Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
File:                     XozUASYISPXWb0DSj9l3F6nw8mo.mft (raw, json)
Hash identifier:          jARPUk+aDtLxjNnirMUFTiSkkYhq6WIM6GPkbQVjj7k=
Subject key identifier:   46:21:9D:31:C2:4C:1B:4F:65:7E:B0:66:49:37:27:EF:1A:0B:25:59
Authority key identifier: 5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A
Certificate issuer:       /CN=F36D8D30AR/serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
Certificate serial:       0301
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
Manifest number:          0300
Signing time:             Sun 16 Feb 2025 02:23:44 +0000
Manifest this update:     Sun 16 Feb 2025 02:23:44 +0000
Manifest next update:     Tue 18 Feb 2025 02:23:44 +0000
Files and hashes:         1: XozUASYISPXWb0DSj9l3F6nw8mo.crl (hash: 6K7efTR4+CxENm5QsTVF2dPTe/mrQzte1rYY3gW1omU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                          rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769 (0x301)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8D30AR
        Validity
            Not Before: Feb 16 02:23:44 2025 GMT
            Not After : Feb 18 02:23:44 2025 GMT
        Subject: CN=67b14c30-5e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:b5:22:38:f4:34:f8:d1:b4:b9:e7:dd:bf:
                    5e:0d:c8:2c:bd:99:0d:eb:9a:13:82:2f:77:58:4d:
                    d6:d8:f3:49:5e:3d:ee:32:0d:e7:9c:dc:91:c2:7c:
                    6d:c8:1a:36:61:76:4b:01:14:80:e9:33:03:18:73:
                    a5:dd:dd:5f:bb:e4:ff:7c:69:eb:e1:b0:16:04:ed:
                    0c:cf:bb:cc:31:f2:26:e6:3b:4a:21:d3:35:01:89:
                    e2:fa:7c:9d:03:2e:d1:42:47:8d:24:0a:2a:8f:a4:
                    c7:55:67:46:08:77:fb:e0:3e:56:db:6a:80:cd:eb:
                    94:5b:27:d2:b5:36:c0:e5:aa:29:79:07:88:8f:de:
                    5d:a1:f2:7f:50:a7:db:aa:aa:ec:23:73:3c:48:c1:
                    c3:09:2c:d4:c8:e1:95:da:7f:50:5e:2c:b4:ad:81:
                    a4:d1:19:ae:37:e3:c3:6e:5b:85:55:22:da:e1:f3:
                    eb:2e:c2:67:e1:50:42:2f:2a:61:a0:53:53:ae:39:
                    e4:7b:86:e1:49:6c:2e:1e:49:ee:50:2a:c8:ba:64:
                    a6:dd:f9:ab:11:84:0b:40:4b:99:e4:ec:f6:5c:e9:
                    f8:b3:e3:bf:85:08:aa:65:ad:15:52:64:b0:93:01:
                    f7:7b:f2:79:4a:43:ee:f4:17:08:5d:e4:b5:bf:d2:
                    ae:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:21:9D:31:C2:4C:1B:4F:65:7E:B0:66:49:37:27:EF:1A:0B:25:59
            X509v3 Authority Key Identifier:
                keyid:5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:44:67:79:70:8f:bb:86:a1:4b:d5:63:f1:7e:1d:81:ed:7c:
         f9:de:e9:e1:bc:76:0c:a1:3c:f8:0a:01:a8:20:9b:5b:2d:8e:
         38:37:a3:03:39:49:16:d3:52:7d:8e:5f:49:fb:79:70:01:99:
         fc:c8:d1:10:9d:cc:35:05:aa:b1:df:70:5d:ab:62:37:cd:7b:
         80:35:9d:d6:ce:09:9d:c2:2b:0e:2f:c3:fb:64:b4:4c:d0:39:
         ec:39:8c:24:e6:aa:56:eb:8d:6e:d7:01:da:61:6d:b9:9a:75:
         82:e4:30:93:f4:6b:b2:ae:c0:e0:56:d0:98:7c:74:6d:a9:7f:
         2d:0d:9a:d1:9c:ce:fd:5c:c8:d3:48:8a:1a:0d:fd:8f:cb:79:
         cc:f0:93:66:8d:8b:a7:bc:31:36:48:92:fb:b0:3e:cd:11:9b:
         39:aa:3c:9a:60:86:d2:0a:70:23:58:0d:23:c7:72:34:3b:16:
         f1:51:10:b4:75:d7:9f:10:84:72:6f:ef:1c:51:f1:29:6e:0a:
         87:d5:01:c1:30:60:9f:9f:d3:fc:04:d2:dc:0c:fe:e0:6c:53:
         fe:69:45:15:2d:f6:26:2f:42:7b:48:01:a6:8b:60:f2:c9:7a:
         98:5c:e3:b4:b0:90:b1:e8:a9:2b:c1:30:e2:3a:6f:c2:d5:1f:
         48:d5:98:8e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAwEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDhEMzBBUjExMC8GA1UEBRMoNUU4Q0Q0MDEyNjA4NDhGNUQ2NkY0MEQyOEZEOTc3
MTdBOUYwRjI2QTAeFw0yNTAyMTYwMjIzNDRaFw0yNTAyMTgwMjIzNDRaMBgxFjAU
BgNVBAMTDTY3YjE0YzMwLTVlODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEN7UiOPQ0+NG0uefdv14NyCy9mQ3rmhOCL3dYTdbY80lePe4yDeec3JHC
fG3IGjZhdksBFIDpMwMYc6Xd3V+75P98aevhsBYE7QzPu8wx8ibmO0oh0zUBieL6
fJ0DLtFCR40kCiqPpMdVZ0YId/vgPlbbaoDN65RbJ9K1NsDlqil5B4iP3l2h8n9Q
p9uqquwjczxIwcMJLNTI4ZXaf1BeLLStgaTRGa4348NuW4VVItrh8+suwmfhUEIv
KmGgU1OuOeR7huFJbC4eSe5QKsi6ZKbd+asRhAtAS5nk7PZc6fiz47+FCKplrRVS
ZLCTAfd78nlKQ+70Fwhd5LW/0q5FAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQURiGd
McJMG09lfrBmSTcn7xoLJVkwHwYDVR0jBBgwFoAUXozUASYISPXWb0DSj9l3F6nw
8mowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4RDMwLzNFQTY5NkFDQTZCMDExRURCOTAxRDQ5Q0YxMjIyNDY4L1hvelVB
U1lJU1BYV2IwRFNqOWwzRjZudzhtby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1hvelVBU1lJU1BYV2IwRFNqOWwzRjZudzhtby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDhEMzAvM0VBNjk2QUNBNkIwMTFFREI5MDFENDlDRjEyMjI0
NjgvWG96VUFTWUlTUFhXYjBEU2o5bDNGNm53OG1vLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLRGd5cI+7hqFL1WPxfh2B7Xz53unhvHYM
oTz4CgGoIJtbLY44N6MDOUkW01J9jl9J+3lwAZn8yNEQncw1Baqx33Bdq2I3zXuA
NZ3WzgmdwisOL8P7ZLRM0DnsOYwk5qpW641u1wHaYW25mnWC5DCT9GuyrsDgVtCY
fHRtqX8tDZrRnM79XMjTSIoaDf2Py3nM8JNmjYunvDE2SJL7sD7NEZs5qjyaYIbS
CnAjWA0jx3I0OxbxURC0ddefEIRyb+8cUfEpbgqH1QHBMGCfn9P8BNLcDP7gbFP+
aUUVLfYmL0J7SAGmi2DyyXqYXOO0sJCx6KkrwTDiOm/C1R9I1ZiO
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:33 2025 by rpki-client