:29:02:93:
         1f:44:0e:48
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzA5RURBRjExMC8GA1UEBRMoNkYyMkJCQzg3QTBGMDg0QTA0RTQ4OEFFOTFGNDZF
Qzg4QTBGQjZCQjAeFw0yNDExMjEwMjMyNThaFw0yNDExMjMwMjMyNThaMBgxFjAU
BgNVBAMTDTY3M2U5YmRiLTIyZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcl7tC5/XL38CTqgrdYQ+bc/aYAX+Xl7jQLk4ccKjXj+/akV4R9XcFxRWg
9AX9P9mQrn2M8EN/R54YL5EUGvVspE3gJk5IBZ5+fPs7Z0PBnS8GvXXdh8iHEoOh
Yyea+NZN4XWFaSH8fDo7dmQR/2pI06aGvsLuoMfgpSy2szigFLeiqkdekT7AogPD
UdunXXNs0rfjPNUIp7rTD+cYsRiopVwdmZcEw16+a9jgAI86uXvs5lwoOUlC3l96
6EQjmC8+D68kTfay6ZZPEy/fKpVhqxcO1wB76w7EuSPwGk7vpSgDROUBZd+L+HSO
F3xBDH9A2vrHy3XkRCqih+Jtu6GRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0yoY
vdzybfPOkHF2PkYQ7IAHv7gwHwYDVR0jBBgwFoAUbyK7yHoPCEoE5IiukfRuyIoP
trswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcwOUVELzk3OEZCN0M2QTk3MDExRUVCOTM2QTk5Njc3NTQxMkU2L2J5Szd5
SG9QQ0VvRTVJaXVrZlJ1eUlvUHRycy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2J5Szd5SG9QQ0VvRTVJaXVrZlJ1eUlvUHRycy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzA5RUQvOTc4RkI3QzZBOTcwMTFFRUI5MzZBOTk2Nzc1
NDEyRTYvYnlLN3lIb1BDRW9FNUlpdWtmUnV5SW9QdHJzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9nIpzgFJskgmtDoXn6nVtR0+CxtjM
EN0AHWgBpQpB3TX/uUiLHhSdGTsNoY7pBXKY5igArj0y9lXWLVfDku9nBlQ11blf
37+xHjGtaNMS3FzzMO7dDILRNjVaj2e2OW0WTIBLlxb4blnLjAOit7Y3doHmXpRM
FPV3l0CPGN5RGiyrfnp0eHA1sj/MbM170bDjM3XQo60E57NpCRKQs/OaNsWlMh7L
aGzGmH6mkXGIFuQ6q32Z0/jjPAc7+xg463mC7j8VKUVedWFN32grLdM1d6Hj4rYh
7pfxLhnLZhs/TzL5/EGHDVb1O95b19h4gbID3jZCSR5KvwwpApMfRA5I
-----END CERTIFICATE-----