Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
File:                     mSzTGdelFaVjcylM4EkVP4w-AEs.mft (raw, json)
Hash identifier:          SqcuHvbRVs6HdXtcq4AO0s8HWtXJ2KPrdyegUcxGvWM=
Subject key identifier:   06:70:B4:F9:0A:0B:33:14:E1:BF:BA:F7:D0:3F:12:AD:63:62:94:56
Authority key identifier: 99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
Certificate issuer:       /CN=F36DD92BAF/serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
Certificate serial:       CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
Manifest number:          CD
Signing time:             Thu 21 Nov 2024 02:42:01 +0000
Manifest this update:     Thu 21 Nov 2024 02:42:01 +0000
Manifest next update:     Sat 23 Nov 2024 02:42:01 +0000
Files and hashes:         1: mSzTGdelFaVjcylM4EkVP4w-AEs.crl (hash: IolBXOU8LuAhcjvbPKeWLBaZsBXrfVstYPFFEWqr3tA=)
                          2: 6AE274920BBE11EF8A25040F017001B1.roa (hash: 5C1WjqwwGDR6D8+o0DVD1DCzkInrt9k6RbeLrYLWCSM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD92BAF/serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
        Validity
            Not Before: Nov 21 02:42:01 2024 GMT
            Not After : Nov 23 02:42:01 2024 GMT
        Subject: CN=673e9df9-d136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:8f:03:36:68:84:21:b0:58:4e:0b:d0:a9:
                    97:ab:29:c8:b1:21:7a:32:4a:9a:b4:9b:4a:88:89:
                    40:e5:d0:48:3b:32:36:34:ad:e6:23:dd:c2:49:79:
                    8a:11:4f:01:e0:83:7a:d0:69:82:ee:79:b0:b2:8b:
                    01:94:d3:33:e9:51:59:5c:75:a2:a1:c7:65:6f:d8:
                    7b:c3:22:09:48:25:ad:a8:b9:fb:68:06:29:f4:81:
                    31:80:fa:12:bd:ef:49:df:f7:dd:c3:0d:76:49:22:
                    dd:bb:f9:d2:09:41:91:44:35:d3:47:ac:b7:25:62:
                    59:47:4a:40:ae:61:fa:cd:a2:42:ab:d0:a1:00:1c:
                    ac:b6:e7:3a:3a:fa:23:3b:6f:80:6c:04:b6:2f:c7:
                    b9:16:31:e5:10:55:a9:25:3a:4b:c2:26:a0:c4:4b:
                    88:d6:6e:82:49:8e:a8:98:a5:bb:cf:1c:6f:59:ea:
                    75:dc:18:e2:04:96:55:3e:57:ae:9f:39:ec:3f:10:
                    c4:68:cb:84:60:1a:d6:3d:1f:df:cf:07:06:e6:ff:
                    96:0c:7b:33:d7:d0:12:46:22:bb:b6:63:6e:4b:17:
                    6c:11:36:77:8f:ab:fe:39:73:f9:b3:2f:7f:08:37:
                    12:c8:db:d9:bf:ec:b8:07:65:57:20:32:2e:89:fa:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:70:B4:F9:0A:0B:33:14:E1:BF:BA:F7:D0:3F:12:AD:63:62:94:56
            X509v3 Authority Key Identifier:
                keyid:99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:96:2c:04:74:a0:1e:fb:96:85:e6:f5:d4:9e:47:8e:ab:3e:
         68:a5:2d:7b:6d:17:5e:27:f1:e3:bf:0d:b8:72:91:66:db:b3:
         40:16:17:33:dc:ae:a9:e8:54:9c:99:d4:79:bf:b9:a4:c0:75:
         b0:ef:3b:e9:60:4b:a5:d2:3a:75:51:fa:4a:1c:25:4e:12:cf:
         ad:50:3e:38:e5:f0:1e:36:6c:c4:d7:85:48:ec:19:b6:07:13:
         ce:68:b5:03:50:62:9b:a5:cb:90:49:80:9e:1e:10:7e:ec:7f:
         a6:f8:0d:97:20:c8:66:49:84:81:89:d6:0f:2a:9c:38:f9:9e:
         37:c9:92:11:44:4c:47:0f:da:59:da:68:82:83:e3:30:57:45:
         e8:72:cb:f4:8c:6b:6f:40:a3:a0:f3:91:45:38:8c:94:cb:17:
         3c:e3:ce:30:6b:c1:fd:d6:b5:85:4f:5f:3e:ec:89:cd:b5:93:
         8d:70:36:5d:db:e0:fe:67:b9:c9:98:b8:a7:b6:50:d7:57:8b:
         da:39:ea:a6:d4:de:7d:f7:f5:af:22:fd:d3:9f:51:30:f9:36:
         26:6b:a9:81:9e:b0:da:a3:84:36:c0:42:0e:cb:d6:83:61:7a:
         27:72:16:69:68:cc:f9:89:06:a2:fc:cc:c7:e5:b6:54:ea:bc:
         46:46:18:fa
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REQ5MkJBRjExMC8GA1UEBRMoOTkyQ0QzMTlEN0E1MTVBNTYzNzMyOTRDRTA0OTE1
M0Y4QzNFMDA0QjAeFw0yNDExMjEwMjQyMDFaFw0yNDExMjMwMjQyMDFaMBgxFjAU
BgNVBAMTDTY3M2U5ZGY5LWQxMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4eo8DNmiEIbBYTgvQqZerKcixIXoySpq0m0qIiUDl0Eg7MjY0reYj3cJJ
eYoRTwHgg3rQaYLuebCyiwGU0zPpUVlcdaKhx2Vv2HvDIglIJa2ouftoBin0gTGA
+hK970nf993DDXZJIt27+dIJQZFENdNHrLclYllHSkCuYfrNokKr0KEAHKy25zo6
+iM7b4BsBLYvx7kWMeUQVaklOkvCJqDES4jWboJJjqiYpbvPHG9Z6nXcGOIEllU+
V66fOew/EMRoy4RgGtY9H9/PBwbm/5YMezPX0BJGIru2Y25LF2wRNnePq/45c/mz
L38INxLI29m/7LgHZVcgMi6J+vXHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBnC0
+QoLMxThv7r30D8SrWNilFYwHwYDVR0jBBgwFoAUmSzTGdelFaVjcylM4EkVP4w+
AEswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkREOTJCL0Y0RjRGM0VBMEJCRDExRUY4NjU1OTEwRDAxNzAwMUIxL21TelRH
ZGVsRmFWamN5bE00RWtWUDR3LUFFcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21TelRHZGVsRmFWamN5bE00RWtWUDR3LUFFcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REQ5MkIvRjRGNEYzRUEwQkJEMTFFRjg2NTU5MTBEMDE3
MDAxQjEvbVN6VEdkZWxGYVZqY3lsTTRFa1ZQNHctQUVzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuliwEdKAe+5aF5vXUnkeOqz5opS17
bRdeJ/Hjvw24cpFm27NAFhcz3K6p6FScmdR5v7mkwHWw7zvpYEul0jp1UfpKHCVO
Es+tUD445fAeNmzE14VI7Bm2BxPOaLUDUGKbpcuQSYCeHhB+7H+m+A2XIMhmSYSB
idYPKpw4+Z43yZIRRExHD9pZ2miCg+MwV0Xocsv0jGtvQKOg85FFOIyUyxc8484w
a8H91rWFT18+7InNtZONcDZd2+D+Z7nJmLintlDXV4vaOeqm1N599/WvIv3Tn1Ew
+TYma6mBnrDao4Q2wEIOy9aDYXonchZpaMz5iQai/MzH5bZU6rxGRhj6
-----END CERTIFICATE-----