Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
File:                     4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft (raw, json)
Hash identifier:          VqqQli8ryff/YeCdAuB+b2F/MufbOPQ6cl8tKVOOVi8=
Subject key identifier:   E4:2D:CB:A1:81:2D:A8:F8:2C:ED:6F:B4:CA:1E:2F:9A:F2:E5:54:0D
Authority key identifier: E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F
Certificate issuer:       /CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
Certificate serial:       0B1E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
Manifest number:          0B1D
Signing time:             Mon 06 May 2024 00:44:34 +0000
Manifest this update:     Mon 06 May 2024 00:44:33 +0000
Manifest next update:     Wed 08 May 2024 00:44:33 +0000
Files and hashes:         1: 4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl (hash: uHhJdzGhHng+gyat7HQxPXBdNOZjPcZmCjZ5J5ld9g8=)
                          2: 0DE9F16080D011E6B7882016F8AEA228.roa (hash: lapNENqbec9IiREVadsxyCzDqZnzkWBnbMRTRH0mwYI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2846 (0xb1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
        Validity
            Not Before: May  6 00:44:33 2024 GMT
            Not After : May  8 00:44:33 2024 GMT
        Subject: CN=663827f2-0dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:57:57:b8:4e:fb:08:42:61:72:4e:71:5c:4d:
                    9a:58:65:39:07:dc:ee:c9:35:45:69:bb:1b:1e:5b:
                    98:3a:ee:ba:9a:f3:3c:52:b8:ac:93:c6:50:e5:5a:
                    95:e3:62:60:3b:d6:e9:32:20:85:62:2d:cc:8f:46:
                    c5:8f:09:d1:ad:41:4d:93:5d:15:e4:75:99:fa:83:
                    a4:08:25:67:77:1c:23:39:af:81:81:1d:44:5e:0a:
                    1a:57:33:26:3c:4a:07:f1:4c:eb:2f:52:0b:28:e0:
                    1a:df:91:70:e6:83:23:41:db:fd:a2:e9:97:50:67:
                    79:86:2c:ce:c4:37:b1:83:20:94:0f:85:bc:b1:7e:
                    ab:78:de:96:67:a6:41:d1:7c:66:60:63:a9:0b:e3:
                    e0:02:44:b0:84:57:7b:bb:a5:50:e4:00:cb:70:92:
                    5d:81:f4:94:8d:28:1b:6d:ae:5a:6f:27:8a:8b:37:
                    4a:c5:c6:79:63:a2:75:3a:21:b7:4a:fb:b6:3b:e6:
                    cf:b3:12:e3:1e:57:83:94:5f:99:23:74:6e:e6:c1:
                    7e:28:e2:53:14:6f:12:40:ec:b1:29:d2:bf:48:df:
                    e6:6a:a1:96:d7:30:7c:d2:2c:ff:69:5c:54:1e:6d:
                    76:32:7e:28:c1:cc:df:78:73:39:d0:08:4e:e3:c5:
                    b0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2D:CB:A1:81:2D:A8:F8:2C:ED:6F:B4:CA:1E:2F:9A:F2:E5:54:0D
            X509v3 Authority Key Identifier:
                keyid:E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:70:60:25:7e:d4:be:d2:54:f6:9b:a9:8b:85:4f:be:8e:37:
         04:1c:de:db:89:18:50:55:df:4f:f4:30:aa:94:e8:57:24:56:
         bc:3a:76:01:2c:77:bd:ba:1f:52:c8:4a:8e:5d:41:6a:46:e2:
         3f:c3:a4:ac:62:7f:ec:9c:ba:4f:4e:5a:f2:13:a1:28:b9:c9:
         95:8d:c4:2e:1e:fe:b0:9a:09:7c:d0:ed:53:03:34:c8:4b:1b:
         cc:6a:d2:d3:02:90:12:72:64:d6:e1:ea:e8:8f:fe:ef:a3:e8:
         11:25:12:92:70:fc:b0:bd:cc:45:50:b8:8b:1e:fc:c7:01:d8:
         28:c2:26:eb:0a:69:0d:47:8e:4a:d0:af:23:b7:2e:ad:20:5e:
         94:fd:cb:eb:33:da:71:67:d7:3a:d9:a2:09:11:2d:c2:43:e6:
         1b:8b:9a:40:40:e0:9b:68:93:0a:bc:95:3c:f5:b3:f8:2f:db:
         c0:7f:78:54:d5:b9:be:a0:81:2a:c8:86:9d:d0:82:12:96:3a:
         26:dd:64:c6:f8:20:ae:86:41:4d:68:ad:74:8a:2c:e2:60:18:
         fc:43:06:61:2f:75:53:90:57:4f:3d:f6:b1:ec:c1:d9:40:56:
         2b:c8:ed:2a:13:c4:22:00:90:6e:c8:5c:85:fb:78:fd:41:e3:
         ea:b4:12:d5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCx4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0ZDNEZBRjExMC8GA1UEBRMoRTE3MzJEOTdEMTM2MTcxMzYyQjA1MThGNkEyMTQ0
NTQ1Q0JGM0E0RjAeFw0yNDA1MDYwMDQ0MzNaFw0yNDA1MDgwMDQ0MzNaMBgxFjAU
BgNVBAMTDTY2MzgyN2YyLTBkZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaV1e4TvsIQmFyTnFcTZpYZTkH3O7JNUVpuxseW5g67rqa8zxSuKyTxlDl
WpXjYmA71ukyIIViLcyPRsWPCdGtQU2TXRXkdZn6g6QIJWd3HCM5r4GBHUReChpX
MyY8SgfxTOsvUgso4BrfkXDmgyNB2/2i6ZdQZ3mGLM7EN7GDIJQPhbyxfqt43pZn
pkHRfGZgY6kL4+ACRLCEV3u7pVDkAMtwkl2B9JSNKBttrlpvJ4qLN0rFxnljonU6
IbdK+7Y75s+zEuMeV4OUX5kjdG7mwX4o4lMUbxJA7LEp0r9I3+ZqoZbXMHzSLP9p
XFQebXYyfijBzN94cznQCE7jxbBXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5C3L
oYEtqPgs7W+0yh4vmvLlVA0wHwYDVR0jBBgwFoAU4XMtl9E2FxNisFGPaiFEVFy/
Ok8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGQzRGLzQ0MkE5RTIwODBCRjExRTZBQjNCQTA3RUY4QUVBMjI4LzRYTXRs
OUUyRnhOaXNGR1BhaUZFVkZ5X09rOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRYTXRsOUUyRnhOaXNGR1BhaUZFVkZ5X09rOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0ZDNEYvNDQyQTlFMjA4MEJGMTFFNkFCM0JBMDdFRjhB
RUEyMjgvNFhNdGw5RTJGeE5pc0ZHUGFpRkVWRnlfT2s4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgcGAlftS+0lT2m6mLhU++jjcEHN7b
iRhQVd9P9DCqlOhXJFa8OnYBLHe9uh9SyEqOXUFqRuI/w6SsYn/snLpPTlryE6Eo
ucmVjcQuHv6wmgl80O1TAzTISxvMatLTApAScmTW4eroj/7vo+gRJRKScPywvcxF
ULiLHvzHAdgowibrCmkNR45K0K8jty6tIF6U/cvrM9pxZ9c62aIJES3CQ+Ybi5pA
QOCbaJMKvJU89bP4L9vAf3hU1bm+oIEqyIad0IISljom3WTG+CCuhkFNaK10iizi
YBj8QwZhL3VTkFdPPfax7MHZQFYryO0qE8QiAJBuyFyF+3j9QePqtBLV
-----END CERTIFICATE-----
Generated at Mon May 6 01:48:16 2024 by rpki-client on console-fra.rpki-client.org