Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
File:                     peeb8ti13JAu4K9nlB3mgyjCJdY.mft (raw, json)
Hash identifier:          ihbIOD8xeCdKNyVtoZYYGcsug9wLVQX7DquLdX3B4jQ=
Subject key identifier:   87:9C:DA:DE:68:6B:C7:4E:C5:F0:51:AB:60:14:DC:CF:F2:2C:D3:47
Authority key identifier: A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6
Certificate issuer:       /CN=F3695CC5AF/serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
Certificate serial:       03D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
Manifest number:          03D5
Signing time:             Tue 07 May 2024 01:37:24 +0000
Manifest this update:     Tue 07 May 2024 01:37:23 +0000
Manifest next update:     Thu 09 May 2024 01:37:23 +0000
Files and hashes:         1: peeb8ti13JAu4K9nlB3mgyjCJdY.crl (hash: ubKsM+9He8dm2sVowOa/9/33JZOAcfuImiom5nxi+AQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695CC5AF/serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
        Validity
            Not Before: May  7 01:37:23 2024 GMT
            Not After : May  9 01:37:23 2024 GMT
        Subject: CN=663985d4-2de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:9a:a4:10:13:68:b7:18:ce:9b:10:16:e2:
                    ec:9c:5a:54:f5:47:2c:c1:c8:90:01:ad:c8:11:fa:
                    9e:a9:40:12:50:c0:d3:ae:b7:e2:0c:30:69:61:06:
                    8e:dd:f6:f7:1f:7b:fc:cb:fc:5f:81:25:40:fe:25:
                    0f:3c:e0:e4:36:c2:de:6e:cb:ce:a5:a2:0c:87:8f:
                    f3:86:62:bd:6a:c6:b6:b9:01:75:eb:36:0d:54:05:
                    03:c1:b3:d9:a8:69:9e:a9:d8:9d:af:26:15:e2:e4:
                    47:35:9d:b5:44:07:ed:ba:22:c6:ce:6a:d6:34:05:
                    05:d0:6f:e3:8a:a8:c1:70:5f:33:5c:cb:be:7a:9f:
                    33:ca:6c:c3:59:c7:9d:85:26:5b:33:32:e7:c0:35:
                    48:8d:ec:63:ad:0c:93:40:b1:5f:ea:91:0d:77:02:
                    bb:89:b3:7a:4c:c8:e5:69:0b:ef:a4:ca:9a:06:11:
                    b4:8f:e1:5c:b6:70:84:a4:17:22:12:1b:c8:d6:6e:
                    40:46:da:a3:17:b6:51:ee:8b:02:2e:c2:43:9a:75:
                    3a:a2:24:df:c1:e4:8f:b6:58:52:17:9d:d3:8f:ad:
                    03:05:cd:83:26:ef:c5:a2:14:a9:db:79:6e:3d:c3:
                    e8:63:70:a5:19:55:a6:38:db:2c:6f:08:d6:18:09:
                    0b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9C:DA:DE:68:6B:C7:4E:C5:F0:51:AB:60:14:DC:CF:F2:2C:D3:47
            X509v3 Authority Key Identifier:
                keyid:A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:08:7c:a5:22:00:e6:aa:20:cb:38:49:70:58:97:5d:cf:4e:
         20:f4:62:6b:2f:3d:81:8f:7d:e2:3c:55:d7:d9:2a:97:0a:dd:
         73:0d:70:b0:d5:68:56:5e:28:42:bb:3b:ed:bc:9a:5e:7f:8f:
         18:b8:4b:e1:26:78:de:2a:b8:bd:52:a6:84:bd:8f:9c:9c:17:
         2f:30:89:4a:c2:d7:a6:21:fd:5d:ae:2f:1a:b8:cc:d7:87:08:
         a4:38:03:9e:db:ec:fc:35:5a:54:cd:15:01:12:30:95:4b:b4:
         b0:a4:5c:02:e3:16:09:e2:86:ac:24:d0:5a:cd:ab:fc:d2:df:
         36:f2:b2:ab:b0:a8:c8:08:24:d7:49:5b:20:c4:c8:1c:5c:f3:
         8a:83:72:9a:19:ae:06:81:0a:00:3f:4c:a7:2a:44:aa:74:89:
         d2:f2:c9:dc:cd:a2:19:a1:70:0c:27:ef:ac:f5:8f:dd:c2:09:
         5a:60:fe:0c:e2:b2:44:59:5d:2b:b4:5d:73:3f:9c:8e:ab:2e:
         00:c2:6a:a7:b7:49:2f:1e:6e:62:87:19:c9:28:6f:2e:d5:a9:
         67:ea:59:c5:20:5c:24:c2:25:86:ad:1a:b8:fa:55:8a:38:c5:
         9e:5f:92:cf:0e:eb:0a:3c:d6:c1:b0:d1:97:6f:20:65:6a:d5:
         0c:4a:30:ac
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTVDQzVBRjExMC8GA1UEBRMoQTVFNzlCRjJEOEI1REM5MDJFRTBBRjY3OTQxREU2
ODMyOEMyMjVENjAeFw0yNDA1MDcwMTM3MjNaFw0yNDA1MDkwMTM3MjNaMBgxFjAU
BgNVBAMTDTY2Mzk4NWQ0LTJkZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2R5qkEBNotxjOmxAW4uycWlT1RyzByJABrcgR+p6pQBJQwNOut+IMMGlh
Bo7d9vcfe/zL/F+BJUD+JQ884OQ2wt5uy86logyHj/OGYr1qxra5AXXrNg1UBQPB
s9moaZ6p2J2vJhXi5Ec1nbVEB+26IsbOatY0BQXQb+OKqMFwXzNcy756nzPKbMNZ
x52FJlszMufANUiN7GOtDJNAsV/qkQ13AruJs3pMyOVpC++kypoGEbSP4Vy2cISk
FyISG8jWbkBG2qMXtlHuiwIuwkOadTqiJN/B5I+2WFIXndOPrQMFzYMm78WiFKnb
eW49w+hjcKUZVaY42yxvCNYYCQuxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUh5za
3mhrx07F8FGrYBTcz/Is00cwHwYDVR0jBBgwFoAUpeeb8ti13JAu4K9nlB3mgyjC
JdYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1Q0M1LzA4QTk3MDRFMjExQzExRUNBRTc0RkUyQkQ4QTAxNENFL3BlZWI4
dGkxM0pBdTRLOW5sQjNtZ3lqQ0pkWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BlZWI4dGkxM0pBdTRLOW5sQjNtZ3lqQ0pkWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTVDQzUvMDhBOTcwNEUyMTFDMTFFQ0FFNzRGRTJCRDhB
MDE0Q0UvcGVlYjh0aTEzSkF1NEs5bmxCM21neWpDSmRZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeCHylIgDmqiDLOElwWJddz04g9GJr
Lz2Bj33iPFXX2SqXCt1zDXCw1WhWXihCuzvtvJpef48YuEvhJnjeKri9UqaEvY+c
nBcvMIlKwtemIf1dri8auMzXhwikOAOe2+z8NVpUzRUBEjCVS7SwpFwC4xYJ4oas
JNBazav80t828rKrsKjICCTXSVsgxMgcXPOKg3KaGa4GgQoAP0ynKkSqdInS8snc
zaIZoXAMJ++s9Y/dwglaYP4M4rJEWV0rtF1zP5yOqy4Awmqnt0kvHm5ihxnJKG8u
1aln6lnFIFwkwiWGrRq4+lWKOMWeX5LPDusKPNbBsNGXbyBlatUMSjCs
-----END CERTIFICATE-----
Generated at Tue May 7 03:12:11 2024 by rpki-client on console-fra.rpki-client.org