Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File:                     CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier:          uBpmcbrTuwa8t8fazrFr7oLFpRo0usYYtdzsd/ZNd3w=
Subject key identifier:   F2:98:9D:CC:E7:7C:E4:67:12:6A:B0:BC:C6:10:EB:6A:5D:D0:F6:A5
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer:       /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial:       0300
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number:          02FF
Signing time:             Fri 22 Nov 2024 02:04:10 +0000
Manifest this update:     Fri 22 Nov 2024 02:04:09 +0000
Manifest next update:     Sun 24 Nov 2024 02:04:09 +0000
Files and hashes:         1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: SXSVLokw2o2RG2hTAVVUiaWMreSroinJqhxvp38Vaew=)
                          2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768 (0x300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
        Validity
            Not Before: Nov 22 02:04:09 2024 GMT
            Not After : Nov 24 02:04:09 2024 GMT
        Subject: CN=673fe69a-663e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:3e:44:2e:9a:73:c3:25:f9:36:00:fc:3a:
                    81:3c:86:6e:93:86:c5:c1:3c:fe:c2:dd:42:46:5d:
                    b8:0a:a5:29:de:ca:b2:1c:36:b1:b0:fc:f6:7c:c6:
                    03:13:9e:58:90:9e:73:b4:4c:a0:10:fb:8b:d9:b2:
                    47:5f:0b:68:31:c2:e8:af:17:6c:e8:ff:4c:fe:3a:
                    1d:0a:3f:f7:ee:af:d5:fa:c9:c4:31:4a:34:5b:c0:
                    1a:73:de:9a:94:9f:a3:17:fd:3b:52:f5:e2:5b:61:
                    d6:2d:70:6c:d7:66:e9:f7:69:0f:67:4e:21:29:95:
                    56:d6:bc:27:2d:b2:36:79:a5:80:dc:7a:0d:30:10:
                    34:1e:93:4a:d5:a4:0c:21:b9:b8:2c:36:2c:6c:00:
                    90:ae:38:58:4c:e7:21:82:26:9b:c2:44:3e:d0:9a:
                    a0:1f:87:61:32:db:ee:97:33:f9:4d:a2:8f:43:02:
                    fb:4d:57:64:36:74:6c:05:68:01:74:13:1c:13:81:
                    0d:40:9c:bc:16:3d:bb:c5:61:ef:a1:81:f7:74:3f:
                    a1:f0:c5:72:b2:b1:f4:52:38:0d:5a:44:ac:e1:4f:
                    65:fb:7e:5a:d9:e9:12:fc:bd:56:6e:f0:a9:c2:02:
                    b2:1e:58:a2:bb:74:d5:16:a6:e0:ae:81:50:a3:ff:
                    13:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:98:9D:CC:E7:7C:E4:67:12:6A:B0:BC:C6:10:EB:6A:5D:D0:F6:A5
            X509v3 Authority Key Identifier:
                keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:59:9e:56:ea:35:24:25:ed:a1:29:c6:9b:1e:21:3e:58:
         31:36:96:a4:ba:f8:a9:df:18:a1:de:98:b6:79:76:60:7a:7b:
         81:f7:81:5a:aa:67:6a:01:c6:ee:1e:53:ea:21:ee:ca:10:6c:
         17:3b:07:27:5f:ca:5a:c4:c0:5e:4d:6e:bc:c1:11:07:dd:aa:
         dd:e7:1f:d1:c8:0c:bb:6e:35:1f:c7:ed:a0:d9:f1:e1:2b:5c:
         1c:ff:25:f3:2f:4b:75:29:58:45:96:df:3b:52:f2:11:07:83:
         4f:c4:58:d4:5c:0e:80:34:db:72:7f:f7:38:32:a0:10:26:3e:
         8b:f5:54:8a:7f:60:64:fe:ad:7b:70:fa:b7:84:2e:0a:a1:2a:
         4b:82:13:52:7d:43:e8:df:59:59:cf:27:89:59:b6:a9:12:36:
         ce:78:b0:e2:ab:23:bf:f1:35:a8:89:16:66:8a:ce:dd:9f:54:
         07:7c:46:e7:3e:90:aa:e4:39:f3:72:3d:04:55:c8:4e:2c:d1:
         1d:b5:e0:b2:ba:67:9b:c1:c0:81:08:94:39:96:a3:de:12:56:
         30:d2:df:4c:68:6c:e3:04:0c:e3:88:86:85:a4:2e:13:f7:e5:
         7b:9a:05:d3:39:77:34:60:3f:31:9e:01:cf:2b:ca:85:67:0d:
         6f:f4:56:09
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAwAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkE2NERBRjExMC8GA1UEBRMoMEIzMTk5QURBOThGOTM0RTdBMjk1RDJCQUExM0Mw
QzQ3N0FEOEYyNTAeFw0yNDExMjIwMjA0MDlaFw0yNDExMjQwMjA0MDlaMBgxFjAU
BgNVBAMTDTY3M2ZlNjlhLTY2M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEYz5ELppzwyX5NgD8OoE8hm6ThsXBPP7C3UJGXbgKpSneyrIcNrGw/PZ8
xgMTnliQnnO0TKAQ+4vZskdfC2gxwuivF2zo/0z+Oh0KP/fur9X6ycQxSjRbwBpz
3pqUn6MX/TtS9eJbYdYtcGzXZun3aQ9nTiEplVbWvCctsjZ5pYDceg0wEDQek0rV
pAwhubgsNixsAJCuOFhM5yGCJpvCRD7QmqAfh2Ey2+6XM/lNoo9DAvtNV2Q2dGwF
aAF0ExwTgQ1AnLwWPbvFYe+hgfd0P6HwxXKysfRSOA1aRKzhT2X7flrZ6RL8vVZu
8KnCArIeWKK7dNUWpuCugVCj/xNXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8pid
zOd85GcSarC8xhDral3Q9qUwHwYDVR0jBBgwFoAUCzGZramPk056KV0rqhPAxHet
jyUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJBNjRELzkzRDI3MjBFNjU5NzExRUQ5QTdDQjhDNkYxMjIyNDY4L0N6R1py
YW1QazA1NktWMHJxaFBBeEhldGp5VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0N6R1pyYW1QazA1NktWMHJxaFBBeEhldGp5VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkE2NEQvOTNEMjcyMEU2NTk3MTFFRDlBN0NCOEM2RjEy
MjI0NjgvQ3pHWnJhbVBrMDU2S1YwcnFoUEF4SGV0anlVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfm1meVuo1JCXtoSnGmx4hPlgxNpak
uvip3xih3pi2eXZgenuB94FaqmdqAcbuHlPqIe7KEGwXOwcnX8paxMBeTW68wREH
3ard5x/RyAy7bjUfx+2g2fHhK1wc/yXzL0t1KVhFlt87UvIRB4NPxFjUXA6ANNty
f/c4MqAQJj6L9VSKf2Bk/q17cPq3hC4KoSpLghNSfUPo31lZzyeJWbapEjbOeLDi
qyO/8TWoiRZmis7dn1QHfEbnPpCq5Dnzcj0EVchOLNEdteCyumebwcCBCJQ5lqPe
ElYw0t9MaGzjBAzjiIaFpC4T9+V7mgXTOXc0YD8xngHPK8qFZw1v9FYJ
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org