Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
File:                     O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft (raw, json)
Hash identifier:          YGilzChtzu1rYfaaBxg1a5alUC9WloUkMF7I9Hn9jTE=
Subject key identifier:   04:E5:0E:4D:59:7D:38:56:E5:76:75:83:79:9E:78:6A:58:60:B1:FF
Authority key identifier: 3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21
Certificate issuer:       /CN=F36DB735AF/serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
Certificate serial:       083E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
Manifest number:          083D
Signing time:             Fri 22 Nov 2024 00:56:56 +0000
Manifest this update:     Fri 22 Nov 2024 00:56:56 +0000
Manifest next update:     Sun 24 Nov 2024 00:56:56 +0000
Files and hashes:         1: O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl (hash: j4qH7U7OBeBHFoQSqTfLhSWeaUKDwqAau7mwCBlB1K4=)
                          2: ECE652CC57A211E983F84274F8AEA228.roa (hash: PvTpFnTUW5owha8oV/cdl6xRQsqx1W1UB5KJjdzCL08=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2110 (0x83e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB735AF/serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
        Validity
            Not Before: Nov 22 00:56:56 2024 GMT
            Not After : Nov 24 00:56:56 2024 GMT
        Subject: CN=673fd6d8-0755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:78:98:95:82:a4:fd:ac:9e:b1:22:47:9a:e3:
                    31:97:64:38:de:66:db:14:54:e5:aa:5b:6b:b1:d9:
                    ea:fa:3d:d8:05:f2:a1:ea:c3:47:90:fe:c0:0e:0c:
                    7a:c2:12:a1:39:71:55:27:70:fa:fa:2c:64:fd:f0:
                    f7:f8:df:53:80:07:32:1b:5d:5d:e0:2a:fe:7b:bf:
                    3e:4f:4b:5c:69:b3:6b:06:61:03:47:60:64:b0:5f:
                    29:83:28:53:a4:10:43:ea:e6:ce:ce:a6:5d:63:57:
                    09:4d:2e:e7:07:8e:da:7d:38:10:db:a9:3a:2d:7a:
                    a3:31:2a:0f:4e:3c:3c:0f:eb:74:f2:83:ba:2a:59:
                    16:0d:38:e5:9d:12:a8:0a:19:71:fe:de:81:e9:d6:
                    60:b2:32:2f:38:c4:b6:81:a2:35:e7:88:31:d1:ef:
                    4d:bf:0d:5b:62:ed:8e:36:15:75:5f:63:be:a7:46:
                    45:c5:a6:f8:79:e7:86:40:f1:09:b1:ba:e2:52:f8:
                    35:a7:b1:77:9e:ad:1e:58:dd:86:8d:f2:4e:0a:ab:
                    bc:25:e2:01:aa:19:06:a7:ee:0a:13:15:fb:6f:e0:
                    e6:18:05:e0:62:bc:bd:de:89:4d:f7:40:9a:72:75:
                    39:35:15:ab:7c:87:4f:65:ad:f0:7b:f3:a9:a3:d1:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E5:0E:4D:59:7D:38:56:E5:76:75:83:79:9E:78:6A:58:60:B1:FF
            X509v3 Authority Key Identifier:
                keyid:3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:51:d0:93:46:23:50:c2:e0:7e:f0:98:10:19:c5:ba:94:cd:
         8b:45:52:1c:de:bd:54:aa:26:b7:82:e9:78:30:83:0a:56:83:
         76:02:c4:98:22:98:b6:41:6e:aa:0d:dc:8c:07:45:be:30:40:
         17:8c:70:73:a3:dc:eb:16:c6:61:7e:af:2c:fc:13:b4:ed:36:
         37:b5:5b:93:97:60:b4:2b:7b:25:4e:02:7d:7b:32:a0:5a:8a:
         e7:23:54:65:fa:35:1b:e0:d3:0d:aa:6c:3f:b7:3a:22:72:12:
         d2:9a:42:3e:30:aa:c2:08:cb:6a:3a:57:25:32:37:9f:7d:19:
         11:a7:ac:d1:6d:b7:cb:03:27:16:e8:ae:b1:0a:a0:76:08:e0:
         1b:b7:bf:61:67:2c:4b:46:a1:a6:52:08:a4:6a:f1:23:93:f0:
         48:86:65:1f:84:98:e5:dd:e1:42:2f:f7:c2:c6:3c:93:ff:31:
         db:50:76:a4:2f:f4:40:52:e2:5c:ca:e5:d5:db:1c:01:6d:e5:
         7e:35:ba:fb:4e:f9:3b:a9:0d:bd:42:d5:58:ac:f5:1f:1c:e9:
         33:4f:50:35:92:e0:5f:74:a5:15:f7:7c:00:14:65:d4:a1:5c:
         71:e8:dd:8c:a0:a9:18:43:8a:84:87:24:a9:d1:c4:72:85:86:
         f2:c5:fd:ed
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCD4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REI3MzVBRjExMC8GA1UEBRMoM0I2OTQwMjM3NzhEQkY2MTRGNkJDNjUzNjQ0NjI3
MEZEMUJCODMyMTAeFw0yNDExMjIwMDU2NTZaFw0yNDExMjQwMDU2NTZaMBgxFjAU
BgNVBAMTDTY3M2ZkNmQ4LTA3NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXeJiVgqT9rJ6xIkea4zGXZDjeZtsUVOWqW2ux2er6PdgF8qHqw0eQ/sAO
DHrCEqE5cVUncPr6LGT98Pf431OABzIbXV3gKv57vz5PS1xps2sGYQNHYGSwXymD
KFOkEEPq5s7Opl1jVwlNLucHjtp9OBDbqToteqMxKg9OPDwP63Tyg7oqWRYNOOWd
EqgKGXH+3oHp1mCyMi84xLaBojXniDHR702/DVti7Y42FXVfY76nRkXFpvh554ZA
8QmxuuJS+DWnsXeerR5Y3YaN8k4Kq7wl4gGqGQan7goTFftv4OYYBeBivL3eiU33
QJpydTk1Fat8h09lrfB786mj0SJHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBOUO
TVl9OFbldnWDeZ54alhgsf8wHwYDVR0jBBgwFoAUO2lAI3eNv2FPa8ZTZEYnD9G7
gyEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCNzM1LzRDNTFCNzcwNTdBMjExRTk5NURCQjI3M0Y4QUVBMjI4L08ybEFJ
M2VOdjJGUGE4WlRaRVluRDlHN2d5RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL08ybEFJM2VOdjJGUGE4WlRaRVluRDlHN2d5RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REI3MzUvNEM1MUI3NzA1N0EyMTFFOTk1REJCMjczRjhB
RUEyMjgvTzJsQUkzZU52MkZQYThaVFpFWW5EOUc3Z3lFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEUdCTRiNQwuB+8JgQGcW6lM2LRVIc
3r1Uqia3gul4MIMKVoN2AsSYIpi2QW6qDdyMB0W+MEAXjHBzo9zrFsZhfq8s/BO0
7TY3tVuTl2C0K3slTgJ9ezKgWornI1Rl+jUb4NMNqmw/tzoichLSmkI+MKrCCMtq
OlclMjeffRkRp6zRbbfLAycW6K6xCqB2COAbt79hZyxLRqGmUgikavEjk/BIhmUf
hJjl3eFCL/fCxjyT/zHbUHakL/RAUuJcyuXV2xwBbeV+Nbr7Tvk7qQ29QtVYrPUf
HOkzT1A1kuBfdKUV93wAFGXUoVxx6N2MoKkYQ4qEhySp0cRyhYbyxf3t
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:18 2024 by rpki-client on console-fra.rpki-client.org