Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File:                     7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier:          zjWOfuE3slUpqu91nL3EJeg4tNWOswfVupbffd0DKsY=
Subject key identifier:   AE:A9:CF:14:4B:3D:DC:97:85:56:AC:94:6D:4F:0A:10:5E:F6:81:88
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer:       /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial:       26
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number:          26
Signing time:             Tue 28 May 2024 02:43:00 +0000
Manifest this update:     Tue 28 May 2024 02:42:59 +0000
Manifest next update:     Thu 30 May 2024 02:42:59 +0000
Files and hashes:         1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: R+BDB/4danzIuDPIjM6njM3gt1toBGDsELuV5RiqCLk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 May 2024 00:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
        Validity
            Not Before: May 28 02:42:59 2024 GMT
            Not After : May 30 02:42:59 2024 GMT
        Subject: CN=665544b4-2644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:c4:77:72:b9:b4:63:ba:7a:54:72:6e:ca:
                    c1:b1:60:97:da:78:5a:1c:db:ba:e7:61:60:ab:f4:
                    5a:3b:95:bc:99:32:02:33:b3:20:8b:44:99:d2:7e:
                    21:ea:dc:41:67:ba:53:a4:9f:1e:06:0e:4d:8c:cd:
                    0c:28:56:d9:52:70:7a:6a:bc:40:2a:92:11:bd:f7:
                    0b:d5:93:91:89:17:5c:70:2c:2c:ad:80:dd:3c:fb:
                    ce:e8:41:c0:26:dd:5d:1e:ce:ef:0c:1c:df:6b:55:
                    08:0d:01:aa:37:36:6b:8e:83:bc:2c:2a:0d:8c:15:
                    9b:07:f6:84:ee:ca:73:90:62:bf:39:0c:a0:09:8e:
                    df:0d:04:60:a4:c9:35:68:8b:70:ac:e1:d9:4e:7f:
                    7b:94:10:5c:09:92:4e:1d:9c:a8:f4:29:ca:f0:ae:
                    bf:a1:5c:33:99:93:db:50:dd:bd:6e:cc:a2:ee:32:
                    31:81:44:4f:09:41:e9:24:ca:dd:be:14:67:19:c5:
                    61:f8:ea:08:12:21:e6:0a:9c:c2:c6:8e:01:66:3e:
                    d4:b3:28:6b:ff:ce:0e:15:93:07:49:68:3f:50:bc:
                    f7:75:94:c2:1d:85:0f:c0:8e:50:e6:e5:f8:fc:5e:
                    3d:cf:43:18:d8:6c:a3:fd:10:70:0c:37:ce:ee:70:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A9:CF:14:4B:3D:DC:97:85:56:AC:94:6D:4F:0A:10:5E:F6:81:88
            X509v3 Authority Key Identifier:
                keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:28:86:39:1a:26:6d:ea:c2:b8:4c:36:7a:9d:7c:42:8c:8b:
         31:27:55:e0:bb:30:bf:f5:6d:bf:21:3c:8b:4a:71:e7:e0:94:
         32:b3:68:ae:c5:9c:30:f7:6b:ba:68:b7:a9:6e:a9:4f:a7:b1:
         2e:98:66:87:e7:31:5f:a4:97:d8:68:15:8b:d2:91:8a:20:5a:
         b1:eb:73:3f:73:06:bc:77:ab:09:d3:bd:a9:df:60:f1:21:e6:
         ba:05:a0:96:6a:ed:17:ef:04:b7:05:41:0c:7c:2d:0a:59:5f:
         fd:b1:6a:e5:1e:6b:ba:f5:c1:ac:ef:42:7b:d8:1a:28:e5:63:
         aa:51:a1:5e:0b:3f:2e:f7:cb:76:96:14:c7:67:b2:f3:67:e6:
         bc:d2:00:52:95:64:8a:45:7b:5d:34:7f:17:43:0c:81:9b:1f:
         2b:2f:df:62:22:86:46:05:29:80:03:4a:57:47:ce:32:c7:0e:
         f4:81:02:88:05:ef:b9:28:d8:12:c2:bb:44:65:71:a4:51:b1:
         7c:fa:ab:ec:13:e0:af:ec:b6:7a:d4:2c:06:51:58:64:e4:4c:
         f5:ce:25:40:48:6a:bf:9d:c1:06:17:0e:d4:ad:be:6a:15:a8:
         3a:d6:db:48:72:95:61:fc:f3:03:86:61:ab:91:77:4f:a8:e4:
         7c:35:af:5e
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBJjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY4
NzY4MkFGMTEwLwYDVQQFEyhFRTE3OTZFMEVDNTkxM0Q4Qzg4RkJBQkFGMUY4MEE0
NTlDRUUzOTM5MB4XDTI0MDUyODAyNDI1OVoXDTI0MDUzMDAyNDI1OVowGDEWMBQG
A1UEAxMNNjY1NTQ0YjQtMjY0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKhixHdyubRjunpUcm7KwbFgl9p4WhzbuudhYKv0WjuVvJkyAjOzIItEmdJ+
IercQWe6U6SfHgYOTYzNDChW2VJwemq8QCqSEb33C9WTkYkXXHAsLK2A3Tz7zuhB
wCbdXR7O7wwc32tVCA0Bqjc2a46DvCwqDYwVmwf2hO7Kc5BivzkMoAmO3w0EYKTJ
NWiLcKzh2U5/e5QQXAmSTh2cqPQpyvCuv6FcM5mT21DdvW7Mou4yMYFETwlB6STK
3b4UZxnFYfjqCBIh5gqcwsaOAWY+1LMoa//ODhWTB0loP1C893WUwh2FD8COUObl
+PxePc9DGNhso/0QcAw3zu5wPgsCAwEAAaOCArgwggK0MB0GA1UdDgQWBBSuqc8U
Sz3cl4VWrJRtTwoQXvaBiDAfBgNVHSMEGDAWgBTuF5bg7FkT2MiPurrx+ApFnO45
OTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODc2ODIvREI4MEFEQjgwMDkyMTFFRjlCQzE0RDBEMDE3MDAxQjEvN2hlVzRP
eFpFOWpJajdxNjhmZ0tSWnp1T1RrLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvN2hlVzRPeFpFOWpJajdxNjhmZ0tSWnp1T1RrLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4NzY4Mi9EQjgwQURCODAwOTIxMUVGOUJDMTREMEQwMTcw
MDFCMS83aGVXNE94WkU5aklqN3E2OGZnS1JaenVPVGsubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAGUohjkaJm3qwrhMNnqdfEKMizEnVeC7
ML/1bb8hPItKcefglDKzaK7FnDD3a7pot6luqU+nsS6YZofnMV+kl9hoFYvSkYog
WrHrcz9zBrx3qwnTvanfYPEh5roFoJZq7RfvBLcFQQx8LQpZX/2xauUea7r1wazv
QnvYGijlY6pRoV4LPy73y3aWFMdnsvNn5rzSAFKVZIpFe100fxdDDIGbHysv32Ii
hkYFKYADSldHzjLHDvSBAogF77ko2BLCu0RlcaRRsXz6q+wT4K/stnrULAZRWGTk
TPXOJUBIar+dwQYXDtStvmoVqDrW20hylWH88wOGYauRd0+o5Hw1r14=
-----END CERTIFICATE-----
Generated at Tue May 28 04:28:56 2024 by rpki-client on console-ams.rpki-client.org