Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
File:                     S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft (raw, json)
Hash identifier:          BTuw/WR8W4DSQns74aaqeBpGiOkSuEE7nLtGTSV6a3U=
Subject key identifier:   4C:E5:CC:0E:DF:9A:0A:72:0B:8F:03:91:EF:B9:E2:47:3C:3F:0E:59
Authority key identifier: 4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70
Certificate issuer:       /CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
Certificate serial:       26
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
Manifest number:          21
Signing time:             Sun 19 May 2024 02:37:18 +0000
Manifest this update:     Sun 19 May 2024 02:37:17 +0000
Manifest next update:     Tue 21 May 2024 02:37:17 +0000
Files and hashes:         1: S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl (hash: BDXDoB7JXUpkqGaZRpU1n5IwIJwX68wQBEUhLfNrlnk=)
                          2: 13E45E1C0E8911EF82A4F35A017001B1.roa (hash: eSu/uNHefvRDyXuPd6bFN5AOugU7elsPo3xlxIjj8Jg=)
                          3: 258EC7AC02E911EF84DA781F017001B1.roa (hash: MKLHz01B1hcRnrm1BW8ZdbgoDIWCXXjJPB+3zMRkn5k=)
                          4: 45A131960E8911EFB58ADB5E017001B1.roa (hash: h14yox0jQvTPprZRCXkBDOwPFxmyJDOyS+ltHOkYJCY=)
                          5: 5386CFDE0B8A11EF94113C6D017001B1.roa (hash: +ksSk336SAPxQuepQDqlYfI3yCwLjxok4/1qF910PT0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
        Validity
            Not Before: May 19 02:37:17 2024 GMT
            Not After : May 21 02:37:17 2024 GMT
        Subject: CN=664965de-4af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:50:15:85:09:a6:3e:38:27:1b:2e:97:6c:
                    c8:42:ca:ed:f7:a7:8a:1c:40:03:b6:68:39:fa:1a:
                    08:33:ea:6c:af:42:ec:13:3d:b0:8e:b4:18:22:a3:
                    15:98:64:6f:ec:f4:20:c1:cc:8a:32:8c:d6:83:de:
                    68:3c:f1:bd:4e:5b:a6:3d:cf:9a:80:99:81:ae:48:
                    e9:64:c3:71:55:b3:08:4c:cd:cf:9c:27:83:22:fa:
                    0f:cf:2b:7c:a6:bf:42:0a:6a:00:e1:a6:74:7c:e5:
                    9c:97:58:72:5f:36:05:73:55:fa:12:41:5e:a4:0f:
                    90:e2:e3:b0:22:3e:34:29:be:94:d6:4d:94:fc:9b:
                    93:6c:72:09:83:98:b4:1a:e4:a2:ea:ba:17:61:93:
                    ea:d8:fa:a5:fe:82:04:e9:c9:26:1c:27:f7:f4:03:
                    31:69:6a:2a:94:91:73:36:00:d2:6f:9b:55:44:52:
                    1b:02:52:f3:c1:98:65:01:8c:14:6b:eb:4f:af:d8:
                    43:8c:e2:96:0a:f8:ee:34:2e:e7:49:a7:85:f7:b1:
                    42:28:5e:9f:8e:3b:b5:02:79:69:64:4e:2c:f2:ca:
                    2c:2d:be:c5:b1:5e:19:11:72:6b:47:19:2b:c3:a6:
                    67:55:d9:9e:2b:d9:30:c8:59:57:e1:80:6b:8a:66:
                    8a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E5:CC:0E:DF:9A:0A:72:0B:8F:03:91:EF:B9:E2:47:3C:3F:0E:59
            X509v3 Authority Key Identifier:
                keyid:4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7c:2f:60:54:e0:16:ba:30:c0:89:17:ac:b6:48:45:43:9e:
         fc:2c:04:5c:80:51:e8:2f:d7:5a:2f:a5:8c:db:c0:5e:c2:38:
         74:9d:8d:04:42:fe:5f:16:91:55:8e:8d:02:f0:8d:f4:a6:6a:
         70:83:e9:a2:72:9b:de:2e:3a:07:68:35:2f:49:78:da:16:7f:
         a2:ef:72:46:f6:56:0d:2b:aa:00:03:ef:86:76:71:11:e9:2d:
         7d:78:51:75:0c:81:2e:11:66:3f:a8:36:4c:59:7f:b7:9b:3f:
         3d:80:c1:3e:c0:1e:4c:2c:7a:b4:d1:ab:b4:62:bc:6c:fd:dd:
         16:0a:41:f9:6b:96:e0:55:02:a7:04:35:cc:a4:9f:e0:6f:8c:
         09:6e:e7:8c:12:bb:9d:32:96:7d:bc:69:bf:70:ad:03:49:d2:
         26:8f:79:09:a9:78:ca:78:1c:af:c9:4c:8b:9a:a5:f8:a4:61:
         06:5a:48:8c:0d:7b:6e:af:08:02:05:63:68:de:3d:9f:21:ba:
         4b:17:a2:bd:a0:08:72:3d:2f:a1:31:70:bf:fc:2f:3a:74:50:
         44:a9:07:fd:45:96:0e:e0:d1:bc:e3:92:93:ff:a0:d9:90:48:
         d0:ba:32:82:ce:4b:a7:d2:d1:c7:c6:b9:4b:ee:f9:37:db:e4:
         7b:40:16:61
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBJjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
NzAyMUFGMTEwLwYDVQQFEyg0QjQ4NjYyMDA0MDg5RjVCQjY4MTk0QUIwNEI4MzBD
RDQzM0EyQjcwMB4XDTI0MDUxOTAyMzcxN1oXDTI0MDUyMTAyMzcxN1owGDEWMBQG
A1UEAxMNNjY0OTY1ZGUtNGFmMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMNnUBWFCaY+OCcbLpdsyELK7fenihxAA7ZoOfoaCDPqbK9C7BM9sI60GCKj
FZhkb+z0IMHMijKM1oPeaDzxvU5bpj3PmoCZga5I6WTDcVWzCEzNz5wngyL6D88r
fKa/QgpqAOGmdHzlnJdYcl82BXNV+hJBXqQPkOLjsCI+NCm+lNZNlPybk2xyCYOY
tBrkouq6F2GT6tj6pf6CBOnJJhwn9/QDMWlqKpSRczYA0m+bVURSGwJS88GYZQGM
FGvrT6/YQ4zilgr47jQu50mnhfexQihen447tQJ5aWROLPLKLC2+xbFeGRFya0cZ
K8OmZ1XZnivZMMhZV+GAa4pmipMCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRM5cwO
35oKcguPA5HvueJHPD8OWTAfBgNVHSMEGDAWgBRLSGYgBAifW7aBlKsEuDDNQzor
cDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTcwMjEvRTUwMzk5MUMwMkMzMTFFRkJEMTI3N0Y1MDA3MDAxQjEvUzBobUlB
UUluMXUyZ1pTckJMZ3d6VU02SzNBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUzBobUlBUUluMXUyZ1pTckJMZ3d6VU02SzNBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZBNzAyMS9FNTAzOTkxQzAyQzMxMUVGQkQxMjc3RjUwMDcw
MDFCMS9TMGhtSUFRSW4xdTJnWlNyQkxnd3pVTTZLM0EubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAFF8L2BU4Ba6MMCJF6y2SEVDnvwsBFyA
Uegv11ovpYzbwF7COHSdjQRC/l8WkVWOjQLwjfSmanCD6aJym94uOgdoNS9JeNoW
f6Lvckb2Vg0rqgAD74Z2cRHpLX14UXUMgS4RZj+oNkxZf7ebPz2AwT7AHkwserTR
q7RivGz93RYKQflrluBVAqcENcykn+BvjAlu54wSu50yln28ab9wrQNJ0iaPeQmp
eMp4HK/JTIuapfikYQZaSIwNe26vCAIFY2jePZ8huksXor2gCHI9L6ExcL/8Lzp0
UESpB/1Flg7g0bzjkpP/oNmQSNC6MoLOS6fS0cfGuUvu+Tfb5HtAFmE=
-----END CERTIFICATE-----
Generated at Sun May 19 03:14:47 2024 by rpki-client on console-fra.rpki-client.org