Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File:                     nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier:          vWACfy0/7zUVnYj80tfbwMZcDYCoYDI1zE+MHgs0Lj8=
Subject key identifier:   FD:C4:A6:AA:CC:7C:C6:B7:14:15:26:3B:31:11:2C:F5:05:8B:C9:C9
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer:       /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial:       082B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number:          0827
Signing time:             Mon 25 Nov 2024 00:58:54 +0000
Manifest this update:     Mon 25 Nov 2024 00:58:54 +0000
Manifest next update:     Wed 27 Nov 2024 00:58:54 +0000
Files and hashes:         1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: agLA6pPh+o1KZOLSYqsuxNYvrTOYxDBjohECPeKLq7I=)
                          2: D327BE38980311EE8CAFD532D25BE465.roa (hash: S6gTdluMy3bxrOQWOaTfSvtXEYSyREhvKUaAZL3cXu4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091 (0x82b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Validity
            Not Before: Nov 25 00:58:54 2024 GMT
            Not After : Nov 27 00:58:54 2024 GMT
        Subject: CN=6743cbce-9a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:b2:98:1d:d2:71:7c:e5:80:9d:e5:08:b8:
                    44:5f:d4:02:a6:20:f6:3c:55:c8:35:f1:44:ef:52:
                    8a:f2:47:30:95:7e:d1:36:b3:d4:07:c1:f4:56:a4:
                    70:7f:59:bf:05:bd:44:00:fe:9a:00:12:8e:6a:2d:
                    0d:35:7c:80:8a:42:98:b1:5d:bc:54:a9:5d:9f:f7:
                    6a:e2:00:2a:50:fe:94:bc:d0:7c:14:b9:66:18:11:
                    6c:6e:e8:bb:48:ca:27:cc:56:7f:4a:04:bd:29:35:
                    b5:df:ca:cd:9e:26:a9:ec:0e:10:0c:23:8f:36:d6:
                    80:84:c1:23:4b:77:fc:43:d0:21:0a:4a:c2:5b:be:
                    4d:36:9d:75:cf:bd:15:04:a9:2a:14:4a:80:e4:6c:
                    7e:c8:94:73:4e:35:59:60:73:6d:8f:13:78:d5:b4:
                    f0:a6:fb:bd:61:39:b5:44:3e:04:8d:a9:51:27:8b:
                    1a:5e:39:d9:de:f8:a5:05:67:3e:b1:93:a5:e8:cf:
                    ed:37:05:45:93:58:f2:bd:3e:85:11:a2:1d:b8:ea:
                    9a:6c:10:6c:1c:02:3e:88:1f:c8:ab:7a:9f:b1:66:
                    43:94:b8:87:5d:21:ba:fa:0c:cc:0e:93:cd:09:09:
                    a5:6f:1c:dd:cc:cd:cc:87:40:3b:cf:97:6e:95:b5:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C4:A6:AA:CC:7C:C6:B7:14:15:26:3B:31:11:2C:F5:05:8B:C9:C9
            X509v3 Authority Key Identifier:
                keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:42:3b:76:e0:13:8a:76:77:bb:91:b2:63:10:24:e1:b9:99:
         e2:a0:24:b5:25:c9:50:45:e0:42:5a:1d:23:cc:04:de:4f:1b:
         ef:40:29:ac:97:f1:13:54:09:aa:16:33:63:b8:b7:15:69:67:
         8b:89:7a:71:86:1f:4a:a7:c3:0a:ce:7c:d7:a6:74:9a:f4:c2:
         7a:aa:99:76:27:d5:4b:cc:ca:2f:af:9c:bd:4f:83:a6:e9:63:
         75:24:44:0d:e6:fa:e3:99:81:ac:09:2c:75:9c:09:b2:e9:46:
         6e:b6:43:50:11:d3:4b:67:05:4c:47:a4:bb:23:18:6c:d9:d6:
         e0:4d:e4:40:f1:b5:d0:39:8a:70:ed:87:e5:91:51:56:55:f6:
         0b:9f:03:94:86:5c:41:ef:2d:b3:61:52:e5:73:0a:1a:b0:db:
         a4:70:02:05:1b:44:4f:5f:c1:47:b3:38:36:61:41:7c:bb:d5:
         90:4a:1e:56:bc:02:62:49:42:24:b5:d3:68:8f:fd:43:6b:89:
         f4:68:ff:5c:0c:17:43:48:c5:7e:79:4b:b0:6d:af:6d:f8:99:
         13:0e:60:f7:63:73:5f:73:7a:30:50:b2:63:59:39:4a:b7:fc:
         c6:de:66:97:89:35:f7:7a:4f:62:62:70:4c:f2:a4:19:22:8d:
         1c:3e:9c:e1
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCCswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0YyNkRSSTExMC8GA1UEBRMoOUQ4N0IzMTE3QUExQkQ3ODI4QjdERDQ2NEQ3MzA3
NkJBRThEQ0M5NjAeFw0yNDExMjUwMDU4NTRaFw0yNDExMjcwMDU4NTRaMBgxFjAU
BgNVBAMTDTY3NDNjYmNlLTlhNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzGrKYHdJxfOWAneUIuERf1AKmIPY8Vcg18UTvUoryRzCVftE2s9QHwfRW
pHB/Wb8FvUQA/poAEo5qLQ01fICKQpixXbxUqV2f92riACpQ/pS80HwUuWYYEWxu
6LtIyifMVn9KBL0pNbXfys2eJqnsDhAMI4821oCEwSNLd/xD0CEKSsJbvk02nXXP
vRUEqSoUSoDkbH7IlHNONVlgc22PE3jVtPCm+71hObVEPgSNqVEnixpeOdne+KUF
Zz6xk6Xoz+03BUWTWPK9PoURoh246ppsEGwcAj6IH8irep+xZkOUuIddIbr6DMwO
k80JCaVvHN3MzcyHQDvPl26VtcntAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU/cSm
qsx8xrcUFSY7MREs9QWLyckwHwYDVR0jBBgwFoAUnYezEXqhvXgot91GTXMHa66N
zJYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGMjZELzNGNDA0MUZDNzBCOTExRTlBN0YyNUQzRkY4QUVBMjI4L25ZZXpF
WHFodlhnb3Q5MUdUWE1IYTY2TnpKWS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L25ZZXpFWHFodlhnb3Q5MUdUWE1IYTY2TnpKWS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0YyNkQvM0Y0MDQxRkM3MEI5MTFFOUE3RjI1RDNGRjhBRUEy
MjgvblllekVYcWh2WGdvdDkxR1RYTUhhNjZOekpZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC2Qjt24BOKdne7kbJjECThuZnioCS1JclQ
ReBCWh0jzATeTxvvQCmsl/ETVAmqFjNjuLcVaWeLiXpxhh9Kp8MKznzXpnSa9MJ6
qpl2J9VLzMovr5y9T4Om6WN1JEQN5vrjmYGsCSx1nAmy6UZutkNQEdNLZwVMR6S7
Ixhs2dbgTeRA8bXQOYpw7YflkVFWVfYLnwOUhlxB7y2zYVLlcwoasNukcAIFG0RP
X8FHszg2YUF8u9WQSh5WvAJiSUIktdNoj/1Da4n0aP9cDBdDSMV+eUuwba9t+JkT
DmD3Y3Nfc3owULJjWTlKt/zG3maXiTX3ek9iYnBM8qQZIo0cPpzh
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:22 2024 by rpki-client on console-ams.rpki-client.org