Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
File:                     PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft (raw, json)
Hash identifier:          hafBPzUGmUHONfS2c34xtjdIk+5IzettQ/XKWKltcfs=
Subject key identifier:   D0:3F:4A:50:1D:CE:6B:C1:78:93:A9:EE:B3:AD:6F:0E:9D:21:EC:D1
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Certificate issuer:       /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial:       01F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
Manifest number:          01DA
Signing time:             Thu 02 May 2024 02:06:55 +0000
Manifest this update:     Thu 02 May 2024 02:06:54 +0000
Manifest next update:     Sat 04 May 2024 02:06:54 +0000
Files and hashes:         1: PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl (hash: EVRfiCYcgnLpTi/nwJkjfZ27crFXk2WKwk2gBo+hJx8=)
                          2: 4533CC40B91311EDA26291C6F1222468.roa (hash: uGFYvGCNbxCuuh0wibkKXQKGhe4pjJXmtLBEpIrE66k=)
                          3: 1DEB7B6C613B11EEB5C645474AD9E6FC.roa (hash: /ErXEoW0e3+UCMayKYaaeAaWHsb5XTpte5tdQ4ZnfGA=)
                          4: 7DF1A778B90E11EDBC79B1B8F1222468.roa (hash: k3GwCfINv0mvGU/BLwW/oIfhjiuTSdQ3PzvAnkVobV8=)
                          5: EB0E0D70B90D11ED810EF2B6F1222468.roa (hash: qjnrwe3aS+ux+xzqGjAAbOm7cFsu1KPed2tIU2bivU0=)
                          6: 6693E35CB91311ED8675F6C6F1222468.roa (hash: 6JhXHPZF0zRHLFTuJnEgTJ4LTU9hLAslWS4MPzo2NtI=)
                          7: D723225EB90E11ED8875AFB9F1222468.roa (hash: Kn9nxXMbZkD7/JtPdi9k9kabkdwN9RHHmYUqtxe5CgQ=)
                          8: 9E8E161AB90E11ED9A8907B9F1222468.roa (hash: H3Pq9ilGAR4aK1isd9uFYe7Pyx0ixqxwxPuUeqJSQs0=)
                          9: 17ABBADAB90E11ED91A064B7F1222468.roa (hash: 74bYn1UZ1KvUPzN2OSoZA6NmbYaUfQGtHKW8VwNxGn0=)
                          10: 469FD1D2B90E11EDA4D709B8F1222468.roa (hash: DwCiq+yl1LO0Hky4qis9ittQ4gAvggd/ZDmtdnICEP0=)
                          11: 90EE2C2EB90F11ED9409C1BBF1222468.roa (hash: bLZoCDQRzljU6a7QZaQ/7m8zC+sEgUgzOUOZvGfwhno=)
                          12: 0D47BCD4E2C011ED8838FDE52F6D8C1D.roa (hash: MXs+aj3vSle1SqHseZSyhF1+PnwCzcYHwShyPpYpmK0=)
                          13: 1FECC31AB90411EDABCE3C9AF1222468.roa (hash: 6Uqqk7kzConxMnvXRs+CVD9wVfEepdxTtUAqdhrHQ0g=)
                          14: F4DE17FEB90E11ED9DADF2B9F1222468.roa (hash: tOXvv0qQ2rd5TLKqCJZzCM6weckNfsiTf+bbdsmvZM0=)
                          15: EA38FC82B90A11ED85FF5EAEF1222468.roa (hash: U/DFwFJXSPn3zdoS1fQC4dnFVphKMbL7mbtwJ9Z/d5w=)
                          16: 0E435AD2B90B11EDA524C7AEF1222468.roa (hash: 3pi1Vkolg9TLskhvKL2ooaCwse7gRq1ZH74gOxNR6rE=)
                          17: A1485D08B90D11EDB7DC21B6F1222468.roa (hash: UL0BFEayVaVlnK7SHN/JGWP9FuMMQ0RUBTzgrpcNFxg=)
                          18: 1445B006B90611ED953613A0F1222468.roa (hash: E2Pi3VCICYk9gP/HP2vBzXaAEevEu5qcMVBYIRi4msY=)
                          19: 2ACB0B7EB90511EDA3D72E9DF1222468.roa (hash: Y26Di5Mtx4+qnesb2dE9YlwXzFR6VIjMiaa+c4P6/vM=)
                          20: EA518BD2B90311ED9B1C9F99F1222468.roa (hash: J1Vz1rVLXnQTG3uxuAEebjvTI4ey+M4i/uYDE0Z3cIA=)
                          21: 239555A4B91311EDBDD805C6F1222468.roa (hash: TMW3XM4heg7B+zbYk8n88UWO5D0/PgqY4J8jVrpyTf4=)
                          22: 07F1B9A4B90511ED97E8D59CF1222468.roa (hash: Z5jkWScZAF0iUScwlLtH91pr6etSX7YQoMC+lv2EUy8=)
                          23: EDA6C45EB90411ED84A2979CF1222468.roa (hash: YbllMRgXv2ItWxHhyBf/RDeDvc8S+ilc9Tjl3XPHlSM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
        Validity
            Not Before: May  2 02:06:54 2024 GMT
            Not After : May  4 02:06:54 2024 GMT
        Subject: CN=6632f53e-7445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:67:fb:44:58:3c:6d:36:8f:c0:44:7f:e9:
                    d2:cf:59:90:dd:af:3d:b6:83:5b:b0:20:d9:63:9b:
                    41:f9:36:2c:d9:26:b7:9a:1d:52:04:cc:cb:b6:39:
                    a1:d0:b3:77:73:2f:b1:88:69:30:a4:f8:70:f2:af:
                    ea:1e:b8:f3:86:d9:80:4b:78:1c:3d:45:e3:bf:2e:
                    b0:b2:6e:24:7a:11:7a:35:f2:1f:7e:2a:09:79:33:
                    a1:5c:70:ec:31:ca:1f:e9:5b:b9:63:fc:9b:3a:8c:
                    d1:f4:5f:43:5e:22:fe:ff:44:43:19:01:ce:51:a3:
                    0c:3e:00:64:2d:da:6c:53:52:88:a9:8e:a2:25:f0:
                    82:cc:0e:38:04:2a:bb:02:a3:49:42:cf:06:88:54:
                    92:38:78:3b:68:3c:ad:04:09:2a:08:11:56:67:c1:
                    68:09:23:6c:72:fb:3c:b5:2b:4b:76:eb:ae:3e:6d:
                    9b:56:aa:63:56:13:d7:b8:9d:ae:8b:be:46:11:18:
                    fd:9d:a6:8a:23:07:7d:55:e7:99:49:c6:a8:3d:ee:
                    53:49:95:e1:44:9d:e1:98:84:75:01:1f:ae:cd:11:
                    24:c0:f2:2a:44:b1:42:fd:0c:90:91:07:30:67:2b:
                    23:62:5b:94:de:9c:a2:80:e0:1a:45:6b:f9:67:8c:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3F:4A:50:1D:CE:6B:C1:78:93:A9:EE:B3:AD:6F:0E:9D:21:EC:D1
            X509v3 Authority Key Identifier:
                keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e5:fe:08:27:fd:e4:8c:60:58:48:3b:8e:a9:13:3c:04:e3:
         b5:0d:95:6c:70:96:9e:ce:31:4e:43:73:08:46:6b:3b:d6:0a:
         bc:0e:bc:fd:bb:c2:98:b3:b7:6e:4a:f2:7b:81:89:3b:51:5f:
         d9:03:18:12:5b:48:39:9f:10:62:aa:18:aa:fb:60:35:73:86:
         69:c7:c1:8b:df:8f:0c:02:70:84:40:74:68:bf:a3:49:03:9c:
         15:14:70:b0:d6:b2:d9:fa:41:77:ff:b0:5f:7b:b1:77:02:cb:
         2a:50:23:87:28:51:74:d0:b8:b8:ea:0a:d6:b7:df:d9:e5:a4:
         7b:c8:59:76:e8:f7:0d:7e:15:a1:ad:f7:19:11:b0:27:ec:69:
         2f:11:37:da:a8:16:bc:49:e3:6e:1f:c7:78:a6:2a:c6:4c:ca:
         79:ab:ad:fa:68:49:b0:b2:3a:d7:55:af:4f:35:4a:db:a1:8c:
         53:99:fc:4f:4f:3e:ab:ef:40:af:1d:1c:8c:fa:1d:b2:7f:5c:
         cf:21:67:5b:e9:fd:f2:21:34:d5:f1:e7:50:1d:12:3f:a9:2b:
         fa:d4:c0:f8:b6:cd:b0:47:6c:95:bd:b2:3c:03:b1:2e:4b:26:
         28:41:37:7a:4b:52:da:e5:15:6d:f3:ad:83:f7:85:eb:97:be:
         c1:c2:0c:dc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODg2QjNBRjExMC8GA1UEBRMoM0Q2RUQ5MDUwMzdDODNDNTczNzgwQjBDQ0RDNzBE
NUQ4Q0VGMDM4QjAeFw0yNDA1MDIwMjA2NTRaFw0yNDA1MDQwMjA2NTRaMBgxFjAU
BgNVBAMTDTY2MzJmNTNlLTc0NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+r2f7RFg8bTaPwER/6dLPWZDdrz22g1uwINljm0H5NizZJreaHVIEzMu2
OaHQs3dzL7GIaTCk+HDyr+oeuPOG2YBLeBw9ReO/LrCybiR6EXo18h9+Kgl5M6Fc
cOwxyh/pW7lj/Js6jNH0X0NeIv7/REMZAc5Roww+AGQt2mxTUoipjqIl8ILMDjgE
KrsCo0lCzwaIVJI4eDtoPK0ECSoIEVZnwWgJI2xy+zy1K0t2664+bZtWqmNWE9e4
na6LvkYRGP2dpoojB31V55lJxqg97lNJleFEneGYhHUBH67NESTA8ipEsUL9DJCR
BzBnKyNiW5TenKKA4BpFa/lnjLz7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0D9K
UB3Oa8F4k6nus61vDp0h7NEwHwYDVR0jBBgwFoAUPW7ZBQN8g8VzeAsMzccNXYzv
A4swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4NkIzLzM1MzVDQTFBQjhFRjExRURBOUIzNDFEQUYxMjIyNDY4L1BXN1pC
UU44ZzhWemVBc016Y2NOWFl6dkE0cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BXN1pCUU44ZzhWemVBc016Y2NOWFl6dkE0cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODg2QjMvMzUzNUNBMUFCOEVGMTFFREE5QjM0MURBRjEy
MjI0NjgvUFc3WkJRTjhnOFZ6ZUFzTXpjY05YWXp2QTRzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCR5f4IJ/3kjGBYSDuOqRM8BOO1DZVs
cJaezjFOQ3MIRms71gq8Drz9u8KYs7duSvJ7gYk7UV/ZAxgSW0g5nxBiqhiq+2A1
c4Zpx8GL348MAnCEQHRov6NJA5wVFHCw1rLZ+kF3/7Bfe7F3AssqUCOHKFF00Li4
6grWt9/Z5aR7yFl26PcNfhWhrfcZEbAn7GkvETfaqBa8SeNuH8d4pirGTMp5q636
aEmwsjrXVa9PNUrboYxTmfxPTz6r70CvHRyM+h2yf1zPIWdb6f3yITTV8edQHRI/
qSv61MD4ts2wR2yVvbI8A7EuSyYoQTd6S1La5RVt862D94Xrl77Bwgzc
-----END CERTIFICATE-----
Generated at Thu May 2 04:03:48 2024 by rpki-client on console-fra.rpki-client.org