Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
File:                     8fHKBYLoJWPuJfCZF2si382cw2Q.mft (raw, json)
Hash identifier:          8etJBHQCl3c/4Lj0xmxS7M1oVwt+cl8fFr0Ag/e4SlE=
Subject key identifier:   28:91:57:D6:33:C3:74:74:41:D9:72:DC:16:71:4B:77:FF:BE:34:3F
Authority key identifier: F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64
Certificate issuer:       /CN=F36C08D4AF/serialNumber=F1F1CA0582E82563EE25F099176B22DFCD9CC364
Certificate serial:       01A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
Manifest number:          01A5
Signing time:             Thu 21 Nov 2024 02:27:04 +0000
Manifest this update:     Thu 21 Nov 2024 02:27:04 +0000
Manifest next update:     Sat 23 Nov 2024 02:27:04 +0000
Files and hashes:         1: 8fHKBYLoJWPuJfCZF2si382cw2Q.crl (hash: ZyvH28RYXiZ45/k0hRx4DVkWUuUoLwaVfPbppX2XQGo=)
                          2: 715EC0EE69A911EE84A41F174AD9E6FC.roa (hash: GA/yRfN+j7YpzqeDRBlxUIhR1rbQNxt7HY+jSgnz5l0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C08D4AF/serialNumber=F1F1CA0582E82563EE25F099176B22DFCD9CC364
        Validity
            Not Before: Nov 21 02:27:04 2024 GMT
            Not After : Nov 23 02:27:04 2024 GMT
        Subject: CN=673e9a78-79b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bc:a4:a5:95:82:22:12:27:ae:91:c2:5b:c5:
                    9e:27:7d:ed:48:7e:1b:a1:71:7c:33:9e:a8:50:18:
                    f3:3f:f4:f9:36:99:83:08:19:5a:1e:60:1f:86:11:
                    02:70:90:98:b3:48:be:8d:66:80:36:f2:24:29:e7:
                    8e:70:97:a3:c2:82:01:15:fc:95:ac:00:e5:f9:35:
                    45:e9:45:13:72:f3:fe:ce:c4:01:c4:3d:d4:1d:27:
                    88:e7:79:9f:f7:4a:2e:d2:60:42:ce:05:24:d8:12:
                    28:a2:0d:d6:9c:e9:f4:6a:f4:c8:97:85:bb:ed:7e:
                    30:d5:12:51:4f:83:83:7e:11:de:cd:0c:31:4e:93:
                    35:c5:2c:95:61:86:7b:9a:ae:a2:a2:81:f3:1f:15:
                    00:f0:28:a7:ba:0f:5d:a9:aa:b9:7f:b1:8d:1e:82:
                    cf:cb:13:80:28:af:85:b1:54:ef:af:2b:b8:c3:56:
                    ad:89:52:a8:43:90:5a:36:4e:fb:6a:88:84:72:0c:
                    26:86:94:a3:a0:2e:df:84:52:45:74:0e:95:ae:c4:
                    98:69:fd:d6:63:60:0f:e3:38:59:03:f9:5d:82:bc:
                    85:cc:71:10:a2:02:90:b1:4f:f9:5a:96:0f:c6:c7:
                    58:49:86:c8:01:ff:03:f5:11:f5:45:92:18:fc:ef:
                    92:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:91:57:D6:33:C3:74:74:41:D9:72:DC:16:71:4B:77:FF:BE:34:3F
            X509v3 Authority Key Identifier:
                keyid:F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:33:32:d8:20:25:9c:3c:27:16:87:bd:ca:4b:81:49:bd:b8:
         bd:a1:60:d8:b7:0b:6f:dc:6a:1e:12:3a:12:7b:f1:bf:0e:12:
         7a:b9:73:1d:9a:d7:99:47:97:14:13:33:0b:50:a3:09:37:5d:
         d7:1f:4a:07:c9:13:1a:63:3f:fd:9c:7c:b7:ec:0e:4f:49:e9:
         7f:18:45:7d:31:1a:6b:d4:98:66:35:08:fe:ff:2d:40:96:48:
         b2:37:fc:3b:fc:87:4a:e6:51:65:e7:5f:32:94:8c:1f:12:48:
         44:12:a5:75:c8:26:a5:ad:97:d0:dd:22:9b:01:65:fa:db:bc:
         35:a5:42:62:66:11:1a:b5:6d:50:69:15:52:14:2f:05:f2:48:
         e1:86:53:16:d2:c6:41:f1:8e:76:8a:83:a0:e9:d3:67:2d:85:
         d4:31:3c:77:39:20:c7:0c:07:35:39:7d:70:7b:a6:4b:a9:f6:
         e1:ad:36:ba:96:b7:9e:ec:37:54:2f:7b:26:c7:0b:9b:0b:79:
         d2:d9:7c:a0:95:89:64:d4:e5:24:fb:a8:d4:da:26:96:85:4f:
         74:2c:02:f7:e9:51:9e:cb:55:b5:9b:23:30:aa:1a:28:c6:e7:
         87:37:33:43:ec:44:1b:ca:2f:a3:1a:6d:2d:89:10:ab:1f:4a:
         51:cc:2d:66
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzA4RDRBRjExMC8GA1UEBRMoRjFGMUNBMDU4MkU4MjU2M0VFMjVGMDk5MTc2QjIy
REZDRDlDQzM2NDAeFw0yNDExMjEwMjI3MDRaFw0yNDExMjMwMjI3MDRaMBgxFjAU
BgNVBAMTDTY3M2U5YTc4LTc5YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzvKSllYIiEieukcJbxZ4nfe1IfhuhcXwznqhQGPM/9Pk2mYMIGVoeYB+G
EQJwkJizSL6NZoA28iQp545wl6PCggEV/JWsAOX5NUXpRRNy8/7OxAHEPdQdJ4jn
eZ/3Si7SYELOBSTYEiiiDdac6fRq9MiXhbvtfjDVElFPg4N+Ed7NDDFOkzXFLJVh
hnuarqKigfMfFQDwKKe6D12pqrl/sY0egs/LE4Aor4WxVO+vK7jDVq2JUqhDkFo2
TvtqiIRyDCaGlKOgLt+EUkV0DpWuxJhp/dZjYA/jOFkD+V2CvIXMcRCiApCxT/la
lg/Gx1hJhsgB/wP1EfVFkhj875JdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKJFX
1jPDdHRB2XLcFnFLd/++ND8wHwYDVR0jBBgwFoAU8fHKBYLoJWPuJfCZF2si382c
w2QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMwOEQ0L0E5OEE5RTU4NjlBODExRUU5OEE0ODQxNDRBRDlFNkZDLzhmSEtC
WUxvSldQdUpmQ1pGMnNpMzgyY3cyUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhmSEtCWUxvSldQdUpmQ1pGMnNpMzgyY3cyUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzA4RDQvQTk4QTlFNTg2OUE4MTFFRTk4QTQ4NDE0NEFE
OUU2RkMvOGZIS0JZTG9KV1B1SmZDWkYyc2kzODJjdzJRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBIMzLYICWcPCcWh73KS4FJvbi9oWDY
twtv3GoeEjoSe/G/DhJ6uXMdmteZR5cUEzMLUKMJN13XH0oHyRMaYz/9nHy37A5P
Sel/GEV9MRpr1JhmNQj+/y1AlkiyN/w7/IdK5lFl518ylIwfEkhEEqV1yCalrZfQ
3SKbAWX627w1pUJiZhEatW1QaRVSFC8F8kjhhlMW0sZB8Y52ioOg6dNnLYXUMTx3
OSDHDAc1OX1we6ZLqfbhrTa6lree7DdUL3smxwubC3nS2XyglYlk1OUk+6jU2iaW
hU90LAL36VGey1W1myMwqhooxueHNzND7EQbyi+jGm0tiRCrH0pRzC1m
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:20 2024 by rpki-client on console-ams.rpki-client.org