Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
File:                     U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft (raw, json)
Hash identifier:          M8hLe4/up4r1snNf+I810UetjYgjN5mPjFj8F1CQJG0=
Subject key identifier:   5A:44:55:C7:C3:0B:0E:F0:57:A4:46:C7:94:C3:3D:9B:9C:8F:D2:C5
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Certificate issuer:       /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial:       03B4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
Manifest number:          038D
Signing time:             Thu 21 Nov 2024 01:56:47 +0000
Manifest this update:     Thu 21 Nov 2024 01:56:46 +0000
Manifest next update:     Sat 23 Nov 2024 01:56:46 +0000
Files and hashes:         1: U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl (hash: COISDlcOErjTl2FwqkqgPbjnRiqZjOuMdWQf0PQvb+Y=)
                          2: 78866038732811EEA03F81784AD9E6FC.roa (hash: O0OZfBN76S8f3hTfdG+0rk9lnBRwZ9klNP8Bx/GC6so=)
                          3: 813EC5F0695311EE900FB3784AD9E6FC.roa (hash: rYBEnWZCTOIvjNGLGQGfrPSdlM64KIqO/WOBlKJR1ws=)
                          4: C21B651267DF11EE943796654AD9E6FC.roa (hash: JoM2f/YVd2Hwzfl86NLf3bbIUBYiG9ZjBtv9OLitU2w=)
                          5: 7B35EBBA695411EEB224927B4AD9E6FC.roa (hash: r8cnTi4WD1GjOQcOwVoRpZjnoq0bPsLPzmynrFSOpPo=)
                          6: C6BBB49ABFC411EE97321BB8775412E6.roa (hash: wyvaynJwkSLv01hae/RpXrp4rCpEhEK2mxTmM3AnUTs=)
                          7: 4EF8CD7C732911EE8290F77A4AD9E6FC.roa (hash: Ab5LW5eZEWzDRhloF/Vfs8/Pj/xw53grKIBtL6INQeg=)
                          8: 854B5332695511EEBE8EB37E4AD9E6FC.roa (hash: qMpIZlL1JG7Cxt6AalljPSNuG/WpcR3cp/px8PtSZDw=)
                          9: 972FAAC0695611EE9ED10D824AD9E6FC.roa (hash: 7QDMQnna185RUd3VbS6kFQRmBH7dnJ7b1efyAdSvaTk=)
                          10: BBD7FCD2732511EE8177F96F4AD9E6FC.roa (hash: ETbkRfWBiQKQIv/HBotMdHRy2JjPbPpo2ZGYcvIRbHg=)
                          11: 3450E8747BC511EF861CA6A9762E951A.roa (hash: S8B80PbkOpew+sJ621u11GoErvJntZrGDtgsuOUu6FA=)
                          12: C8047534695311EE9A1867794AD9E6FC.roa (hash: 3Lf+PtwSVLbtRykdAjgoQEOCQEsNIbgoj+2JSnVr1pk=)
                          13: 4D8233AC695611EEA9A654814AD9E6FC.roa (hash: 5shbJVP+OJddMqwr7ZqQz943Swt127SKDu+xzt2IixM=)
                          14: B91DC424695511EEB0AD5F7F4AD9E6FC.roa (hash: xF9Bk5Mz40aREsF1B2crStPFc7HilkjnEG2UlUsQDKU=)
                          15: 014A3A3E732911EE8FCD3A7A4AD9E6FC.roa (hash: DuUgtMruRVjqyq3tPl9TltQGJha6DDJdmFRtcJbyf+0=)
                          16: 170B3782695211EEA18D28734AD9E6FC.roa (hash: SAlr6R26INjndGn3mYtHQ4fynlkYM6sWpDli6VJl/0c=)
                          17: EA41EC7093D411EE8FEF2613D25BE465.roa (hash: mgAUVvuqZ9BEj+xQEUbj7eA9ZXfOP6eHELa4G3Wf8pg=)
                          18: 03F77036732811EEB870F2764AD9E6FC.roa (hash: dpDcr6I3CyS+CZ5oduKBVVacg+OZWXhwHi+rlcWvB+k=)
                          19: 18FDE308695411EEA213537A4AD9E6FC.roa (hash: V8odt/rDJ3OY5lY//c3mo3wITWeSjVt8toR6RRQBTto=)
                          20: 55C5598E732611EEB932E0714AD9E6FC.roa (hash: UYbbzhlk9KgbwGKtzI9mBTFfbCZIlddNCw7o5BaYOTw=)
                          21: 1B3E5BD6BFC411EEB815F6B6775412E6.roa (hash: /vMD2qyC5dIRjTseOPjuPT3UDFh3JnMal4OEIVBXwNA=)
                          22: FA863D0C695411EEB38C227D4AD9E6FC.roa (hash: KWNdkRrOLJM0mFFXSv0+LOkZ0cLjkGQ0cmkV6KDH3Fg=)
                          23: AEA509EA695411EEB0052B7C4AD9E6FC.roa (hash: XScV3QWAzuM2DYSCzJ4FRDjSF03CmS13+qopxF3W36M=)
                          24: F553722E695311EEA258F7794AD9E6FC.roa (hash: UIZx8a7F87YQDG8kMwP4V1uCvXx959AYMWy9I2LGPT4=)
                          25: 1D7A7458BFC311EE87E957B5775412E6.roa (hash: J6x3YduO7NoRYCnR3Wx+jPh/ZgFTIi54OWjHk1rIktE=)
                          26: CAADEE44732811EE8F7D4C794AD9E6FC.roa (hash: n+gRBiM7ZIC2gV0nUjF3LshJXh3uqCbjGwvZ0X8j1XA=)
                          27: 19101AA867DF11EE812DA3634AD9E6FC.roa (hash: 4JOsUwrnmGuB0KN0k80QhIMQJpbGvmUfXPMXU6YnDiE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
        Validity
            Not Before: Nov 21 01:56:46 2024 GMT
            Not After : Nov 23 01:56:46 2024 GMT
        Subject: CN=673e935f-e22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:31:df:b6:ae:ad:e1:49:7b:c4:de:63:d1:24:
                    69:c8:e7:7d:1b:88:a5:e9:2c:e4:a9:b9:5a:11:3c:
                    4b:09:ac:71:cc:b8:6e:eb:dd:72:f3:b9:a2:1f:d5:
                    21:a0:e3:27:0e:e4:e3:7e:0a:b6:38:e9:3a:73:37:
                    f3:7d:ff:de:7d:f8:30:7b:70:42:43:bc:f6:2b:a7:
                    75:f5:14:c5:17:8e:c4:9d:31:23:31:2e:8f:e0:0d:
                    86:b9:94:59:88:66:38:87:90:05:c4:83:bc:ab:d0:
                    b5:dd:a7:bd:26:30:31:b3:fe:21:da:29:7e:a1:06:
                    f4:28:41:2d:15:be:2b:30:ea:cb:00:a8:28:20:aa:
                    7f:af:94:f9:25:99:01:de:ed:68:08:79:74:49:0b:
                    ec:86:94:e8:22:3f:a4:dd:8f:99:4b:1c:c5:74:ed:
                    5c:1b:a3:b9:4b:f9:10:d7:99:66:59:4f:e3:4d:6e:
                    7d:a5:23:d3:f5:ac:8f:5e:9c:32:83:a7:b3:86:5b:
                    9c:21:30:54:4b:2e:6c:88:a6:77:19:66:87:20:f6:
                    28:7e:67:f7:c7:77:d8:c8:24:e2:33:75:90:f2:f3:
                    2a:95:a0:1f:2e:a0:38:7e:a7:9a:f9:e0:d0:84:53:
                    a0:37:b5:06:5d:98:5d:f6:78:b8:33:a7:4a:c9:9d:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:44:55:C7:C3:0B:0E:F0:57:A4:46:C7:94:C3:3D:9B:9C:8F:D2:C5
            X509v3 Authority Key Identifier:
                keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:30:ef:68:a3:ce:32:dd:df:ec:19:5d:78:43:16:36:4f:c2:
         e1:dd:2b:f8:ad:8a:f5:f7:31:b2:7f:12:72:28:35:60:75:e7:
         03:b6:2f:7e:a2:00:d8:58:3d:35:88:f9:8d:99:1e:a7:6b:f3:
         eb:b4:92:f9:26:44:59:00:d0:ec:1e:1b:41:44:a3:aa:8d:7d:
         75:a9:38:5f:66:2a:36:da:0f:4c:94:56:67:57:1f:0f:ff:2a:
         eb:75:16:8a:53:b7:47:08:b7:d3:df:50:49:ef:cf:29:e6:29:
         4f:04:b5:06:fd:9e:a2:59:d4:a4:08:6d:54:0f:77:d1:fe:47:
         a7:3a:82:54:7e:57:31:53:07:01:8e:30:e7:47:e6:f6:ab:f7:
         2d:73:33:f3:7c:bb:d4:42:fc:92:c9:a4:d6:21:48:dd:13:44:
         10:ba:42:63:49:9e:c4:c2:08:1c:df:49:4d:4e:cd:30:93:56:
         cd:9c:22:c2:62:40:3d:68:53:3e:37:00:04:15:ed:a5:6a:67:
         70:13:a3:16:19:a8:c2:2c:1b:17:7d:3f:0a:6f:3f:74:19:86:
         f1:18:f1:dd:c7:e0:3e:fa:be:10:15:6e:4d:01:8f:7b:04:e0:
         07:39:80:6a:f4:ee:67:07:4c:bf:75:78:71:89:8b:5e:cc:e6:
         0c:21:df:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:36 2024 by rpki-client on console-fra.rpki-client.org