Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
File:                     IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft (raw, json)
Hash identifier:          Bjd9fcev535OTY6BaY99C4yu3acaj2Ke9qR3EDwuZYo=
Subject key identifier:   BD:68:6B:91:BC:B4:BD:2C:10:BB:08:99:F9:45:42:7D:91:9C:78:16
Authority key identifier: 21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1
Certificate issuer:       /CN=F36C7A1BAF/serialNumber=21862A804A8E5251D3F4D55155324CABCB1B2CD1
Certificate serial:       01DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
Manifest number:          01DB
Signing time:             Mon 06 May 2024 02:06:01 +0000
Manifest this update:     Mon 06 May 2024 02:06:01 +0000
Manifest next update:     Wed 08 May 2024 02:06:01 +0000
Files and hashes:         1: IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl (hash: Nwe8HXtxtFRq6l7axNlICmL6CX9TFYkxafw55oRXscg=)
                          2: 46769BA6A71011ED8E13C6ADF1222468.roa (hash: R9x99ks/pEliB0qi0nkW24IgeK+W3nFZnfzH3UhqkQ8=)
                          3: 16E36298A71011ED8B382EADF1222468.roa (hash: YwrcpofXcW+TieniRsmACWrSZmHA8Ph3c8IA66MXe/8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C7A1BAF/serialNumber=21862A804A8E5251D3F4D55155324CABCB1B2CD1
        Validity
            Not Before: May  6 02:06:01 2024 GMT
            Not After : May  8 02:06:01 2024 GMT
        Subject: CN=66383b09-8da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:25:54:89:da:f8:44:66:d0:e5:c5:d0:09:
                    30:bc:f3:05:19:af:9b:48:1e:c5:05:9f:b5:f0:e4:
                    25:52:8d:7d:f9:5e:ae:e9:57:af:0c:93:7d:c4:0a:
                    fb:04:31:7d:22:2e:85:74:22:db:8e:0c:2c:44:7f:
                    94:c6:af:ba:6c:16:e5:85:ec:cb:1a:93:7a:e8:f0:
                    73:6a:4c:b3:28:19:01:33:43:62:c1:d0:e5:60:05:
                    d5:83:af:90:1a:af:b5:07:d5:b8:b4:82:31:e5:17:
                    19:87:2a:6b:67:54:77:df:17:d1:4d:fe:ad:71:2a:
                    f0:05:f2:78:8e:7b:48:18:63:56:79:4f:c6:73:d9:
                    0a:3b:96:c2:b6:e3:89:1e:72:54:c2:7c:1d:3f:d4:
                    66:64:32:4e:a1:f7:a7:d4:39:21:cb:b0:e3:c2:d0:
                    78:78:ea:25:3b:11:46:e5:2a:fb:58:d9:60:ce:6d:
                    77:b9:e2:d8:49:3a:d0:f4:cf:40:a9:bb:03:a0:19:
                    00:ad:28:86:2a:7a:18:94:14:51:37:ca:5f:fe:80:
                    b2:a6:da:2b:a1:44:7e:60:59:50:ff:56:b0:77:c5:
                    f7:aa:67:c8:79:7b:50:f9:5c:45:41:9e:77:95:64:
                    1d:7f:97:50:f3:f7:c7:d4:c7:94:b4:ef:ad:32:9e:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:68:6B:91:BC:B4:BD:2C:10:BB:08:99:F9:45:42:7D:91:9C:78:16
            X509v3 Authority Key Identifier:
                keyid:21:86:2A:80:4A:8E:52:51:D3:F4:D5:51:55:32:4C:AB:CB:1B:2C:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IYYqgEqOUlHT9NVRVTJMq8sbLNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A1B/8BF36EB2A70F11ED8E13A3ABF1222468/IYYqgEqOUlHT9NVRVTJMq8sbLNE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d8:8b:7e:22:fa:c9:90:bb:c1:7f:73:9d:97:c2:e5:2f:18:
         60:95:ae:22:03:31:66:e0:a0:ef:7b:82:0c:e8:9e:7b:e0:6d:
         3a:78:a0:3b:f0:5d:84:53:79:9c:c6:43:d4:40:86:9e:3f:b3:
         39:16:e6:14:47:4e:40:de:22:7c:fe:cc:2a:98:f3:a1:b2:3c:
         63:14:5a:a9:ff:fc:92:63:b5:14:86:20:c1:71:40:07:47:e2:
         93:be:fc:cd:26:64:05:75:02:7b:a2:bb:2c:d7:77:53:be:4f:
         16:4b:18:79:1b:54:8b:d3:30:4a:0f:8e:43:41:27:b0:ba:dd:
         2a:a6:ad:3a:4f:29:e2:98:eb:ef:34:cc:9f:c9:c3:2f:f7:76:
         ea:5a:78:91:73:88:d3:69:96:71:3e:b3:14:81:46:7a:b7:67:
         78:56:c5:0f:0c:0a:30:b9:73:46:6e:ae:11:4b:57:11:95:22:
         30:83:96:72:63:11:9a:7f:f1:93:7f:5f:4b:0f:36:53:73:d3:
         3f:ca:e3:eb:22:69:9a:c6:c7:64:4b:7a:29:31:2a:ed:67:f5:
         7f:08:c9:5d:1c:42:87:96:7f:b9:49:5c:3a:3f:88:c9:32:48:
         e3:da:5b:6b:1a:16:63:44:2d:8b:d1:8a:7d:55:96:f3:0c:7c:
         ea:a3:99:4f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzdBMUJBRjExMC8GA1UEBRMoMjE4NjJBODA0QThFNTI1MUQzRjRENTUxNTUzMjRD
QUJDQjFCMkNEMTAeFw0yNDA1MDYwMjA2MDFaFw0yNDA1MDgwMjA2MDFaMBgxFjAU
BgNVBAMTDTY2MzgzYjA5LThkYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtfSVUidr4RGbQ5cXQCTC88wUZr5tIHsUFn7Xw5CVSjX35Xq7pV68Mk33E
CvsEMX0iLoV0ItuODCxEf5TGr7psFuWF7Msak3ro8HNqTLMoGQEzQ2LB0OVgBdWD
r5Aar7UH1bi0gjHlFxmHKmtnVHffF9FN/q1xKvAF8niOe0gYY1Z5T8Zz2Qo7lsK2
44keclTCfB0/1GZkMk6h96fUOSHLsOPC0Hh46iU7EUblKvtY2WDObXe54thJOtD0
z0CpuwOgGQCtKIYqehiUFFE3yl/+gLKm2iuhRH5gWVD/VrB3xfeqZ8h5e1D5XEVB
nneVZB1/l1Dz98fUx5S0760ynmtZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvWhr
kby0vSwQuwiZ+UVCfZGceBYwHwYDVR0jBBgwFoAUIYYqgEqOUlHT9NVRVTJMq8sb
LNEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM3QTFCLzhCRjM2RUIyQTcwRjExRUQ4RTEzQTNBQkYxMjIyNDY4L0lZWXFn
RXFPVWxIVDlOVlJWVEpNcThzYkxORS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0lZWXFnRXFPVWxIVDlOVlJWVEpNcThzYkxORS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzdBMUIvOEJGMzZFQjJBNzBGMTFFRDhFMTNBM0FCRjEy
MjI0NjgvSVlZcWdFcU9VbEhUOU5WUlZUSk1xOHNiTE5FLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAU2It+IvrJkLvBf3Odl8LlLxhgla4i
AzFm4KDve4IM6J574G06eKA78F2EU3mcxkPUQIaeP7M5FuYUR05A3iJ8/swqmPOh
sjxjFFqp//ySY7UUhiDBcUAHR+KTvvzNJmQFdQJ7orss13dTvk8WSxh5G1SL0zBK
D45DQSewut0qpq06TynimOvvNMyfycMv93bqWniRc4jTaZZxPrMUgUZ6t2d4VsUP
DAowuXNGbq4RS1cRlSIwg5ZyYxGaf/GTf19LDzZTc9M/yuPrImmaxsdkS3opMSrt
Z/V/CMldHEKHln+5SVw6P4jJMkjj2ltrGhZjRC2L0Yp9VZbzDHzqo5lP
-----END CERTIFICATE-----
Generated at Mon May 6 03:08:51 2024 by rpki-client on console-fra.rpki-client.org