Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
File:                     xk60GwPUwTMps2P1p5PyzZy0LLc.mft (raw, json)
Hash identifier:          CLpX88SqbOTBRuNLeSmb6DjBwU99dqQml3YBLP7iSa4=
Subject key identifier:   6D:4D:1C:91:FF:C6:46:C3:F2:33:D6:BC:4C:CF:A6:DD:2D:BD:D8:40
Authority key identifier: C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7
Certificate issuer:       /CN=F36B5804AF/serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
Certificate serial:       048C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
Manifest number:          048A
Signing time:             Sat 01 Jun 2024 01:23:58 +0000
Manifest this update:     Sat 01 Jun 2024 01:23:57 +0000
Manifest next update:     Mon 03 Jun 2024 01:23:57 +0000
Files and hashes:         1: xk60GwPUwTMps2P1p5PyzZy0LLc.crl (hash: toM1LmCSKvpBMkckiKLn03ZAVzQbj1QvqrOMKN7FpsE=)
                          2: 87E50DA6AA2B11EE9A64EA6D775412E6.roa (hash: XpYMXNR2CG5z3pCw7sOpke9QbTyJBxDxE9SukOPOH8g=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 03 Jun 2024 00:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1164 (0x48c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5804AF/serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
        Validity
            Not Before: Jun  1 01:23:57 2024 GMT
            Not After : Jun  3 01:23:57 2024 GMT
        Subject: CN=665a782d-557d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f1:81:8e:86:e1:87:b5:c4:32:51:3c:d1:9f:
                    92:9b:55:a9:fd:52:20:46:70:b5:25:41:9c:b9:85:
                    f6:36:b5:c1:63:5f:9c:48:d1:f6:0a:32:c6:b2:93:
                    20:36:d1:00:84:0d:22:53:0f:fd:43:ca:63:34:41:
                    e4:9a:a5:ad:0c:f1:bc:ea:84:a6:ea:6d:2c:39:58:
                    7c:87:3f:83:ac:71:ba:a8:3b:bb:7a:b1:cf:eb:b4:
                    6e:82:c1:88:bb:18:97:d9:cd:c4:4e:fd:fb:d7:09:
                    9f:20:8e:ff:9f:82:88:67:f2:e1:ea:24:8d:21:ff:
                    21:ec:11:75:47:4f:d4:4c:e7:7f:cd:91:75:f8:25:
                    cd:9f:0a:41:93:c5:e7:17:07:b7:60:ab:7e:84:8f:
                    2f:3f:ec:85:66:55:32:96:3c:e7:92:da:b8:c9:f3:
                    f9:15:87:8b:12:7d:3c:57:69:2f:45:84:38:4e:0f:
                    2b:0e:d3:0b:9f:9c:08:2f:fa:c9:eb:2c:60:98:37:
                    e1:d5:ce:6d:e9:4a:86:d7:b2:05:73:6e:9d:1d:18:
                    4d:8a:80:0c:24:b6:9f:9b:60:1a:93:be:91:0c:a6:
                    62:6c:42:f5:56:3d:4b:ec:4f:8b:92:2b:a6:9d:39:
                    5e:cf:9d:e8:a0:2d:f1:3a:60:c4:a4:a0:ff:f4:8b:
                    0e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4D:1C:91:FF:C6:46:C3:F2:33:D6:BC:4C:CF:A6:DD:2D:BD:D8:40
            X509v3 Authority Key Identifier:
                keyid:C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:64:c2:45:ab:fb:1f:3b:31:a8:bc:23:97:cd:9f:a3:59:dd:
         92:4f:51:f1:53:5e:f2:11:f0:59:8a:79:7a:e3:6d:b2:ff:d7:
         86:09:d0:3b:8f:bc:74:3c:75:31:70:fe:75:06:14:75:cb:5f:
         4c:df:a1:f9:23:97:01:e9:8d:2d:2e:00:0a:b0:50:7e:2c:df:
         4a:e2:cd:50:44:7c:e4:0e:d5:aa:14:1b:ac:ac:cd:3c:d3:7d:
         7b:68:6e:23:6f:6d:95:eb:21:98:22:92:c1:53:9d:d7:d3:f0:
         0a:da:ca:5d:06:96:aa:f8:10:5c:f1:e9:f4:f6:41:f2:14:6d:
         a6:88:79:ad:cc:be:f6:af:43:e7:f1:5b:c5:1a:72:ec:b4:71:
         f3:10:bd:a0:70:b2:5d:b0:e6:4b:3d:82:21:8c:8a:b9:e8:f5:
         7a:46:e3:e5:7b:c7:ef:9c:ec:39:ae:f1:c3:93:25:cf:fb:da:
         df:53:7f:9f:97:59:a8:f9:55:54:07:a5:0e:c0:53:45:f9:84:
         70:94:cb:35:a5:41:33:35:31:43:60:07:9d:5c:6a:29:ec:02:
         08:f3:52:11:e3:53:ff:14:b8:57:07:c1:1e:58:b8:89:b3:d3:
         c5:fd:98:89:e2:7b:b8:67:91:96:49:fd:d4:6d:ea:14:a5:2f:
         15:4d:ee:5f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjU4MDRBRjExMC8GA1UEBRMoQzY0RUI0MUIwM0Q0QzEzMzI5QjM2M0Y1QTc5M0Yy
Q0Q5Q0I0MkNCNzAeFw0yNDA2MDEwMTIzNTdaFw0yNDA2MDMwMTIzNTdaMBgxFjAU
BgNVBAMTDTY2NWE3ODJkLTU1N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDu8YGOhuGHtcQyUTzRn5KbVan9UiBGcLUlQZy5hfY2tcFjX5xI0fYKMsay
kyA20QCEDSJTD/1DymM0QeSapa0M8bzqhKbqbSw5WHyHP4OscbqoO7t6sc/rtG6C
wYi7GJfZzcRO/fvXCZ8gjv+fgohn8uHqJI0h/yHsEXVHT9RM53/NkXX4Jc2fCkGT
xecXB7dgq36Ejy8/7IVmVTKWPOeS2rjJ8/kVh4sSfTxXaS9FhDhODysO0wufnAgv
+snrLGCYN+HVzm3pSobXsgVzbp0dGE2KgAwktp+bYBqTvpEMpmJsQvVWPUvsT4uS
K6adOV7PneigLfE6YMSkoP/0iw7FAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbU0c
kf/GRsPyM9a8TM+m3S292EAwHwYDVR0jBBgwFoAUxk60GwPUwTMps2P1p5PyzZy0
LLcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1ODA0L0Q3NEU0MkZBQUMyQjExRUJBREY0OEI1NUY4QUVBMjI4L3hrNjBH
d1BVd1RNcHMyUDFwNVB5elp5MExMYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hrNjBHd1BVd1RNcHMyUDFwNVB5elp5MExMYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjU4MDQvRDc0RTQyRkFBQzJCMTFFQkFERjQ4QjU1RjhB
RUEyMjgveGs2MEd3UFV3VE1wczJQMXA1UHl6WnkwTExjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJZMJFq/sfOzGovCOXzZ+jWd2ST1Hx
U17yEfBZinl6422y/9eGCdA7j7x0PHUxcP51BhR1y19M36H5I5cB6Y0tLgAKsFB+
LN9K4s1QRHzkDtWqFBusrM080317aG4jb22V6yGYIpLBU53X0/AK2spdBpaq+BBc
8en09kHyFG2miHmtzL72r0Pn8VvFGnLstHHzEL2gcLJdsOZLPYIhjIq56PV6RuPl
e8fvnOw5rvHDkyXP+9rfU3+fl1mo+VVUB6UOwFNF+YRwlMs1pUEzNTFDYAedXGop
7AII81IR41P/FLhXB8EeWLiJs9PF/ZiJ4nu4Z5GWSf3UbeoUpS8VTe5f
-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:12 2024 by rpki-client on console-fra.rpki-client.org