Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File:                     tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier:          +nbouzW+gt8/YSVnY6UreqJ2WOBj4qaZS1fwzDFWyjQ=
Subject key identifier:   AC:46:B5:E5:06:DA:86:05:B7:DB:C0:16:0B:D4:F0:5B:98:1E:6A:72
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer:       /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial:       0806
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number:          0805
Signing time:             Sun 24 Nov 2024 01:01:18 +0000
Manifest this update:     Sun 24 Nov 2024 01:01:17 +0000
Manifest next update:     Tue 26 Nov 2024 01:01:17 +0000
Files and hashes:         1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: tGuBPdRlx6k7cyi4iN+a2AizmndDtu1kfuftqPstoJQ=)
                          2: A57BAB36864511E9B11DB357F8AEA228.roa (hash: UZHeW38R1/Nd92sqBo1918z/ZA9yifdIrMDF+uNRLVM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                          rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
        Validity
            Not Before: Nov 24 01:01:17 2024 GMT
            Not After : Nov 26 01:01:17 2024 GMT
        Subject: CN=67427ade-310e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:76:7b:67:5b:3c:9a:24:3d:0b:ad:e4:2e:90:
                    2b:2b:76:a7:c2:48:3d:5a:08:e3:ec:18:f5:1d:bd:
                    2e:1b:42:3f:22:63:d9:7c:45:3b:35:c8:7d:b6:5a:
                    7b:d5:c4:65:79:c0:66:8e:58:f8:ec:1d:fa:7e:c0:
                    71:34:49:0c:c7:2c:2a:9f:ad:f9:92:d2:bf:8e:15:
                    8d:6c:f9:54:75:61:96:89:5c:90:84:a4:00:63:6e:
                    60:60:e6:0f:d2:01:44:ae:d8:ab:45:a0:25:65:4e:
                    b0:64:b9:2e:8c:f1:21:27:47:52:75:5f:de:15:d3:
                    c2:94:5f:56:ab:a7:f2:16:28:12:e6:41:b1:e6:21:
                    8a:cd:56:4c:f8:e2:c7:52:b8:bb:96:d0:ab:44:dc:
                    a8:0b:c9:9e:b7:1f:64:33:f0:a3:ae:33:99:61:54:
                    ef:cc:4c:c5:6b:68:f1:76:9d:e3:b6:b5:93:3a:54:
                    fc:74:35:1e:53:0c:76:85:87:5a:63:b8:e9:1f:5a:
                    c6:d9:60:02:e8:8a:03:d4:03:b8:cb:57:01:89:9d:
                    ce:de:4d:e0:1c:5e:e4:5f:13:eb:7c:41:a5:ba:c8:
                    28:8d:62:d3:88:5d:16:98:13:7e:07:c3:87:6a:b4:
                    a2:10:a3:18:d4:0d:90:1b:81:2b:b4:85:38:62:05:
                    c6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:46:B5:E5:06:DA:86:05:B7:DB:C0:16:0B:D4:F0:5B:98:1E:6A:72
            X509v3 Authority Key Identifier:
                keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:4c:7f:4f:64:53:09:18:1e:2f:5c:74:f1:ba:d3:95:0a:a1:
         d6:6c:44:0b:21:ec:9a:93:e6:90:49:40:20:57:d9:a7:ac:48:
         c9:71:d5:0a:58:f7:6f:fa:35:6e:b3:35:34:f8:f4:89:de:c7:
         1c:3f:84:d7:0d:4e:32:f2:29:a3:8a:7f:ea:f0:f1:dc:83:6a:
         dc:df:52:aa:0d:0a:b1:40:b5:2b:a5:60:d5:12:fe:01:d0:b9:
         c9:c3:6d:f6:9b:24:8e:d5:89:5f:76:e2:69:7f:c5:0b:71:c0:
         41:59:dc:60:0a:ba:5a:6d:50:84:6d:df:a1:cf:db:09:4a:6c:
         eb:29:da:56:d7:ca:e0:3b:59:97:96:fe:12:19:e2:e4:b2:9d:
         58:ba:28:79:5b:52:b5:60:e3:4f:53:93:d3:28:d7:21:18:2f:
         27:77:e0:ad:65:1a:c9:f7:0f:07:89:a4:be:7c:23:0c:98:0f:
         57:23:05:90:da:02:df:f4:51:a2:96:5c:9e:aa:e8:f2:6d:70:
         71:68:72:4f:57:27:19:ec:22:5a:7c:30:b9:28:fd:75:ca:81:
         f5:8e:74:4c:4c:d2:ef:40:23:58:bf:93:76:9c:71:da:8b:af:
         52:ed:ab:cf:91:47:c5:b8:5b:46:87:a3:60:5f:2b:c4:b2:67:
         b8:88:39:b2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCAYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzBDNDBBUjExMC8GA1UEBRMoQjQ3MTZGM0JDN0JEMURCNDQ3Q0M3MzBGRUU3QTJC
QjYzMkFCMTkwMzAeFw0yNDExMjQwMTAxMTdaFw0yNDExMjYwMTAxMTdaMBgxFjAU
BgNVBAMTDTY3NDI3YWRlLTMxMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCidntnWzyaJD0LreQukCsrdqfCSD1aCOPsGPUdvS4bQj8iY9l8RTs1yH22
WnvVxGV5wGaOWPjsHfp+wHE0SQzHLCqfrfmS0r+OFY1s+VR1YZaJXJCEpABjbmBg
5g/SAUSu2KtFoCVlTrBkuS6M8SEnR1J1X94V08KUX1arp/IWKBLmQbHmIYrNVkz4
4sdSuLuW0KtE3KgLyZ63H2Qz8KOuM5lhVO/MTMVraPF2neO2tZM6VPx0NR5TDHaF
h1pjuOkfWsbZYALoigPUA7jLVwGJnc7eTeAcXuRfE+t8QaW6yCiNYtOIXRaYE34H
w4dqtKIQoxjUDZAbgSu0hThiBcadAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUrEa1
5QbahgW328AWC9TwW5geanIwHwYDVR0jBBgwFoAUtHFvO8e9HbRHzHMP7nortjKr
GQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcwQzQwL0UwN0YxMTEwODY0NDExRTk4OUNFRkI1NkY4QUVBMjI4L3RIRnZP
OGU5SGJSSHpITVA3bm9ydGpLckdRTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3RIRnZPOGU5SGJSSHpITVA3bm9ydGpLckdRTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzBDNDAvRTA3RjExMTA4NjQ0MTFFOTg5Q0VGQjU2RjhBRUEy
MjgvdEhGdk84ZTlIYlJIekhNUDdub3J0aktyR1FNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDcTH9PZFMJGB4vXHTxutOVCqHWbEQLIeya
k+aQSUAgV9mnrEjJcdUKWPdv+jVuszU0+PSJ3sccP4TXDU4y8imjin/q8PHcg2rc
31KqDQqxQLUrpWDVEv4B0LnJw232mySO1YlfduJpf8ULccBBWdxgCrpabVCEbd+h
z9sJSmzrKdpW18rgO1mXlv4SGeLksp1Yuih5W1K1YONPU5PTKNchGC8nd+CtZRrJ
9w8HiaS+fCMMmA9XIwWQ2gLf9FGillyequjybXBxaHJPVycZ7CJafDC5KP11yoH1
jnRMTNLvQCNYv5N2nHHai69S7avPkUfFuFtGh6NgXyvEsme4iDmy
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:57 2024 by rpki-client on console-ams.rpki-client.org