Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
File:                     MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft (raw, json)
Hash identifier:          h0wVBC1G/1r3uwvDWp9DsG19yUg3jLCsBPRlrlvKFQY=
Subject key identifier:   57:53:87:89:1B:28:58:BE:48:D9:FF:AC:1E:B1:40:7F:24:D8:D5:30
Authority key identifier: 33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
Certificate issuer:       /CN=F3691854AR/serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
Certificate serial:       01F6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
Manifest number:          01F5
Signing time:             Sun 16 Feb 2025 02:45:19 +0000
Manifest this update:     Sun 16 Feb 2025 02:45:19 +0000
Manifest next update:     Tue 18 Feb 2025 02:45:19 +0000
Files and hashes:         1: MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl (hash: O3Qm6S6UxmZoOfvSAziST6nwSisugeYLybcX0YQSTaM=)
                          2: 2BBC033C71AE11EEA2D2E5354AD9E6FC.roa (hash: 2uI0q3ii9m0usdGfquktABEqM6p1z0wsDQZ+3pXcYh4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
                          rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AR
        Validity
            Not Before: Feb 16 02:45:19 2025 GMT
            Not After : Feb 18 02:45:19 2025 GMT
        Subject: CN=67b1513f-bbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:f8:65:36:73:d8:3f:ad:d5:de:5f:81:79:
                    c6:f8:86:cf:1a:23:d1:1f:57:1a:45:7e:73:02:91:
                    c4:c2:b6:d4:f1:14:bc:f0:0c:e9:ee:34:3f:36:74:
                    86:fb:6b:ca:ad:8c:ee:d7:bd:ec:1e:92:2a:75:56:
                    91:d8:6b:9b:66:ce:26:73:a0:d8:dc:9b:87:ac:28:
                    e9:e8:96:1b:c1:ee:8b:1a:57:07:3c:9e:2c:ac:e0:
                    e2:b1:18:fa:94:c9:61:43:65:d4:72:e8:58:98:32:
                    0d:67:4b:c3:1a:51:e8:e2:bc:a1:8d:e6:5e:43:67:
                    b4:df:77:97:d3:03:c0:43:9b:f2:13:28:f3:cb:d3:
                    d1:e3:3c:32:ef:53:c8:d4:f3:b1:02:09:bf:c9:d8:
                    62:48:ce:e0:66:c6:ee:13:fd:0f:a6:90:b0:39:3c:
                    ae:b2:30:39:85:f9:12:77:15:d0:f6:85:fb:42:fd:
                    04:a3:d5:5b:72:a8:36:4e:e7:13:21:9f:e7:ad:a9:
                    07:b7:d2:cf:9c:e6:f4:12:45:66:d4:a9:d1:db:a7:
                    89:6f:77:7a:cd:1c:6e:cf:00:0e:93:b8:33:12:17:
                    98:50:65:52:4e:7d:1d:55:74:eb:6f:ab:62:d9:fe:
                    93:88:69:3a:37:6b:b0:8f:87:a7:88:f2:b4:c6:57:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:53:87:89:1B:28:58:BE:48:D9:FF:AC:1E:B1:40:7F:24:D8:D5:30
            X509v3 Authority Key Identifier:
                keyid:33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:12:38:41:6b:85:6b:2e:e2:cc:43:53:80:8a:d5:9d:c5:b5:
         0b:dc:49:d6:b7:a6:15:a5:87:0e:7c:88:77:33:8d:20:c0:29:
         df:2a:f6:04:ec:15:99:31:b7:e8:2d:35:be:2c:7b:82:53:2a:
         0a:bf:c8:5c:2b:ef:6c:d7:b0:44:51:f8:c3:c9:8e:22:8f:d3:
         ed:02:6a:85:ec:aa:db:ee:b9:41:0d:39:6e:cf:da:a7:5e:ba:
         7d:a7:45:24:02:61:44:32:09:0e:79:ec:3c:6c:7d:65:7b:c5:
         46:d1:9b:a7:71:b9:41:90:44:88:78:3a:8a:55:88:a7:7d:73:
         6c:d4:ca:c0:f2:32:d8:f1:ec:a5:fb:72:d6:95:32:c4:c6:0c:
         71:fe:4f:e2:d9:c1:5d:7a:63:73:8f:29:7e:ff:b7:eb:b8:30:
         68:8f:48:27:07:75:01:cc:4a:d9:c9:6c:f0:b1:a2:7a:d2:68:
         e0:6e:8e:87:9b:a9:97:e4:bc:d7:8c:5a:69:0e:86:f9:f9:31:
         fd:52:0b:b2:a0:06:be:f5:42:5c:dd:7b:43:cb:d2:58:72:7c:
         37:53:21:62:84:e1:c4:fc:d8:5d:ce:9c:71:b5:bc:5e:ad:0c:
         0a:a3:67:32:27:a6:68:f2:68:57:04:26:4d:ee:8d:33:d4:64:
         f9:4a:29:3e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTE4NTRBUjExMC8GA1UEBRMoMzMwODRGQUY5MzNDNzI0RDMyRTZERkE3OUYxNUNE
MTZGM0Q4MkU3NDAeFw0yNTAyMTYwMjQ1MTlaFw0yNTAyMTgwMjQ1MTlaMBgxFjAU
BgNVBAMTDTY3YjE1MTNmLWJiY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJ3PhlNnPYP63V3l+Becb4hs8aI9EfVxpFfnMCkcTCttTxFLzwDOnuND82
dIb7a8qtjO7Xvewekip1VpHYa5tmziZzoNjcm4esKOnolhvB7osaVwc8niys4OKx
GPqUyWFDZdRy6FiYMg1nS8MaUejivKGN5l5DZ7Tfd5fTA8BDm/ITKPPL09HjPDLv
U8jU87ECCb/J2GJIzuBmxu4T/Q+mkLA5PK6yMDmF+RJ3FdD2hftC/QSj1VtyqDZO
5xMhn+etqQe30s+c5vQSRWbUqdHbp4lvd3rNHG7PAA6TuDMSF5hQZVJOfR1VdOtv
q2LZ/pOIaTo3a7CPh6eI8rTGV69pAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUV1OH
iRsoWL5I2f+sHrFAfyTY1TAwHwYDVR0jBBgwFoAUMwhPr5M8ck0y5t+nnxXNFvPY
LnQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkxODU0LzcwQzdFMEZBNzFBRDExRUU4QzcxOUUzMzRBRDlFNkZDL013aFBy
NU04Y2sweTV0LW5ueFhORnZQWUxuUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L013aFByNU04Y2sweTV0LW5ueFhORnZQWUxuUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTE4NTQvNzBDN0UwRkE3MUFEMTFFRThDNzE5RTMzNEFEOUU2
RkMvTXdoUHI1TThjazB5NXQtbm54WE5GdlBZTG5RLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPEjhBa4VrLuLMQ1OAitWdxbUL3EnWt6YV
pYcOfIh3M40gwCnfKvYE7BWZMbfoLTW+LHuCUyoKv8hcK+9s17BEUfjDyY4ij9Pt
AmqF7Krb7rlBDTluz9qnXrp9p0UkAmFEMgkOeew8bH1le8VG0ZuncblBkESIeDqK
VYinfXNs1MrA8jLY8eyl+3LWlTLExgxx/k/i2cFdemNzjyl+/7fruDBoj0gnB3UB
zErZyWzwsaJ60mjgbo6Hm6mX5LzXjFppDob5+TH9UguyoAa+9UJc3XtDy9JYcnw3
UyFihOHE/NhdzpxxtbxerQwKo2cyJ6Zo8mhXBCZN7o0z1GT5Sik+
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:37 2025 by rpki-client