Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File:                     CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier:          +xOmSssLPB4OYRX073IH4Sa8Mc2sno92Rpu88b+AV0U=
Subject key identifier:   1E:A5:38:6A:B0:FA:D5:C5:EC:FE:D4:B9:4D:E0:3D:2C:D3:98:3E:C4
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer:       /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial:       0148
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number:          0142
Signing time:             Sun 16 Feb 2025 02:59:12 +0000
Manifest this update:     Sun 16 Feb 2025 02:59:12 +0000
Manifest next update:     Tue 18 Feb 2025 02:59:12 +0000
Files and hashes:         1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: /0LFujYyW+0ISvnGdbBlkXWQ+yNlnHwOn6XBj+aPX5E=)
                          2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
                          3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
                          4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
                          5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693AE0AF
        Validity
            Not Before: Feb 16 02:59:12 2025 GMT
            Not After : Feb 18 02:59:12 2025 GMT
        Subject: CN=67b15480-4642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b0:30:8f:8c:e9:ad:7c:be:e7:3e:76:10:45:
                    c1:13:3b:e6:03:c3:30:e3:b8:3c:6e:fe:07:92:db:
                    f6:22:25:93:07:2b:86:88:f4:ae:4d:f5:0b:7f:1a:
                    cc:d0:f5:10:51:62:b4:3e:1c:74:1d:7a:fc:30:2c:
                    c9:c1:1b:05:d4:34:3f:8d:e3:74:2e:31:2b:fa:f1:
                    36:4d:56:b5:9b:35:90:04:58:79:22:62:09:20:dd:
                    65:50:bc:72:cc:74:b8:b1:f0:29:34:15:97:d1:15:
                    95:96:06:15:ad:cd:34:4a:99:1f:7e:3c:66:a3:33:
                    60:91:c4:3f:34:93:31:3f:ba:c0:c5:a7:0e:62:b1:
                    30:e4:20:d8:cf:9b:d2:da:74:0b:6c:6e:29:a9:89:
                    3a:3d:0c:d6:bc:2a:6f:07:0a:b1:06:8b:b7:05:ba:
                    f3:8b:7b:e2:8a:f3:e7:45:14:3c:44:6e:0c:9c:1d:
                    eb:9e:73:22:3c:02:10:f1:ca:a1:27:51:44:0e:7a:
                    34:8a:07:a6:13:b2:e3:27:b8:1f:3a:9b:16:4c:a8:
                    64:bd:35:0c:5f:9d:45:2e:bd:2b:3b:23:ef:ac:8a:
                    89:25:54:42:03:fe:d3:72:41:d3:4d:47:56:59:cb:
                    e4:cc:35:8b:e3:09:58:a4:0f:02:c0:4c:10:6b:e1:
                    4c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A5:38:6A:B0:FA:D5:C5:EC:FE:D4:B9:4D:E0:3D:2C:D3:98:3E:C4
            X509v3 Authority Key Identifier:
                keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:39:b0:67:d0:b7:27:c8:db:b5:c8:bc:a4:44:ce:2b:2b:ac:
         ca:7b:40:3d:ef:5b:f3:60:ce:87:f1:c3:6e:c0:5b:7f:44:7c:
         64:da:24:89:e9:a0:b8:e7:df:d5:fb:f2:94:57:13:97:d1:8d:
         e1:7b:ca:85:22:be:16:42:42:78:8e:0c:f4:f0:24:20:70:75:
         6f:22:79:65:ff:9e:b7:6d:e7:b1:a3:73:75:46:1f:8a:50:d2:
         ac:75:3e:c2:e7:d4:36:dd:65:4e:66:67:61:44:53:78:63:12:
         8e:2f:7e:c6:8d:76:40:1f:a5:f0:7d:ac:10:07:94:32:11:de:
         3f:0d:43:d2:67:8e:6c:73:98:9c:6a:9e:e3:82:cd:9c:60:99:
         cc:f5:35:96:3f:87:4b:39:b8:96:cf:1b:db:dc:07:1b:e6:8e:
         56:2a:2c:d0:4e:29:b0:41:ca:31:5f:68:15:f6:21:6e:4f:43:
         c6:91:a7:df:af:2a:92:15:0b:5b:d4:2a:6b:d2:a4:98:4e:b2:
         0c:f7:b7:fb:9c:8f:e5:af:cd:d1:e4:8f:f1:9a:75:ed:9b:31:
         26:6d:c8:73:f8:b0:d2:f8:85:2d:e9:be:ba:35:e9:ab:af:e5:
         b0:13:fd:df:41:f6:af:bd:26:63:a1:87:94:f6:86:2b:66:3e:
         19:e9:48:b8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTNBRTBBRjExMC8GA1UEBRMoMDlCMzRFMTMzNjM5RDNCNEVFMzUxNjEzQjhBNjBE
NkIxOTAyQUQ2MzAeFw0yNTAyMTYwMjU5MTJaFw0yNTAyMTgwMjU5MTJaMBgxFjAU
BgNVBAMTDTY3YjE1NDgwLTQ2NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMsDCPjOmtfL7nPnYQRcETO+YDwzDjuDxu/geS2/YiJZMHK4aI9K5N9Qt/
GszQ9RBRYrQ+HHQdevwwLMnBGwXUND+N43QuMSv68TZNVrWbNZAEWHkiYgkg3WVQ
vHLMdLix8Ck0FZfRFZWWBhWtzTRKmR9+PGajM2CRxD80kzE/usDFpw5isTDkINjP
m9LadAtsbimpiTo9DNa8Km8HCrEGi7cFuvOLe+KK8+dFFDxEbgycHeuecyI8AhDx
yqEnUUQOejSKB6YTsuMnuB86mxZMqGS9NQxfnUUuvSs7I++sioklVEID/tNyQdNN
R1ZZy+TMNYvjCVikDwLATBBr4UwHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUHqU4
arD61cXs/tS5TeA9LNOYPsQwHwYDVR0jBBgwFoAUCbNOEzY507TuNRYTuKYNaxkC
rWMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkzQUUwL0JCRTUyRkYyMDBFMTExRUZBRjg0RDYwNzAxNzAwMUIxL0NiTk9F
elk1MDdUdU5SWVR1S1lOYXhrQ3JXTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NiTk9Felk1MDdUdU5SWVR1S1lOYXhrQ3JXTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTNBRTAvQkJFNTJGRjIwMEUxMTFFRkFGODRENjA3MDE3
MDAxQjEvQ2JOT0V6WTUwN1R1TlJZVHVLWU5heGtDcldNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDSObBn0LcnyNu1yLykRM4rK6zKe0A9
71vzYM6H8cNuwFt/RHxk2iSJ6aC459/V+/KUVxOX0Y3he8qFIr4WQkJ4jgz08CQg
cHVvInll/563beexo3N1Rh+KUNKsdT7C59Q23WVOZmdhRFN4YxKOL37GjXZAH6Xw
fawQB5QyEd4/DUPSZ45sc5icap7jgs2cYJnM9TWWP4dLObiWzxvb3Acb5o5WKizQ
TimwQcoxX2gV9iFuT0PGkaffryqSFQtb1Cpr0qSYTrIM97f7nI/lr83R5I/xmnXt
mzEmbchz+LDS+IUt6b66Nemrr+WwE/3fQfavvSZjoYeU9oYrZj4Z6Ui4
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:06 2025 by rpki-client