Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
File:                     3MPWc23vjmmxdsLjgI6oQGpetKE.mft (raw, json)
Hash identifier:          n5CXd/xMFr59FYg0OEZJN0sFz6ZxTJKvvLR5QAtLAks=
Subject key identifier:   53:76:AA:D6:82:A9:6A:67:01:08:14:0A:06:3A:AA:19:86:65:7B:B4
Authority key identifier: DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1
Certificate issuer:       /CN=F36A2F84AR/serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
Certificate serial:       04E4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
Manifest number:          04E1
Signing time:             Thu 21 Nov 2024 01:34:28 +0000
Manifest this update:     Thu 21 Nov 2024 01:34:28 +0000
Manifest next update:     Sat 23 Nov 2024 01:34:28 +0000
Files and hashes:         1: 3MPWc23vjmmxdsLjgI6oQGpetKE.crl (hash: tZJ/MUuolQlL0DS8mq9r5mIOKLxMdyIDc/nfRxiz3gM=)
                          2: 5F04C4C62D9B11ECA647564FD8A014CE.roa (hash: zW0DV4hdw90fXmQHrES0qIG730a3Er4NWHsJMqXehd8=)
                          3: 09859B12EEB511EBAC07A132D8A014CE.roa (hash: QJgNFrSSnI5wUL7064SxE7ymTJEcB6oc8kqJd8ZGe2E=)
                          4: D68FB06AEEC011EB8A6E3C44D8A014CE.roa (hash: FZohHGP60efclGdlHNaaNbxSbBTri6OJhgg/NinDFR0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
                          rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252 (0x4e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AR/serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
        Validity
            Not Before: Nov 21 01:34:28 2024 GMT
            Not After : Nov 23 01:34:28 2024 GMT
        Subject: CN=673e8e24-29e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:04:31:8b:70:00:2b:ad:8a:ee:24:e2:44:
                    87:0e:f0:62:7c:c9:6f:96:06:28:9a:78:61:3b:42:
                    2f:99:90:4c:5e:76:c1:0b:53:a1:31:44:89:f6:77:
                    68:7f:02:46:4c:31:15:dd:c9:cc:52:4c:7c:0a:b6:
                    1a:8f:ee:8a:15:1a:7a:c8:3d:07:0a:05:84:c1:3b:
                    22:75:2a:b8:a4:91:a7:7b:b4:63:cb:bc:c6:78:18:
                    ad:c0:31:dc:60:a8:06:75:96:97:2c:57:fa:f5:c2:
                    67:06:03:09:cd:81:f0:92:50:0e:57:4c:dc:93:ed:
                    a0:31:e1:e2:04:1d:e4:38:c7:4a:cf:27:b6:c2:d9:
                    b8:8e:e4:1f:53:a8:98:ed:42:c5:fa:aa:a6:4b:e4:
                    ca:0c:de:67:a9:5e:d5:ba:bc:2c:d9:0f:06:22:e0:
                    58:0c:96:9a:4a:74:d8:38:c7:15:91:54:b0:88:5a:
                    0c:b9:2a:41:6f:af:cf:94:ad:a0:45:15:50:dc:0d:
                    03:d7:37:b5:70:28:0f:fb:cd:40:1b:8b:07:02:e8:
                    ec:dd:5d:f7:05:64:88:ba:f0:1f:16:82:c3:a2:4d:
                    e4:23:d7:2f:97:4e:21:79:ef:68:21:70:ac:24:de:
                    48:05:a8:ad:fd:f9:7b:eb:ea:64:e4:5d:d1:b1:e9:
                    b4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:76:AA:D6:82:A9:6A:67:01:08:14:0A:06:3A:AA:19:86:65:7B:B4
            X509v3 Authority Key Identifier:
                keyid:DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:3f:d0:86:46:51:66:c1:78:30:cd:f3:89:bb:c6:8b:e7:9d:
         2a:fb:a7:8c:79:d9:9f:c6:80:aa:2f:b7:a6:7f:a6:2f:68:c9:
         88:da:5c:22:06:b9:63:07:14:c5:ce:e4:b8:b1:86:33:06:fa:
         5e:04:e5:83:98:f3:b2:6c:be:9b:70:cd:2c:44:11:11:4a:81:
         00:f9:7d:48:b8:92:17:c8:5a:09:5b:75:31:fe:68:95:bf:50:
         d7:c4:fb:4a:2c:7f:ac:70:f8:66:f3:0c:91:16:d7:ac:c0:3b:
         84:4a:30:78:d5:66:65:b7:89:c9:7a:1b:50:bb:3c:54:2f:46:
         fd:15:a5:2f:75:1d:7a:e6:19:99:10:03:6a:f4:5d:e3:cd:86:
         08:04:36:57:78:cb:68:d2:be:95:aa:42:a5:31:13:ef:14:01:
         b0:6d:9e:ce:68:10:b8:14:a6:90:e8:cb:9f:30:bb:b6:bf:2b:
         69:4c:16:f2:52:5b:08:0b:4c:9a:1c:5c:33:52:bf:61:d1:a3:
         d9:6c:5a:52:3f:a3:2d:4a:b5:59:8e:76:23:e5:af:8b:1b:c9:
         22:9f:73:4b:10:e1:7e:19:59:1c:10:a5:39:33:6c:54:12:9f:
         b0:10:19:07:40:fc:60:50:f2:97:1f:b8:da:07:9b:fc:a5:13:
         7f:13:fa:9f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTJGODRBUjExMC8GA1UEBRMoRENDM0Q2NzM2REVGOEU2OUIxNzZDMkUzODA4RUE4
NDA2QTVFQjRBMTAeFw0yNDExMjEwMTM0MjhaFw0yNDExMjMwMTM0MjhaMBgxFjAU
BgNVBAMTDTY3M2U4ZTI0LTI5ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvmwQxi3AAK62K7iTiRIcO8GJ8yW+WBiiaeGE7Qi+ZkExedsELU6ExRIn2
d2h/AkZMMRXdycxSTHwKthqP7ooVGnrIPQcKBYTBOyJ1Krikkad7tGPLvMZ4GK3A
MdxgqAZ1lpcsV/r1wmcGAwnNgfCSUA5XTNyT7aAx4eIEHeQ4x0rPJ7bC2biO5B9T
qJjtQsX6qqZL5MoM3mepXtW6vCzZDwYi4FgMlppKdNg4xxWRVLCIWgy5KkFvr8+U
raBFFVDcDQPXN7VwKA/7zUAbiwcC6OzdXfcFZIi68B8WgsOiTeQj1y+XTiF572gh
cKwk3kgFqK39+Xvr6mTkXdGx6bQtAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUU3aq
1oKpamcBCBQKBjqqGYZle7QwHwYDVR0jBBgwFoAU3MPWc23vjmmxdsLjgI6oQGpe
tKEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEyRjg0LzkzNUJGMzUwRUVBRjExRUI5MUNDNkQyQUQ4QTAxNENFLzNNUFdj
MjN2am1teGRzTGpnSTZvUUdwZXRLRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNNUFdjMjN2am1teGRzTGpnSTZvUUdwZXRLRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTJGODQvOTM1QkYzNTBFRUFGMTFFQjkxQ0M2RDJBRDhBMDE0
Q0UvM01QV2MyM3ZqbW14ZHNMamdJNm9RR3BldEtFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+P9CGRlFmwXgwzfOJu8aL550q+6eMedmf
xoCqL7emf6YvaMmI2lwiBrljBxTFzuS4sYYzBvpeBOWDmPOybL6bcM0sRBERSoEA
+X1IuJIXyFoJW3Ux/miVv1DXxPtKLH+scPhm8wyRFteswDuESjB41WZlt4nJehtQ
uzxUL0b9FaUvdR165hmZEANq9F3jzYYIBDZXeMto0r6VqkKlMRPvFAGwbZ7OaBC4
FKaQ6MufMLu2vytpTBbyUlsIC0yaHFwzUr9h0aPZbFpSP6MtSrVZjnYj5a+LG8ki
n3NLEOF+GVkcEKU5M2xUEp+wEBkHQPxgUPKXH7jaB5v8pRN/E/qf
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:38 2024 by rpki-client on console-fra.rpki-client.org