Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
File:                     gvHGYRo6FGfbPXikpf7VCgilexM.mft (raw, json)
Hash identifier:          PbzVtm0PCjEiPj/wV1UaYlJ8LlQrCsfdYKzlmap6uvo=
Subject key identifier:   AC:50:8F:08:AA:57:21:6E:96:3A:21:AE:CD:49:FD:10:8B:64:10:45
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Certificate issuer:       /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial:       059E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
Manifest number:          057C
Signing time:             Sun 16 Feb 2025 01:49:37 +0000
Manifest this update:     Sun 16 Feb 2025 01:49:36 +0000
Manifest next update:     Tue 18 Feb 2025 01:49:36 +0000
Files and hashes:         1: gvHGYRo6FGfbPXikpf7VCgilexM.crl (hash: E4snxmf+OMSITF4usZgMH0wWSo4V44+q0x1gZ23FEPo=)
                          2: 8C266FAEC0BC11ECB6B937B8F1222468.roa (hash: LWvmdfRyuuShkSq5nvy5VVYhaFiedLSRZGh/sW4VoMQ=)
                          3: C02A73A2567E11ECA2238761D8A014CE.roa (hash: cFnUhnC13xlP5TD/7yV6xNwGQ5BruaAC4MIqLANVH3s=)
                          4: 9224A498414611ECB18B9C4AD8A014CE.roa (hash: XPzMQpRyXNj7tfbthuedXxw7eoOCCt4TWOt0ECkjiSw=)
                          5: FCFB2C46429311EF932F40BD762E951A.roa (hash: aj7dKtZkdlsVdxJmDsYKu4bL2W4gvGpRJEhdeSSyuFM=)
                          6: DD2ED276554811ED808E48E0F1222468.roa (hash: o9F5NASkXJeGRpOxZTi10DlR3PhpAb42z8vnQSf1W6Y=)
                          7: 56D48534366511ECAAF07024D8A014CE.roa (hash: 9qlP2hqRYd4Iy/H8X2UWaaYT/2UVtHIcp+5pW7Qt6Lk=)
                          8: 5634B5344B2D11EEB602566E4AD9E6FC.roa (hash: RXMYhudjIg+5B4S6A7PfziGVGL2i90FJjq9kDBWz4BY=)
                          9: 971C03BE6E9011EEBC47C1344AD9E6FC.roa (hash: FEtfb6h/Qjj5+1EDaqJAUTaRNW+izq+4MGEPVm7WQu4=)
                          10: 664C2930DBAA11EEBDCFF69B775412E6.roa (hash: jXvx3Rxn9FpNmCMQtH/GLTAUSkTFxeG70DHFMH0gCrs=)
                          11: C0F8837027AE11EEB3D5C11B4AD9E6FC.roa (hash: U9lrbioleJrfDazSStxWONg+gePpOFN84WZgOOuwefs=)
                          12: 4A88B5706B5211EDA0EA3F88F1222468.roa (hash: FO1Dj1s2/gzgT9jLou3n+Fly82D5SCTFYMrpFqZDnjk=)
                          13: B539B9C439CE11EDA2E2E4CCF1222468.roa (hash: L8tv2tXp84t94j7so0pE6pjeZqF4W79+avnFF/AtOjc=)
                          14: 09FAFAEA4FE911EFAC30AC4F762E951A.roa (hash: xrcP6Mtrc5qzAh2bF+djzR18bQ7En6DPKHoIPS7kqyo=)
                          15: 26AF521EA44F11ECAA08306F5A40D577.roa (hash: EcPn6/6HlIpqU2DVcgtdl0S9cxELvsIzT/v9a33Hhbc=)
                          16: AC4B6082210C11ECAD741215D8A014CE.roa (hash: AtxMUNLLrkxyey3dAGtkIWE+tCR3TEwc6YhmNlJxQio=)
                          17: 23D6AEEE13D911EDB46DE9BDF1222468.roa (hash: l28mywAfwN/N3mAJ5uusY3xTHQqgOweo5f2TzG8SlCU=)
                          18: 1530CE00EBE911ECAA0878D2F1222468.roa (hash: +MPXKqkSfw55uXv63KcDQA0uk/2t7djdRht6zW2wMbY=)
                          19: 094210AEC41411EE88C9EDA3775412E6.roa (hash: d6MjgYyVOT5Zjb/xnHtqT0+LbviGAM5BCPUU3e5A5oc=)
                          20: A398E3A0F13D11EBB63B911FD8A014CE.roa (hash: v/uCWtn5mJZb+o9+Q5aNz15BP+IXm6kUIIRfortJmRE=)
                          21: 38270294F36311EDBEFE48354AD9E6FC.roa (hash: JCpUwcLlyeyID1rok4mjUMaVBm5RDKXVOymn9hFwm98=)
                          22: 4BEC690082F511EEBBB42B674AD9E6FC.roa (hash: ASnfqkuhQSFv0giROiw8EEeT1sMeoGjHEd6cWLcq/WE=)
                          23: A4E1241E5FD211EF867BDA77762E951A.roa (hash: zKqkWjXQKLviduKuQs8CcF6kO9y5LGaxWQboRjofXP4=)
                          24: 8895C070E02811EC98F4E491F1222468.roa (hash: hD4lS4pjWF7aAeKADbA1StyEyHLEar0949VpnchH3NY=)
                          25: B2ABC5C08DA911EC804C33E45A40D577.roa (hash: IDD186STTmdWGeqHCysVf0QPkT7GBsIIrvPyxHmrdtc=)
                          26: 65989AD8BC3311ED9E2B88B5F1222468.roa (hash: xeuVwfGkXyt1z3GydC6wSInWF5cPlZls2ZzQPi+g8P0=)
                          27: 10E66CAA858011EFA65B285B762E951A.roa (hash: lCBqjCpnLebiZhdULUm/2pXJNsFL2JTGwIc/hckdIcU=)
                          28: 9E5D6708928111ED9F33B1E9F1222468.roa (hash: IFudCUkdHq1Zpz3PyDrq/xUDpQ0MHKE8CA1etAVXR0g=)
                          29: 4577EBD2124811ECB3765C5ED8A014CE.roa (hash: C6keONk5pX9vxi2GbZolDI5QMW6KdyBmAMv7Kf4uGPQ=)
                          30: 3D6F6E96F37711EBAC8D9D1AD8A014CE.roa (hash: 9VXniEQa7EvwyuNK+E+0ZuAUlWwrOJps+Bu2VlcENpI=)
                          31: 6AF017587A0811EDBFC04983F1222468.roa (hash: 2CrRYRu/rPDODQF+1u1w+NJEjDucfctIyM+OcrCAuXQ=)
                          32: D98A56900ACE11EEA9A723454AD9E6FC.roa (hash: EKbiex9REKFqFg3KeIAaHxBhBnGQAgLlrP3B5Rpt+ew=)
                          33: 11AC7B6A124811ECA010225ED8A014CE.roa (hash: NuKKPHhieBdz0VtTkdtt2pca0XP6l2AgJ2AAzjs2NuY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1438 (0x59e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAF
        Validity
            Not Before: Feb 16 01:49:36 2025 GMT
            Not After : Feb 18 01:49:36 2025 GMT
        Subject: CN=67b14431-a8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:e2:f2:e4:bf:ab:02:db:df:b8:5f:87:8f:
                    5b:82:01:d7:97:74:97:43:86:6d:1d:bb:d8:46:3c:
                    ad:e1:79:b8:c2:32:3a:28:9a:0b:85:3e:40:e3:72:
                    17:fb:34:df:cf:b5:7e:e6:aa:cf:c0:20:a0:3f:c8:
                    52:47:66:8f:01:b9:1a:cf:6e:b2:43:cc:b9:ae:fb:
                    0e:81:e1:70:a4:34:61:59:9d:e9:6f:03:44:ff:bf:
                    12:d2:2f:80:5f:d7:15:87:18:06:b3:81:00:35:9b:
                    0c:e5:36:af:d2:3b:47:8f:3f:5f:aa:aa:45:24:5e:
                    03:82:47:6c:6d:ac:27:05:f0:81:b3:6a:cc:c1:89:
                    18:4d:d8:ff:92:15:d8:83:aa:cd:b6:ea:6d:d7:43:
                    89:20:f1:35:7e:fc:f1:c3:13:0d:d8:12:13:51:cd:
                    9f:ee:42:e6:d3:a5:1d:f2:f8:96:a7:44:7c:65:9d:
                    cb:d2:42:0a:7e:de:5e:12:e0:57:45:30:70:bf:93:
                    9b:ac:ae:75:e1:1f:36:24:e3:2c:7c:f9:02:8a:18:
                    20:33:ad:2f:3f:83:92:1b:fd:29:41:59:b4:b4:3c:
                    05:7a:fb:3b:b7:ee:8c:48:8f:26:dd:64:0a:8c:4c:
                    7c:94:ff:0f:01:1a:8c:c4:bf:13:a8:d2:bc:ff:95:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:50:8F:08:AA:57:21:6E:96:3A:21:AE:CD:49:FD:10:8B:64:10:45
            X509v3 Authority Key Identifier:
                keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:16:9a:0b:9a:b7:72:bf:b9:01:28:c0:28:9c:09:ec:d2:3f:
         1e:90:a2:76:af:f5:62:27:fd:14:f9:8b:3f:ef:99:af:40:a4:
         b4:e3:9d:61:94:b4:09:bd:11:bf:d3:66:ce:91:e8:a9:a7:52:
         b7:d0:b6:3c:85:92:43:32:ff:68:40:90:48:e0:66:27:a4:aa:
         75:1b:2e:2a:d8:41:d0:73:c1:6a:75:bc:a2:20:5e:b2:b8:15:
         7e:05:a5:12:5d:f0:f0:f5:77:49:cb:93:d7:96:e9:0c:d4:a3:
         6f:8d:af:21:b7:51:19:c8:c7:62:83:62:38:46:f8:01:68:5d:
         4f:6b:dc:98:e6:4b:ec:2e:e4:11:73:40:5b:7f:86:89:4a:92:
         d4:30:0c:7c:b5:5b:7c:65:f5:29:ea:5a:78:b1:40:0e:c6:a6:
         03:75:73:1d:74:4c:75:6f:5a:f1:fa:36:cf:ac:ba:9e:70:d3:
         e8:6b:5b:ba:99:e5:05:6e:3a:48:a8:37:43:a0:17:e5:eb:86:
         c0:db:5e:69:1e:14:5b:bb:eb:56:d4:fe:d0:68:6b:e3:50:0e:
         11:8e:bd:f0:40:b3:14:07:6d:fd:a0:23:77:8f:f2:3f:8a:c2:
         9d:d1:3d:18:d6:70:00:43:04:34:7e:eb:3c:46:a3:ea:d5:52:
         5d:24:17:11
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTFDRUZBRjExMC8GA1UEBRMoODJGMUM2NjExQTNBMTQ2N0RCM0Q3OEE0QTVGRUQ1
MEEwOEE1N0IxMzAeFw0yNTAyMTYwMTQ5MzZaFw0yNTAyMTgwMTQ5MzZaMBgxFjAU
BgNVBAMTDTY3YjE0NDMxLWE4ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6FeLy5L+rAtvfuF+Hj1uCAdeXdJdDhm0du9hGPK3hebjCMjoomguFPkDj
chf7NN/PtX7mqs/AIKA/yFJHZo8BuRrPbrJDzLmu+w6B4XCkNGFZnelvA0T/vxLS
L4Bf1xWHGAazgQA1mwzlNq/SO0ePP1+qqkUkXgOCR2xtrCcF8IGzaszBiRhN2P+S
FdiDqs226m3XQ4kg8TV+/PHDEw3YEhNRzZ/uQubTpR3y+JanRHxlncvSQgp+3l4S
4FdFMHC/k5usrnXhHzYk4yx8+QKKGCAzrS8/g5Ib/SlBWbS0PAV6+zu37oxIjybd
ZAqMTHyU/w8BGozEvxOo0rz/lZszAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUrFCP
CKpXIW6WOiGuzUn9EItkEEUwHwYDVR0jBBgwFoAUgvHGYRo6FGfbPXikpf7VCgil
exMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExQ0VGLzdGMzg4REU0RjEzODExRUI5MTdGRDcxN0Q4QTAxNENFL2d2SEdZ
Um82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d2SEdZUm82RkdmYlBYaWtwZjdWQ2dpbGV4TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTFDRUYvN0YzODhERTRGMTM4MTFFQjkxN0ZENzE3RDhB
MDE0Q0UvZ3ZIR1lSbzZGR2ZiUFhpa3BmN1ZDZ2lsZXhNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAFpoLmrdyv7kBKMAonAns0j8ekKJ2
r/ViJ/0U+Ys/75mvQKS0451hlLQJvRG/02bOkeipp1K30LY8hZJDMv9oQJBI4GYn
pKp1Gy4q2EHQc8FqdbyiIF6yuBV+BaUSXfDw9XdJy5PXlukM1KNvja8ht1EZyMdi
g2I4RvgBaF1Pa9yY5kvsLuQRc0Bbf4aJSpLUMAx8tVt8ZfUp6lp4sUAOxqYDdXMd
dEx1b1rx+jbPrLqecNPoa1u6meUFbjpIqDdDoBfl64bA215pHhRbu+tW1P7QaGvj
UA4Rjr3wQLMUB239oCN3j/I/isKd0T0Y1nAAQwQ0fus8RqPq1VJdJBcR
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:39 2025 by rpki-client