Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
File:                     IirjAYKHNx04yuMYdAoctSsF2bo.mft (raw, json)
Hash identifier:          73Evfd82pBHEvIav6S1rcA2NJseI6TSMAi+qVL9MbcA=
Subject key identifier:   6D:F7:25:86:FA:61:3D:19:69:59:33:45:54:F2:62:7B:13:54:EC:75
Authority key identifier: 22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA
Certificate issuer:       /CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
Certificate serial:       04AD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
Manifest number:          04AD
Signing time:             Thu 21 Nov 2024 01:37:28 +0000
Manifest this update:     Thu 21 Nov 2024 01:37:28 +0000
Manifest next update:     Sat 23 Nov 2024 01:37:28 +0000
Files and hashes:         1: IirjAYKHNx04yuMYdAoctSsF2bo.crl (hash: L5e1JVFHuLutB5P1DXia+G276koPHwQghcIrzsGRlU8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                          rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197 (0x4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
        Validity
            Not Before: Nov 21 01:37:28 2024 GMT
            Not After : Nov 23 01:37:28 2024 GMT
        Subject: CN=673e8ed8-c28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:96:24:5b:54:e9:c0:d1:6a:c1:7c:c5:8f:
                    d0:bd:01:30:c1:75:b5:26:9b:04:ba:3c:ea:d2:0b:
                    4b:e3:29:2d:c8:e1:c6:b6:bc:26:87:03:08:cd:1b:
                    4d:e2:95:a9:da:1e:e5:32:b7:be:7a:e4:5c:68:62:
                    c4:cb:4a:82:a1:18:ef:30:6e:43:4a:57:94:f9:87:
                    91:4e:92:2d:3a:a1:81:86:33:59:71:b5:e9:77:b8:
                    d7:96:6d:18:70:0b:72:d2:ff:ad:2f:e4:ad:b2:0f:
                    95:fc:36:b3:5e:3c:f2:e1:ab:61:29:08:f1:68:69:
                    06:a7:b9:6a:3c:51:58:5d:11:95:84:af:dc:a8:62:
                    ea:79:a9:fe:3e:b5:0c:e8:59:e8:1d:f8:3f:17:14:
                    e4:7a:60:47:68:d6:01:45:cc:a5:63:27:93:88:f6:
                    86:08:86:b3:05:2a:76:ea:55:5f:2f:44:1b:da:ee:
                    03:6b:c8:32:02:3e:88:23:64:25:a2:53:57:8a:85:
                    9c:56:ae:5d:bf:07:26:bd:25:50:32:fa:38:6c:fb:
                    68:d4:77:36:31:82:39:dd:08:ba:f2:25:22:c4:42:
                    15:b3:37:7a:8d:21:ac:1b:c3:e7:a7:ae:21:1b:14:
                    ca:61:55:f4:33:fd:5c:42:13:5c:1f:b1:90:6b:65:
                    cb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F7:25:86:FA:61:3D:19:69:59:33:45:54:F2:62:7B:13:54:EC:75
            X509v3 Authority Key Identifier:
                keyid:22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0d:09:03:5b:6e:e8:45:14:5b:18:51:26:e0:78:ad:5c:36:
         da:1b:f6:e2:ce:89:89:af:bd:be:77:e8:23:87:2e:65:1e:63:
         f8:0b:a5:55:6a:f4:30:d0:ba:fc:86:12:5f:d0:ad:19:d6:1f:
         89:e2:d3:ed:1d:d8:77:4c:51:7a:03:00:bd:13:b0:04:e3:3f:
         92:12:29:2d:41:a0:43:2b:23:3d:43:7e:0b:b9:0e:0c:22:fa:
         a0:66:a0:41:4b:74:84:01:26:7e:8e:83:af:e2:cf:41:b2:d5:
         79:ed:2a:3c:b3:2c:7b:5f:b8:d4:68:32:ba:c2:73:47:48:49:
         00:5d:64:38:9b:82:c7:4f:b5:47:03:b6:8c:6d:2d:45:0c:b1:
         c6:fb:f2:4c:b9:0d:37:b0:c1:44:43:49:da:2e:0a:d8:38:ad:
         41:d0:75:e8:52:f7:21:44:77:fb:4c:3d:22:4b:0f:b9:7a:a7:
         ea:20:49:c8:ce:f5:53:3f:c6:7d:0b:f1:7b:d5:99:5e:27:2f:
         b3:24:68:ed:a5:27:33:43:57:d9:89:28:75:9d:3b:58:d5:17:
         d7:67:82:b6:7a:9c:23:8f:1d:8c:92:8f:e0:29:ed:69:57:b2:
         57:84:e9:f9:72:b3:02:1f:e9:72:a4:bc:c6:07:e2:60:7c:7e:
         43:12:84:ab
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBK0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTk5RTBBUjExMC8GA1UEBRMoMjIyQUUzMDE4Mjg3MzcxRDM4Q0FFMzE4NzQwQTFD
QjUyQjA1RDlCQTAeFw0yNDExMjEwMTM3MjhaFw0yNDExMjMwMTM3MjhaMBgxFjAU
BgNVBAMTDTY3M2U4ZWQ4LWMyOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcmJYkW1TpwNFqwXzFj9C9ATDBdbUmmwS6POrSC0vjKS3I4ca2vCaHAwjN
G03ilanaHuUyt7565FxoYsTLSoKhGO8wbkNKV5T5h5FOki06oYGGM1lxtel3uNeW
bRhwC3LS/60v5K2yD5X8NrNePPLhq2EpCPFoaQanuWo8UVhdEZWEr9yoYup5qf4+
tQzoWegd+D8XFOR6YEdo1gFFzKVjJ5OI9oYIhrMFKnbqVV8vRBva7gNryDICPogj
ZCWiU1eKhZxWrl2/Bya9JVAy+jhs+2jUdzYxgjndCLryJSLEQhWzN3qNIawbw+en
riEbFMphVfQz/VxCE1wfsZBrZcsTAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUbfcl
hvphPRlpWTNFVPJiexNU7HUwHwYDVR0jBBgwFoAUIirjAYKHNx04yuMYdAoctSsF
2bowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5OUUwL0JDRTFENkZDMTQ2MzExRUM4NTIyM0IzM0Q4QTAxNENFL0lpcmpB
WUtITngwNHl1TVlkQW9jdFNzRjJiby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0lpcmpBWUtITngwNHl1TVlkQW9jdFNzRjJiby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTk5RTAvQkNFMUQ2RkMxNDYzMTFFQzg1MjIzQjMzRDhBMDE0
Q0UvSWlyakFZS0hOeDA0eXVNWWRBb2N0U3NGMmJvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4DQkDW27oRRRbGFEm4HitXDbaG/bizomJ
r72+d+gjhy5lHmP4C6VVavQw0Lr8hhJf0K0Z1h+J4tPtHdh3TFF6AwC9E7AE4z+S
EiktQaBDKyM9Q34LuQ4MIvqgZqBBS3SEASZ+joOv4s9BstV57So8syx7X7jUaDK6
wnNHSEkAXWQ4m4LHT7VHA7aMbS1FDLHG+/JMuQ03sMFEQ0naLgrYOK1B0HXoUvch
RHf7TD0iSw+5eqfqIEnIzvVTP8Z9C/F71ZleJy+zJGjtpSczQ1fZiSh1nTtY1RfX
Z4K2epwjjx2Mko/gKe1pV7JXhOn5crMCH+lypLzGB+JgfH5DEoSr
-----END CERTIFICATE-----