Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
File:                     2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft (raw, json)
Hash identifier:          /TfrN+JJdKDPKcSgeNLLKNy4D9aEr7Vlc0LRiwmtAqk=
Subject key identifier:   C0:E6:32:A2:93:D3:F6:5C:34:C6:12:20:C1:33:30:48:7A:D2:BC:A0
Authority key identifier: D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
Certificate issuer:       /CN=F3686F75AF/serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
Certificate serial:       03DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
Manifest number:          03D8
Signing time:             Sun 05 May 2024 01:34:10 +0000
Manifest this update:     Sun 05 May 2024 01:34:09 +0000
Manifest next update:     Tue 07 May 2024 01:34:09 +0000
Files and hashes:         1: 2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl (hash: nPfSNjdJfmO10MbbnqgkkVYIxBtUPw6apyoTpmNkSaM=)
                          2: 0B32AD4A1D5611ECBB40873AD8A014CE.roa (hash: 4tBbSju8TJUrXsAaoMtdSxK8ImrTHKlcKaiey6wbers=)
                          3: BDB5A7FC1D5511EC9EEE033AD8A014CE.roa (hash: 2cjNPvlR7PUwI2VKGhKfkSFLYcnzPu/tOkW6A4CpmKI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986 (0x3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3686F75AF/serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
        Validity
            Not Before: May  5 01:34:09 2024 GMT
            Not After : May  7 01:34:09 2024 GMT
        Subject: CN=6636e212-f2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9a:d4:fc:c7:85:8a:8c:8d:e3:24:f8:92:53:
                    d0:e0:69:7e:69:f4:58:29:4d:11:c6:0e:20:b8:1e:
                    c4:75:17:ed:c3:f4:a2:19:d6:5a:5e:74:d5:45:85:
                    56:27:2e:36:72:04:d8:ac:a0:28:79:3b:23:cb:96:
                    66:d5:84:a0:0a:b6:a3:1f:e0:82:71:73:9f:a7:1a:
                    e9:77:86:e5:f3:06:75:a9:0a:fe:3c:1e:d2:2f:60:
                    66:85:9c:14:fe:98:e9:d0:20:8f:2b:46:31:ff:fc:
                    c8:9e:3d:e2:46:bf:2e:52:dc:2a:04:82:ee:e5:0f:
                    94:54:5a:1c:1f:ac:3a:d8:45:f0:2b:0e:44:88:2a:
                    7c:87:d4:4f:4a:28:6a:5a:95:bd:23:a3:19:06:30:
                    84:9d:fe:19:a5:6b:c9:77:0f:8d:1b:1e:dd:98:e6:
                    8f:69:8b:66:09:e3:eb:db:49:63:a0:1b:c2:26:92:
                    ad:84:6f:dd:d4:32:cd:27:06:7b:8e:f4:3a:e6:55:
                    b9:ff:7a:d2:34:ac:0f:41:2d:14:4a:0f:40:1e:b6:
                    c3:2a:e9:e0:fa:8c:ec:40:d6:bf:96:ee:16:74:16:
                    37:fb:a5:b8:73:30:47:83:ee:c8:30:61:52:7a:23:
                    39:1b:79:3d:24:21:3e:80:7f:cb:18:4a:3a:e3:d2:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E6:32:A2:93:D3:F6:5C:34:C6:12:20:C1:33:30:48:7A:D2:BC:A0
            X509v3 Authority Key Identifier:
                keyid:D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f5:bf:38:b4:32:47:51:49:78:73:3a:28:b0:7d:fc:93:0c:
         ac:df:ed:6b:01:b5:28:eb:d1:0c:10:57:27:1c:70:9d:34:3e:
         18:d4:5a:bf:06:69:1a:3d:32:f8:0a:9d:14:80:df:c0:d4:00:
         ed:ec:1c:a5:51:6c:74:33:04:31:58:c0:a9:c1:16:dd:84:c1:
         47:0b:b4:22:ac:f7:e8:95:d1:88:1a:89:f4:cb:ef:9c:43:8d:
         22:05:de:fd:10:a1:9d:8d:e5:7e:d5:ea:16:fb:ee:a4:0e:92:
         db:22:8e:e5:ab:ee:f5:57:39:33:33:cd:7d:02:33:f5:58:8e:
         b7:f1:e3:7e:c7:45:2d:cd:41:01:f5:33:9c:f7:d9:c0:a8:e8:
         42:10:eb:2b:e3:22:16:93:46:8b:8f:dd:b0:df:cd:a4:5f:1f:
         f5:32:6c:9c:2e:07:bb:4d:c2:d8:f7:f5:ab:6c:97:c7:24:24:
         78:aa:e8:46:c1:5b:08:8e:84:1b:ff:08:ac:b6:92:6f:d1:2f:
         0c:ea:c8:38:6d:e8:67:48:3e:8f:42:4a:75:05:28:f8:4a:f9:
         d4:79:f8:8b:3e:fa:d6:fe:3b:56:dc:d8:75:5b:e7:0a:36:a1:
         2a:54:14:83:43:9c:d6:3b:1f:16:f0:bb:0f:09:90:a5:82:8d:
         93:fc:a9:0a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA9owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODZGNzVBRjExMC8GA1UEBRMoRDk5NzcwRjhGOUI2MkREMDM2RURFNzQxRjI3MDJD
RERENjQwREUxRTAeFw0yNDA1MDUwMTM0MDlaFw0yNDA1MDcwMTM0MDlaMBgxFjAU
BgNVBAMTDTY2MzZlMjEyLWYyYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCimtT8x4WKjI3jJPiSU9DgaX5p9FgpTRHGDiC4HsR1F+3D9KIZ1lpedNVF
hVYnLjZyBNisoCh5OyPLlmbVhKAKtqMf4IJxc5+nGul3huXzBnWpCv48HtIvYGaF
nBT+mOnQII8rRjH//MiePeJGvy5S3CoEgu7lD5RUWhwfrDrYRfArDkSIKnyH1E9K
KGpalb0joxkGMISd/hmla8l3D40bHt2Y5o9pi2YJ4+vbSWOgG8Imkq2Eb93UMs0n
BnuO9DrmVbn/etI0rA9BLRRKD0AetsMq6eD6jOxA1r+W7hZ0Fjf7pbhzMEeD7sgw
YVJ6IzkbeT0kIT6Af8sYSjrj0ldXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwOYy
opPT9lw0xhIgwTMwSHrSvKAwHwYDVR0jBBgwFoAU2Zdw+Pm2LdA27edB8nAs3dZA
3h4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg2Rjc1L0E2MDc4MDk2MUQzNTExRUNCNTEwMzQwQUQ4QTAxNENFLzJaZHct
UG0yTGRBMjdlZEI4bkFzM2RaQTNoNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJaZHctUG0yTGRBMjdlZEI4bkFzM2RaQTNoNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODZGNzUvQTYwNzgwOTYxRDM1MTFFQ0I1MTAzNDBBRDhB
MDE0Q0UvMlpkdy1QbTJMZEEyN2VkQjhuQXMzZFpBM2g0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBV9b84tDJHUUl4czoosH38kwys3+1r
AbUo69EMEFcnHHCdND4Y1Fq/BmkaPTL4Cp0UgN/A1ADt7BylUWx0MwQxWMCpwRbd
hMFHC7QirPfoldGIGon0y++cQ40iBd79EKGdjeV+1eoW++6kDpLbIo7lq+71Vzkz
M819AjP1WI638eN+x0UtzUEB9TOc99nAqOhCEOsr4yIWk0aLj92w382kXx/1Mmyc
Lge7TcLY9/WrbJfHJCR4quhGwVsIjoQb/wistpJv0S8M6sg4behnSD6PQkp1BSj4
SvnUefiLPvrW/jtW3Nh1W+cKNqEqVBSDQ5zWOx8W8LsPCZClgo2T/KkK
-----END CERTIFICATE-----
Generated at Sun May 5 02:32:47 2024 by rpki-client on console-fra.rpki-client.org