Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
File:                     KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft (raw, json)
Hash identifier:          N6/zYgAIQieFW7ZFY2vs+pnG9QaWP1b1CA3Ek8gJbsM=
Subject key identifier:   21:F1:51:1B:60:2F:A8:31:7E:40:68:2B:CF:ED:8E:BA:9B:5C:33:BC
Authority key identifier: 29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65
Certificate issuer:       /CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
Certificate serial:       0BAE
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
Manifest number:          0BAE
Signing time:             Tue 28 May 2024 00:42:36 +0000
Manifest this update:     Tue 28 May 2024 00:42:36 +0000
Manifest next update:     Thu 30 May 2024 00:42:36 +0000
Files and hashes:         1: KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl (hash: vhUUg9ugf8HCXq5slDJQeCxnVR6YFFkyVX7gfgzNiw8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                          rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 May 2024 00:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2990 (0xbae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FARI/serialNumber=29C0DDE24305F20E4E5AD0BBFDC00FF1748CA665
        Validity
            Not Before: May 28 00:42:36 2024 GMT
            Not After : May 30 00:42:36 2024 GMT
        Subject: CN=6655287c-a66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:07:d8:04:5f:c0:24:40:6a:b1:16:6b:1f:
                    97:8f:7b:5b:85:59:6a:6d:d2:69:1a:c6:ea:1d:99:
                    a0:5a:b8:18:78:e5:bb:5a:fc:6a:37:5b:04:fe:2d:
                    3e:c3:51:a2:62:d4:0b:87:61:ce:7d:51:29:5d:09:
                    e7:23:e3:37:13:86:67:35:8e:77:e0:97:7f:20:84:
                    19:5f:cc:b4:ba:5c:f6:65:62:77:6a:cf:d7:eb:52:
                    62:2f:cb:3a:17:4b:df:74:3a:51:9a:94:69:87:57:
                    13:2e:31:1f:ad:0e:da:fe:52:be:d4:c5:06:0b:d9:
                    d1:b9:dd:d7:3c:d5:42:f8:ef:46:db:2b:d2:3a:0d:
                    f1:a0:fd:6a:c3:96:95:3b:1f:ca:e2:00:c7:2b:30:
                    0a:54:1b:a9:14:5d:43:4e:61:03:d6:16:dc:c2:50:
                    df:d3:94:0a:1b:e3:71:02:ec:71:fd:c8:89:3e:45:
                    aa:70:f9:45:d6:0e:c4:34:56:ac:8d:30:15:c8:90:
                    02:6b:72:8c:07:29:2e:49:83:8d:67:c1:1f:d2:97:
                    65:08:dc:e1:1e:5b:da:4a:d0:bc:c5:88:fc:7d:60:
                    a5:6e:a4:33:92:2a:dc:fe:fd:20:dc:36:91:79:98:
                    6f:de:1c:f3:34:32:df:e1:1d:db:23:6e:8d:94:37:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F1:51:1B:60:2F:A8:31:7E:40:68:2B:CF:ED:8E:BA:9B:5C:33:BC
            X509v3 Authority Key Identifier:
                keyid:29:C0:DD:E2:43:05:F2:0E:4E:5A:D0:BB:FD:C0:0F:F1:74:8C:A6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/8E972ECC1C1C11E699EA450CF8AEA228/KcDd4kMF8g5OWtC7_cAP8XSMpmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:78:b2:a2:48:4d:c9:f6:02:93:8a:47:73:05:2b:fb:e3:ec:
         0c:4a:d2:f8:2a:68:47:ab:51:72:58:4a:07:b4:99:48:3c:a4:
         eb:2f:37:f5:bd:5c:c9:9f:ed:cc:b3:f6:cd:e1:62:27:0c:eb:
         42:83:9e:e0:7a:ce:f8:2b:71:1c:98:86:f3:58:a7:d0:38:b9:
         11:13:d3:d0:9e:ab:82:00:d0:c8:e0:08:ba:c9:a8:1c:a9:32:
         21:e8:bc:74:d0:e5:a1:bd:ab:11:76:9a:d6:8f:bb:37:05:73:
         9b:17:93:6e:49:06:45:4b:13:07:90:42:c2:32:1d:1d:2b:b8:
         54:ab:12:96:af:5a:24:77:0f:0e:a7:ec:8c:5b:30:60:2a:ad:
         f5:0a:60:b4:3c:c6:f4:cc:43:18:57:37:96:bc:db:a7:67:5d:
         2e:c8:f6:a3:82:1c:e1:26:65:6c:d1:e6:f0:de:9f:ca:d6:7a:
         bd:10:e9:c6:1f:49:3a:e5:d1:24:69:3c:02:68:d6:af:6c:0c:
         67:f0:8b:c7:11:0f:99:9a:6a:3d:31:7d:c4:29:c4:dd:b4:a3:
         bd:d7:59:4f:5b:17:bf:25:f7:1b:9f:ff:e8:62:d8:8d:58:f3:
         90:d2:f7:ef:de:2f:03:54:fc:ed:30:54:be:1c:20:39:de:15:
         2e:46:34:55
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICC64wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ5RkFSSTExMC8GA1UEBRMoMjlDMERERTI0MzA1RjIwRTRFNUFEMEJCRkRDMDBG
RjE3NDhDQTY2NTAeFw0yNDA1MjgwMDQyMzZaFw0yNDA1MzAwMDQyMzZaMBgxFjAU
BgNVBAMTDTY2NTUyODdjLWE2NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGWwfYBF/AJEBqsRZrH5ePe1uFWWpt0mkaxuodmaBauBh45bta/Go3WwT+
LT7DUaJi1AuHYc59USldCecj4zcThmc1jnfgl38ghBlfzLS6XPZlYndqz9frUmIv
yzoXS990OlGalGmHVxMuMR+tDtr+Ur7UxQYL2dG53dc81UL470bbK9I6DfGg/WrD
lpU7H8riAMcrMApUG6kUXUNOYQPWFtzCUN/TlAob43EC7HH9yIk+Rapw+UXWDsQ0
VqyNMBXIkAJrcowHKS5Jg41nwR/Sl2UI3OEeW9pK0LzFiPx9YKVupDOSKtz+/SDc
NpF5mG/eHPM0Mt/hHdsjbo2UN6f9AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUIfFR
G2AvqDF+QGgrz+2OuptcM7wwHwYDVR0jBBgwFoAUKcDd4kMF8g5OWtC7/cAP8XSM
pmUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0OUZBLzhFOTcyRUNDMUMxQzExRTY5OUVBNDUwQ0Y4QUVBMjI4L0tjRGQ0
a01GOGc1T1d0QzdfY0FQOFhTTXBtVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L0tjRGQ0a01GOGc1T1d0QzdfY0FQOFhTTXBtVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QjQ5RkEvOEU5NzJFQ0MxQzFDMTFFNjk5RUE0NTBDRjhBRUEy
MjgvS2NEZDRrTUY4ZzVPV3RDN19jQVA4WFNNcG1VLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjeLKiSE3J9gKTikdzBSv74+wMStL4KmhH
q1FyWEoHtJlIPKTrLzf1vVzJn+3Ms/bN4WInDOtCg57ges74K3EcmIbzWKfQOLkR
E9PQnquCANDI4Ai6yagcqTIh6Lx00OWhvasRdprWj7s3BXObF5NuSQZFSxMHkELC
Mh0dK7hUqxKWr1okdw8Op+yMWzBgKq31CmC0PMb0zEMYVzeWvNunZ10uyPajghzh
JmVs0ebw3p/K1nq9EOnGH0k65dEkaTwCaNavbAxn8IvHEQ+Zmmo9MX3EKcTdtKO9
11lPWxe/Jfcbn//oYtiNWPOQ0vfv3i8DVPztMFS+HCA53hUuRjRV
-----END CERTIFICATE-----
Generated at Tue May 28 02:11:18 2024 by rpki-client on console-ams.rpki-client.org