Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
File:                     5U9enM9-t26XkK6VM_5KhMiy_Lw.mft (raw, json)
Hash identifier:          l8XsxctLNJ6sfsmnLdnZQbL8dYHVhNEyyuj+wOqAbY4=
Subject key identifier:   A7:3D:D4:44:3F:8E:59:7C:28:56:66:03:FF:14:07:83:D9:A3:DD:67
Authority key identifier: E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC
Certificate issuer:       /CN=F36CACCCAF/serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC
Certificate serial:       34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
Manifest number:          33
Signing time:             Wed 23 Oct 2024 03:00:14 +0000
Manifest this update:     Wed 23 Oct 2024 03:00:14 +0000
Manifest next update:     Fri 25 Oct 2024 03:00:14 +0000
Files and hashes:         1: 5U9enM9-t26XkK6VM_5KhMiy_Lw.crl (hash: G5cQqiIR5NqGdOCHywpF4q5CWxIDgGzwvI9HcBJxxEk=)
                          2: 690AD7B26C3111EF81B16842762E951A.roa (hash: rHzjxo/eO2fqIELNKfmN3/VjzzeCb8hHN9sTo2VjXI0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CACCCAF/serialNumber=E54F5E9CCF7EB76E9790AE9533FE4A84C8B2FCBC
        Validity
            Not Before: Oct 23 03:00:14 2024 GMT
            Not After : Oct 25 03:00:14 2024 GMT
        Subject: CN=671866be-2040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:06:95:eb:59:55:2d:c1:ea:f0:5c:85:7f:
                    52:09:55:50:5f:c5:b3:52:19:a6:7c:03:42:c9:77:
                    6e:82:df:0d:62:9e:93:4a:40:df:96:c8:91:0a:5d:
                    fc:e6:54:3b:9c:4f:d3:b9:98:9e:74:5a:3b:e6:c0:
                    b8:15:6d:2f:7f:60:dd:37:de:55:41:40:d5:67:36:
                    67:77:81:aa:b5:81:ec:0b:0e:ab:cd:54:c9:d3:18:
                    de:d4:b6:2c:05:6d:b9:3c:52:25:fe:6a:ae:35:e4:
                    40:c6:98:5d:00:9f:5c:31:fc:19:28:3b:26:18:71:
                    a8:9d:af:eb:4d:90:7a:e8:30:b2:3a:7c:b3:4a:55:
                    f2:00:98:d9:2c:c0:74:c7:11:f9:d3:35:b9:93:a9:
                    6a:97:91:47:c4:87:7a:9d:06:f8:d9:9b:24:1c:09:
                    9a:8d:29:93:85:a3:e0:42:7e:ff:26:66:39:a4:76:
                    12:5f:6b:3b:84:62:70:0a:2b:34:8f:89:c4:3c:59:
                    78:57:0c:62:b4:9b:67:94:e7:73:89:cb:07:7d:42:
                    c8:2f:54:78:e5:62:af:4a:12:62:0f:98:11:34:09:
                    dc:83:04:29:a5:c7:9a:83:8b:58:ae:32:ff:15:bf:
                    51:09:49:ea:e5:90:4a:71:69:88:bb:54:f7:34:f7:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3D:D4:44:3F:8E:59:7C:28:56:66:03:FF:14:07:83:D9:A3:DD:67
            X509v3 Authority Key Identifier:
                keyid:E5:4F:5E:9C:CF:7E:B7:6E:97:90:AE:95:33:FE:4A:84:C8:B2:FC:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5U9enM9-t26XkK6VM_5KhMiy_Lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CACCC/DC647B426C3011EF91DB8BBE762E951A/5U9enM9-t26XkK6VM_5KhMiy_Lw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:3d:09:1a:3e:f4:a1:12:e4:fc:e4:a7:f6:3b:a3:bc:5b:bf:
         f4:ed:52:d9:5b:9a:e4:89:ef:fe:7d:37:4c:f8:0e:9f:79:e6:
         a6:81:53:37:67:71:1e:01:e9:c8:13:9a:50:d7:bb:0e:b6:86:
         21:f8:92:3c:90:1f:62:a6:62:6e:e9:2a:4f:f0:e4:c9:9d:d8:
         e1:8f:5b:fa:96:3c:44:0d:45:d5:d1:c7:c0:64:36:a8:39:8c:
         20:f3:b9:1c:04:8e:38:81:62:8f:62:4e:af:57:ca:6b:97:3a:
         99:0c:42:fe:6f:dc:de:6c:19:4c:5b:7f:e0:0a:63:42:21:d7:
         ce:ac:82:0c:6d:e9:43:81:13:a4:3a:9c:2b:a2:9a:af:e1:19:
         8a:65:93:a3:d9:bf:1d:85:3b:92:7e:d7:62:32:3a:2c:88:d2:
         58:1d:e5:a3:33:c5:a7:48:ce:cd:bc:22:18:88:e1:08:63:ec:
         d2:f9:b9:1c:2e:8d:12:94:f4:95:63:e2:d3:c2:dc:e6:0c:e0:
         ea:73:b9:39:f7:8d:a9:b2:c2:05:2d:da:16:2f:07:43:50:dd:
         b4:9d:25:8e:78:9d:b3:4a:7a:22:12:c5:4c:cf:3b:58:f3:62:
         a7:84:1d:7e:bf:46:72:6a:68:f0:8d:74:62:10:33:1c:00:ce:
         72:f4:95:c5
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBNDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
QUNDQ0FGMTEwLwYDVQQFEyhFNTRGNUU5Q0NGN0VCNzZFOTc5MEFFOTUzM0ZFNEE4
NEM4QjJGQ0JDMB4XDTI0MTAyMzAzMDAxNFoXDTI0MTAyNTAzMDAxNFowGDEWMBQG
A1UEAxMNNjcxODY2YmUtMjA0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMIKBpXrWVUtwerwXIV/UglVUF/Fs1IZpnwDQsl3boLfDWKek0pA35bIkQpd
/OZUO5xP07mYnnRaO+bAuBVtL39g3TfeVUFA1Wc2Z3eBqrWB7AsOq81UydMY3tS2
LAVtuTxSJf5qrjXkQMaYXQCfXDH8GSg7JhhxqJ2v602Qeugwsjp8s0pV8gCY2SzA
dMcR+dM1uZOpapeRR8SHep0G+NmbJBwJmo0pk4Wj4EJ+/yZmOaR2El9rO4RicAor
NI+JxDxZeFcMYrSbZ5Tnc4nLB31CyC9UeOVir0oSYg+YETQJ3IMEKaXHmoOLWK4y
/xW/UQlJ6uWQSnFpiLtU9zT3LiMCAwEAAaOCArgwggK0MB0GA1UdDgQWBBSnPdRE
P45ZfChWZgP/FAeD2aPdZzAfBgNVHSMEGDAWgBTlT16cz363bpeQrpUz/kqEyLL8
vDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Q0FDQ0MvREM2NDdCNDI2QzMwMTFFRjkxREI4QkJFNzYyRTk1MUEvNVU5ZW5N
OS10MjZYa0s2Vk1fNUtoTWl5X0x3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNVU5ZW5NOS10MjZYa0s2Vk1fNUtoTWl5X0x3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZDQUNDQy9EQzY0N0I0MjZDMzAxMUVGOTFEQjhCQkU3NjJF
OTUxQS81VTllbk05LXQyNlhrSzZWTV81S2hNaXlfTHcubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAJc9CRo+9KES5Pzkp/Y7o7xbv/TtUtlb
muSJ7/59N0z4Dp955qaBUzdncR4B6cgTmlDXuw62hiH4kjyQH2KmYm7pKk/w5Mmd
2OGPW/qWPEQNRdXRx8BkNqg5jCDzuRwEjjiBYo9iTq9XymuXOpkMQv5v3N5sGUxb
f+AKY0Ih186sggxt6UOBE6Q6nCuimq/hGYplk6PZvx2FO5J+12IyOiyI0lgd5aMz
xadIzs28IhiI4Qhj7NL5uRwujRKU9JVj4tPC3OYM4OpzuTn3jamywgUt2hYvB0NQ
3bSdJY54nbNKeiISxUzPO1jzYqeEHX6/RnJqaPCNdGIQMxwAznL0lcU=
-----END CERTIFICATE-----