Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
File:                     yRNvElsMvwHLUu8Ona1pO53hebE.mft (raw, json)
Hash identifier:          ieWVplxntYf/VqGcdhtp88hdLaUNh2PfEnffk2YSpJc=
Subject key identifier:   3B:9E:4E:78:37:12:77:D4:B1:CD:61:27:73:34:3E:D5:4E:A6:53:78
Authority key identifier: C9:13:6F:12:5B:0C:BF:01:CB:52:EF:0E:9D:AD:69:3B:9D:E1:79:B1
Certificate issuer:       /CN=F369F5CBAF/serialNumber=C9136F125B0CBF01CB52EF0E9DAD693B9DE179B1
Certificate serial:       39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
Manifest number:          37
Signing time:             Wed 23 Oct 2024 02:59:38 +0000
Manifest this update:     Wed 23 Oct 2024 02:59:38 +0000
Manifest next update:     Fri 25 Oct 2024 02:59:38 +0000
Files and hashes:         1: yRNvElsMvwHLUu8Ona1pO53hebE.crl (hash: Chacv4owsgRgKtsLZrYuqhnzIusaZU/T3J2DXO4BaQ8=)
                          2: DAA13BB269C211EF87DB5478762E951A.roa (hash: Y1C12JjUCRZB6miS2tftf7tn5FoqQq5MI2tzdSPlKmM=)
                          3: 6902F9DC69DB11EFB4D7CE8D762E951A.roa (hash: bWiMdJKsCZRqY9/D/tP0KK4vV03plvkNcR9SdfYbiCw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F5CBAF/serialNumber=C9136F125B0CBF01CB52EF0E9DAD693B9DE179B1
        Validity
            Not Before: Oct 23 02:59:38 2024 GMT
            Not After : Oct 25 02:59:38 2024 GMT
        Subject: CN=6718669a-ef3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:44:d6:43:61:af:b2:89:6f:b3:84:94:a3:
                    ca:55:e2:4b:64:ae:2e:74:50:a2:37:3e:fe:18:b9:
                    45:6d:18:a3:9f:63:69:26:79:c7:d4:c6:24:34:81:
                    53:3a:7b:a0:e3:28:44:c2:3e:97:a6:e2:79:5b:30:
                    23:58:24:6d:0d:d2:e6:34:d1:c5:90:12:8b:ee:18:
                    7b:3d:06:52:88:25:b6:d3:68:49:62:ad:66:00:30:
                    20:16:22:a3:48:37:ef:b7:b1:92:5f:68:81:e7:41:
                    a5:db:b5:04:d6:2f:13:c9:94:82:6f:4f:f8:90:4d:
                    9d:3b:b7:86:ea:e1:c3:e0:71:4b:2f:5b:45:31:cf:
                    34:31:d3:85:4d:ac:ff:b1:d2:46:d1:49:af:14:b0:
                    95:07:6e:e3:f4:fb:2d:43:81:b2:0e:56:9d:02:df:
                    55:f7:76:ae:62:9f:ab:0c:b8:fc:df:f7:a3:92:2d:
                    75:3d:28:31:ed:5d:ec:0b:95:fc:5d:76:a4:09:63:
                    7b:0c:3d:99:9a:9e:13:b0:f8:fe:01:81:89:7b:84:
                    4e:9f:27:59:a0:9c:d9:40:07:64:7a:b9:8d:6c:f0:
                    37:94:a2:6d:c0:b4:72:22:4b:8e:ed:50:39:43:cc:
                    9e:bc:59:e0:0e:7c:16:cc:29:8f:b9:21:8c:b5:a3:
                    2d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9E:4E:78:37:12:77:D4:B1:CD:61:27:73:34:3E:D5:4E:A6:53:78
            X509v3 Authority Key Identifier:
                keyid:C9:13:6F:12:5B:0C:BF:01:CB:52:EF:0E:9D:AD:69:3B:9D:E1:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:33:c8:c9:cd:a8:c3:c5:62:ac:6c:52:f1:3a:7b:15:25:26:
         02:9e:0d:c9:82:66:44:de:6a:5e:6a:68:49:6d:5e:41:cb:40:
         20:a9:08:6d:5f:08:a7:1e:9f:a1:a0:3a:29:91:5d:58:55:36:
         30:dd:de:f9:70:f0:13:4a:10:ca:0c:10:ea:6c:ca:ea:33:22:
         27:01:4a:89:d6:9f:3c:a9:9a:a9:53:13:b2:41:7d:d7:7f:13:
         17:69:1a:b0:93:ea:5c:43:e4:5a:59:ed:d9:2a:a2:da:ac:cf:
         dc:8d:df:07:d7:1c:be:9b:3b:cb:1c:4f:e9:51:48:2a:5d:10:
         ce:5b:4d:c4:08:b0:56:8e:79:af:5f:54:8a:0b:07:dc:aa:bd:
         ee:c7:0d:5b:b3:1f:d8:09:d9:37:25:bf:50:cd:df:3d:e8:ae:
         74:f3:9e:86:a5:6f:69:38:19:4a:30:13:c1:ab:71:07:e1:a4:
         21:27:5d:c0:36:06:85:13:c3:aa:ae:5b:47:ca:9b:90:06:6b:
         3c:b9:ef:9c:dd:44:17:5c:b9:b2:a8:ae:75:16:66:a5:b2:06:
         4b:43:05:d8:a2:af:bf:12:4e:2a:27:b7:71:63:49:cf:cd:54:
         01:68:ab:43:49:3f:80:10:1b:a3:43:d4:9b:ad:07:f4:01:38:
         0f:a0:7a:c4
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBOTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
RjVDQkFGMTEwLwYDVQQFEyhDOTEzNkYxMjVCMENCRjAxQ0I1MkVGMEU5REFENjkz
QjlERTE3OUIxMB4XDTI0MTAyMzAyNTkzOFoXDTI0MTAyNTAyNTkzOFowGDEWMBQG
A1UEAxMNNjcxODY2OWEtZWYzZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMxVRNZDYa+yiW+zhJSjylXiS2SuLnRQojc+/hi5RW0Yo59jaSZ5x9TGJDSB
Uzp7oOMoRMI+l6bieVswI1gkbQ3S5jTRxZASi+4Yez0GUoglttNoSWKtZgAwIBYi
o0g377exkl9ogedBpdu1BNYvE8mUgm9P+JBNnTu3hurhw+BxSy9bRTHPNDHThU2s
/7HSRtFJrxSwlQdu4/T7LUOBsg5WnQLfVfd2rmKfqwy4/N/3o5ItdT0oMe1d7AuV
/F12pAljeww9mZqeE7D4/gGBiXuETp8nWaCc2UAHZHq5jWzwN5SibcC0ciJLju1Q
OUPMnrxZ4A58Fswpj7khjLWjLYECAwEAAaOCArgwggK0MB0GA1UdDgQWBBQ7nk54
NxJ31LHNYSdzND7VTqZTeDAfBgNVHSMEGDAWgBTJE28SWwy/ActS7w6drWk7neF5
sTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUY1Q0IvMzA2MzM1OTI2OUMyMTFFRjk5MzgwRDc0NzYyRTk1MUEveVJOdkVs
c012d0hMVXU4T25hMXBPNTNoZWJFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMveVJOdkVsc012d0hMVXU4T25hMXBPNTNoZWJFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY5RjVDQi8zMDYzMzU5MjY5QzIxMUVGOTkzODBENzQ3NjJF
OTUxQS95Uk52RWxzTXZ3SExVdThPbmExcE81M2hlYkUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAD0zyMnNqMPFYqxsUvE6exUlJgKeDcmC
ZkTeal5qaEltXkHLQCCpCG1fCKcen6GgOimRXVhVNjDd3vlw8BNKEMoMEOpsyuoz
IicBSonWnzypmqlTE7JBfdd/ExdpGrCT6lxD5FpZ7dkqotqsz9yN3wfXHL6bO8sc
T+lRSCpdEM5bTcQIsFaOea9fVIoLB9yqve7HDVuzH9gJ2Tclv1DN3z3ornTznoal
b2k4GUowE8GrcQfhpCEnXcA2BoUTw6quW0fKm5AGazy575zdRBdcubKornUWZqWy
BktDBdiir78STiont3FjSc/NVAFoq0NJP4AQG6ND1JutB/QBOA+gesQ=
-----END CERTIFICATE-----
Generated at Wed Oct 23 04:00:59 2024 by rpki-client on console-fra.rpki-client.org