Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
File:                     P2d_OhisqubJf4H5muh5RlTgQQs.mft (raw, json)
Hash identifier:          ohX08yglvhk4QEadYWMX7n/baSNCFYvgL/9kjZEVR9c=
Subject key identifier:   E9:E2:34:54:87:C7:7F:63:2A:53:5F:43:78:18:37:08:F5:71:4D:7E
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Certificate issuer:       /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial:       028D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
Manifest number:          025D
Signing time:             Fri 22 Nov 2024 02:20:21 +0000
Manifest this update:     Fri 22 Nov 2024 02:20:21 +0000
Manifest next update:     Sun 24 Nov 2024 02:20:21 +0000
Files and hashes:         1: P2d_OhisqubJf4H5muh5RlTgQQs.crl (hash: YU8ORbQ51vfivRk4D9b2ZuOEpc+LSmnGqCms+gjyO+o=)
                          2: 93BEB9727B6F11EF81325783762E951A.roa (hash: XGjuCE7tXlwix5GuCmklZ88dhoOPc6iO4b/dd0dOcD8=)
                          3: B598428C7BD011EF9348E170762E951A.roa (hash: u8koei9o52T1/oDA6+Vc7alnKCHHr6e9qCPf+FyEca0=)
                          4: 93134C74962011EFAAA0A9B4762E951A.roa (hash: HWJdyAQD0gPKecvYAkvhvhhvqGUM+2Gwedr+o6pd7fI=)
                          5: 1A4F9134922511EF83368F9D762E951A.roa (hash: anCBfgZHtzniM7dP4vfF3lMI+1CdF2Ions9Nt8kdpN4=)
                          6: F430395C9D2F11EFB715FD42762E951A.roa (hash: QZVPOHGEn0usgf/YbR+2DThtu8NQGk1/eDy5A5nCKIg=)
                          7: 7B0EB180561611EF957AD24F762E951A.roa (hash: YLCMHlWP1EnEGexbMo2ag/60lLWvA9wmZJiet6AJRXI=)
                          8: 837E97941C2511EEAA26D4594AD9E6FC.roa (hash: DmTBedmJtAZllDRXX8QYacyLifphZi9/9tYqy0qa/Z8=)
                          9: E1F54F2E5FF511EFAE767E52762E951A.roa (hash: ZHyP78AP+q/JJtHtUW/HC4m2P265a+lBVZzkus9pUMQ=)
                          10: 77525E5A1C2611EE8D4AC85C4AD9E6FC.roa (hash: DpMrNiTjRZWKu4SpXJlLIPkKtzQPA3MM+9+EToM9kyg=)
                          11: 9EECB24E1C2611EEA7AD515D4AD9E6FC.roa (hash: 9W8fC1Pv3M9CQpx7wz4y4cmIGIFTbWUALksyFRhYDgE=)
                          12: 75CA91FC1BE411EE9089601B4AD9E6FC.roa (hash: Cs2GRiXevEGCoa3qkkhkNlYauBNaqUjtSZnO1OJruuQ=)
                          13: D305BF9E1C2611EE962CF15D4AD9E6FC.roa (hash: QvV0F8KyJ9WvuBSABzYloVhD1CSoUH2t+UNQgJHZffQ=)
                          14: 8CBFAAFA561711EFA32AB1BE762E951A.roa (hash: x13tTUmCqaneTmuylrncyIbgJsZvmJqEqrEdlvKnZD8=)
                          15: 003205069B9511EFB5BBFBA3762E951A.roa (hash: UjNuym/YVxBGxCeImR5szQOeTVJpSD09YHDR0+HigJY=)
                          16: 48DB40CE1C2511EE961F2B594AD9E6FC.roa (hash: 0WYNowNq6/ghxa/+ViWE2YlwzJQFXVRIIBMOUYA+fQ8=)
                          17: CC06753C9B9411EFB98A1EA2762E951A.roa (hash: PrWrPFpz78YhUoGxQ7jEkZFHzPPsv0jeCPOMzZB31PQ=)
                          18: D6A352521C2511EE9164F55A4AD9E6FC.roa (hash: He2Venw8taiOIZNG5L2+aSFbOwse3tT4XMAeuZ2rfyQ=)
                          19: 4134710A1C2611EE8654415C4AD9E6FC.roa (hash: FOrfNT73uBh2aYXKjOIxZWv6Nr2ME7Pa+Um5EKzqmIQ=)
                          20: 2D888128971311EFB14662AA762E951A.roa (hash: m6Vgw13O/Z9CVMDFoYn3/x7Scp+tZSUuvP1qWkzu25Q=)
                          21: 0EBF7BE21C2711EEA4DDB95E4AD9E6FC.roa (hash: Ev2ul4e+ltqtbvYSPW/0zConR3j9rixqOLLNpHJBAUU=)
                          22: F101CBE6561811EFA074CAB5762E951A.roa (hash: PVkzNVX7ipe9aGzB4gi4o8SFUMbc7U3/3IkSQs7+GcU=)
                          23: AC6C1AF87C2011EF8072375D762E951A.roa (hash: 3Rl3eJ9URzbNEAjNItG8eZqFtndJzNxZbtBiE9bB/NU=)
                          24: 494629A869C611EFAB29428D762E951A.roa (hash: eeCnZNp5+DXjWbE73Xzf+vc1c6ITE8Mpg+2iFFIZRf0=)
                          25: 529E19241B3A11EE8CFC2F144AD9E6FC.roa (hash: IPBMxbbsRZcQmItmyOL7zxLz+lrJ1yuj9JR+vO3LHtI=)
                          26: C3DC7C78744B11EFB00C628E762E951A.roa (hash: DslpOa5/mWSwqGcWwNCCAP4kUIk852TGOki17LeoHAI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
        Validity
            Not Before: Nov 22 02:20:21 2024 GMT
            Not After : Nov 24 02:20:21 2024 GMT
        Subject: CN=673fea65-835e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:fe:db:84:6c:b5:cf:4f:25:ad:46:a6:54:
                    76:21:79:35:99:49:81:f9:1b:60:89:d7:85:50:9d:
                    f4:4e:42:70:20:58:08:82:2e:4d:48:c2:20:8c:52:
                    45:a7:a7:27:b1:7d:8d:1b:d2:59:6b:da:e1:0c:00:
                    87:ce:dd:6d:bb:ee:41:b0:48:0b:00:2b:79:3a:0f:
                    0c:24:a2:d6:fb:0b:ca:05:06:c6:f9:78:4e:c9:bf:
                    f0:ee:bf:f2:31:a6:99:00:2d:90:b4:74:85:11:e2:
                    0e:53:c2:99:39:d1:14:d0:a6:cd:c2:fa:14:60:7d:
                    cb:ef:4c:22:e2:2b:17:b7:3c:68:19:bb:14:02:42:
                    fc:f3:45:96:6f:ce:a5:de:df:10:b6:7d:9e:be:c9:
                    c4:09:cd:e2:01:2c:4f:e2:15:69:9c:e1:8e:4d:05:
                    e0:67:dc:41:aa:fc:b0:85:af:ff:6d:69:b6:c5:81:
                    cb:05:91:e9:bb:77:f7:b2:5a:55:ee:f9:11:bc:f2:
                    b8:ac:6b:a3:6d:99:8f:33:47:d3:47:6a:a0:c9:e6:
                    4f:23:e1:7b:86:10:0a:36:a8:05:cb:22:e0:19:19:
                    fa:6d:32:60:ae:dc:8c:38:09:46:15:73:19:d4:3c:
                    02:41:fb:a2:81:9d:87:6c:c8:dd:c9:0d:e3:9c:e5:
                    8c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E2:34:54:87:C7:7F:63:2A:53:5F:43:78:18:37:08:F5:71:4D:7E
            X509v3 Authority Key Identifier:
                keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:1c:30:23:14:97:10:d1:da:ff:ea:b6:96:f2:df:d6:88:d7:
         85:64:0d:89:35:f5:e8:34:31:a7:04:40:73:0b:b4:d7:6c:80:
         97:57:5c:9e:bd:0c:8c:ec:9f:8a:d9:e9:de:fb:5b:22:38:dc:
         e0:51:d1:2e:91:6e:45:99:67:70:59:b8:a9:c0:b3:18:af:75:
         1c:63:65:8c:50:e8:18:61:eb:56:c0:e5:61:a7:09:b8:f0:d3:
         14:c6:0c:cd:7b:19:57:65:f7:4b:9b:c8:b3:99:f4:87:b8:35:
         52:4f:b0:c4:7d:75:6a:d7:36:c5:98:1f:c2:34:a7:f6:8d:91:
         34:1e:56:26:e1:1c:36:27:e7:ef:ba:b3:db:ff:49:7a:43:50:
         64:08:c9:5d:a8:4a:2d:82:63:64:77:46:92:e8:36:b6:92:0e:
         ab:c5:c6:92:7f:b7:8e:02:27:4f:70:af:96:29:6e:ea:e1:ef:
         65:43:b7:a6:b5:f8:13:3d:d9:de:31:e2:77:60:9a:52:76:8c:
         c3:f0:0e:20:6e:c9:de:4c:d4:61:81:3e:38:60:65:de:9e:9b:
         a8:6e:d4:7d:0a:01:85:53:4d:dd:fb:67:70:22:c4:24:3a:1e:
         a0:4e:39:82:f2:03:0a:ce:48:c1:4d:e9:56:e8:d0:ad:10:03:
         a1:39:68:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:22 2024 by rpki-client on console-ams.rpki-client.org