Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
File:                     EpiStZvukL-kaOVEXErR0BaeEdk.mft (raw, json)
Hash identifier:          otn0BYiXeI4Ae8mKV/UTbOGwOnAJsPKsTNLFMPHgWCc=
Subject key identifier:   7A:37:93:83:16:73:FB:B1:B0:E0:E4:F1:6A:18:63:5E:47:1C:A8:8B
Authority key identifier: 12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9
Certificate issuer:       /CN=F3689E12AF/serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
Certificate serial:       04C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
Manifest number:          04C2
Signing time:             Mon 06 May 2024 01:21:08 +0000
Manifest this update:     Mon 06 May 2024 01:21:08 +0000
Manifest next update:     Wed 08 May 2024 01:21:08 +0000
Files and hashes:         1: EpiStZvukL-kaOVEXErR0BaeEdk.crl (hash: KK9cfWbw5YV1+ctkXWGCv+94yjkJh5NnQVCPv4h1GXw=)
                          2: B5080AD06A3811EBA7B2E932F8AEA228.roa (hash: 06xwOkOrQfyvwrgwnCZjvF757U107kkYwkenMDnbf3M=)
                          3: 9A4E88A46A3811EBADA4CE32F8AEA228.roa (hash: JNx7J58GczpcPwlSR22R5up1pCKZvY5JopK+aTD668U=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220 (0x4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689E12AF/serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
        Validity
            Not Before: May  6 01:21:08 2024 GMT
            Not After : May  8 01:21:08 2024 GMT
        Subject: CN=66383084-05aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:de:37:dd:7c:86:e2:84:0a:a0:8a:b4:a9:
                    c0:56:53:45:a8:30:d8:50:3e:bc:24:b5:c2:81:ac:
                    d3:11:5e:62:fa:f5:b4:0e:32:f5:c2:62:c1:0c:30:
                    65:fc:89:83:94:b5:6f:70:2c:72:fc:ec:ef:77:21:
                    ab:4d:e4:2f:7f:97:fb:23:17:58:83:2b:d1:8f:6e:
                    c2:5e:0a:89:77:47:58:71:36:58:ff:a0:84:e5:10:
                    7e:ae:30:db:be:4e:87:dd:ec:9a:41:5c:95:e0:5a:
                    fb:cf:18:56:bc:03:5b:e6:4e:22:3a:cb:73:c6:b6:
                    14:0e:2c:b1:7a:50:3b:60:d0:fd:c4:8f:00:90:82:
                    1d:42:db:54:4a:d1:06:4a:b2:59:63:d2:cf:ec:7e:
                    5d:e3:42:d0:ec:aa:9f:71:13:0f:c4:b7:94:84:c0:
                    cd:1b:a8:d3:9c:43:9b:2e:84:3f:ae:35:26:3d:5c:
                    51:40:fe:f4:0b:7a:ff:4d:20:1c:cf:2e:ec:2d:56:
                    a2:14:ce:0e:75:95:55:9a:fa:fe:5e:aa:e9:51:05:
                    42:a3:be:df:58:fc:3e:cb:5b:21:61:e3:1b:d5:ac:
                    ac:8d:9c:cb:ed:c1:f2:cc:b1:5e:57:c2:4e:b8:77:
                    2f:a0:3c:76:21:61:34:3a:56:e6:74:a6:32:9f:f4:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:37:93:83:16:73:FB:B1:B0:E0:E4:F1:6A:18:63:5E:47:1C:A8:8B
            X509v3 Authority Key Identifier:
                keyid:12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:cd:9d:ab:c0:19:43:3f:47:78:94:b1:67:fd:ed:bc:13:65:
         83:90:fd:de:bb:a2:e6:09:65:d0:27:3c:e6:1f:85:b1:b6:2f:
         82:74:1b:2f:25:2b:35:f7:11:22:6c:84:29:cd:07:9b:67:8e:
         dd:b7:c0:cb:f6:da:4a:95:96:50:55:5f:ce:b7:cb:91:3c:ec:
         0c:9d:8a:c6:5f:c0:cb:55:33:f7:2d:fe:0d:a4:0a:9e:d8:1a:
         c3:05:9c:f2:ba:cf:5f:6b:ea:87:5b:da:de:cc:8c:49:48:b9:
         c8:40:b4:99:9d:d4:b6:c4:b6:f4:c0:06:b9:e4:5c:1a:68:4f:
         44:a4:6b:98:2c:d0:bf:7c:08:a2:5d:2a:49:58:ee:d1:df:9c:
         c4:8a:f2:94:74:dd:ca:da:b0:a3:0b:ee:bf:72:7e:f9:e2:4b:
         4e:d4:f2:41:10:12:58:0e:06:5f:9f:82:89:42:76:64:0d:29:
         54:ff:da:de:7b:bd:83:5f:16:59:c0:23:a9:dd:0e:7f:d9:79:
         91:e9:dd:42:bb:72:b3:a8:a2:58:a8:ff:02:29:dd:5e:a9:f9:
         31:9a:fc:5d:81:8e:1a:a3:c5:cb:cf:af:33:70:9c:d9:64:48:
         34:c9:a9:a8:e7:95:52:0f:7a:e9:65:48:d8:67:4f:7f:e4:7a:
         34:cc:7d:bb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODlFMTJBRjExMC8GA1UEBRMoMTI5ODkyQjU5QkVFOTBCRkE0NjhFNTQ0NUM0QUQx
RDAxNjlFMTFEOTAeFw0yNDA1MDYwMTIxMDhaFw0yNDA1MDgwMTIxMDhaMBgxFjAU
BgNVBAMTDTY2MzgzMDg0LTA1YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/ZN433XyG4oQKoIq0qcBWU0WoMNhQPrwktcKBrNMRXmL69bQOMvXCYsEM
MGX8iYOUtW9wLHL87O93IatN5C9/l/sjF1iDK9GPbsJeCol3R1hxNlj/oITlEH6u
MNu+Tofd7JpBXJXgWvvPGFa8A1vmTiI6y3PGthQOLLF6UDtg0P3EjwCQgh1C21RK
0QZKsllj0s/sfl3jQtDsqp9xEw/Et5SEwM0bqNOcQ5suhD+uNSY9XFFA/vQLev9N
IBzPLuwtVqIUzg51lVWa+v5equlRBUKjvt9Y/D7LWyFh4xvVrKyNnMvtwfLMsV5X
wk64dy+gPHYhYTQ6VuZ0pjKf9FtbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUejeT
gxZz+7Gw4OTxahhjXkccqIswHwYDVR0jBBgwFoAUEpiStZvukL+kaOVEXErR0Bae
EdkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg5RTEyLzZDNjA5NjhBNkEzODExRUJBN0M4OEMzMkY4QUVBMjI4L0VwaVN0
WnZ1a0wta2FPVkVYRXJSMEJhZUVkay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VwaVN0WnZ1a0wta2FPVkVYRXJSMEJhZUVkay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODlFMTIvNkM2MDk2OEE2QTM4MTFFQkE3Qzg4QzMyRjhB
RUEyMjgvRXBpU3RadnVrTC1rYU9WRVhFclIwQmFlRWRrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAczZ2rwBlDP0d4lLFn/e28E2WDkP3e
u6LmCWXQJzzmH4Wxti+CdBsvJSs19xEibIQpzQebZ47dt8DL9tpKlZZQVV/Ot8uR
POwMnYrGX8DLVTP3Lf4NpAqe2BrDBZzyus9fa+qHW9rezIxJSLnIQLSZndS2xLb0
wAa55FwaaE9EpGuYLNC/fAiiXSpJWO7R35zEivKUdN3K2rCjC+6/cn754ktO1PJB
EBJYDgZfn4KJQnZkDSlU/9ree72DXxZZwCOp3Q5/2XmR6d1Cu3KzqKJYqP8CKd1e
qfkxmvxdgY4ao8XLz68zcJzZZEg0yamo55VSD3rpZUjYZ09/5Ho0zH27
-----END CERTIFICATE-----
Generated at Mon May 6 03:08:10 2024 by rpki-client on console-fra.rpki-client.org