Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
File:                     ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft (raw, json)
Hash identifier:          /qLZLsCRyjp/wkqFgixsXIZcfYWsQo4Of3fqmIC5xDE=
Subject key identifier:   48:99:7A:A3:65:88:C2:F7:03:E0:C3:35:CC:E2:E2:1A:6A:68:58:1D
Authority key identifier: 64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41
Certificate issuer:       /CN=F36E3530AF/serialNumber=64E48B75E21674F86D4E6B5F42369A7A73BE2541
Certificate serial:       2A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
Manifest number:          2A
Signing time:             Tue 28 May 2024 02:42:38 +0000
Manifest this update:     Tue 28 May 2024 02:42:37 +0000
Manifest next update:     Thu 30 May 2024 02:42:37 +0000
Files and hashes:         1: ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl (hash: r+kDdC8pGTpFOrwJ8fSxLPUP1nICzStc/HC8gIgNcKE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 May 2024 00:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3530AF/serialNumber=64E48B75E21674F86D4E6B5F42369A7A73BE2541
        Validity
            Not Before: May 28 02:42:37 2024 GMT
            Not After : May 30 02:42:37 2024 GMT
        Subject: CN=6655449e-370c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:e7:83:e9:3d:91:8f:f4:9d:16:1b:2a:58:
                    31:3a:91:52:78:d3:4e:5e:77:34:75:25:bd:05:22:
                    a7:13:b5:dc:0b:36:57:ee:dd:30:0f:ec:dc:30:f5:
                    bd:1b:f0:47:47:01:4b:5a:0e:04:b2:81:9e:f5:4c:
                    82:06:6e:89:c0:ce:c8:1f:a6:31:3b:0d:18:cd:18:
                    9f:78:55:68:25:46:30:0c:5d:13:18:09:d3:6a:6f:
                    1e:c8:0a:37:c1:f4:3c:0f:17:31:d3:e9:4f:7e:47:
                    c5:83:6b:2d:38:fb:08:ff:2c:c5:5d:fb:0e:f3:6d:
                    77:89:bc:b5:e1:32:85:58:77:b7:20:cb:76:fd:e4:
                    ae:cd:82:17:f0:00:e2:50:e1:f0:94:fb:3e:a1:ad:
                    56:b4:bf:f5:fd:d7:65:ce:03:cc:fe:a8:a1:e3:77:
                    17:fc:a1:b0:db:9d:53:6a:35:af:82:6d:a7:15:dc:
                    81:e2:41:06:de:4a:db:91:7d:9e:05:f5:b8:14:98:
                    a9:25:96:ae:dc:4f:dc:4d:e3:e3:2d:5e:22:8d:4d:
                    68:c3:7c:c8:ab:3b:8b:64:c4:bb:5c:d7:d1:4e:9e:
                    1f:71:90:95:ec:b8:f6:e2:c3:2f:c8:01:ae:e9:50:
                    6c:41:2e:a4:f8:c8:24:b0:c0:0d:86:98:33:c2:57:
                    c0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:99:7A:A3:65:88:C2:F7:03:E0:C3:35:CC:E2:E2:1A:6A:68:58:1D
            X509v3 Authority Key Identifier:
                keyid:64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d9:66:ef:5e:35:ee:48:51:73:2a:ee:fc:2f:f2:c2:38:c9:
         5e:82:8b:07:13:09:1a:7f:6e:71:d9:fa:01:38:0f:49:1d:a5:
         3e:da:70:4f:13:4d:1c:1e:4d:42:7b:05:d3:74:a5:d7:c1:c0:
         9d:6a:16:f8:b6:63:d9:ca:7a:98:26:84:2f:d5:5d:ac:52:61:
         ae:ef:57:ec:60:e0:70:75:c2:40:4b:4a:58:a9:30:58:fe:d3:
         47:1c:ca:41:16:9b:a1:68:c5:c7:e7:6e:4f:86:40:c8:67:15:
         b8:40:6a:5c:9c:33:2a:78:f9:ec:d3:2d:3d:05:03:06:1c:b2:
         ac:4f:93:31:29:7c:0f:7b:ee:ea:39:2e:f4:38:bc:95:d1:91:
         fc:53:3b:a2:a1:12:5a:d5:4d:b5:2a:33:a5:b8:68:46:c9:b5:
         7a:87:51:37:a4:3f:25:c5:05:9e:d4:74:50:e4:9d:2f:4a:c0:
         a6:02:d8:9d:bb:f9:18:cb:67:02:3b:88:1b:84:e2:ad:90:66:
         b1:80:df:1e:68:7c:d3:ca:3b:53:bd:d0:8c:9b:27:e6:fe:08:
         f9:8c:71:64:f3:7d:17:26:69:4d:52:64:1e:05:44:5e:53:43:
         ae:28:77:5a:7e:8e:46:a3:29:0a:71:4c:06:29:ba:63:ac:a6:
         79:ad:2f:22
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBKjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
MzUzMEFGMTEwLwYDVQQFEyg2NEU0OEI3NUUyMTY3NEY4NkQ0RTZCNUY0MjM2OUE3
QTczQkUyNTQxMB4XDTI0MDUyODAyNDIzN1oXDTI0MDUzMDAyNDIzN1owGDEWMBQG
A1UEAxMNNjY1NTQ0OWUtMzcwYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMg254PpPZGP9J0WGypYMTqRUnjTTl53NHUlvQUipxO13As2V+7dMA/s3DD1
vRvwR0cBS1oOBLKBnvVMggZuicDOyB+mMTsNGM0Yn3hVaCVGMAxdExgJ02pvHsgK
N8H0PA8XMdPpT35HxYNrLTj7CP8sxV37DvNtd4m8teEyhVh3tyDLdv3krs2CF/AA
4lDh8JT7PqGtVrS/9f3XZc4DzP6ooeN3F/yhsNudU2o1r4JtpxXcgeJBBt5K25F9
ngX1uBSYqSWWrtxP3E3j4y1eIo1NaMN8yKs7i2TEu1zX0U6eH3GQley49uLDL8gB
rulQbEEupPjIJLDADYaYM8JXwPcCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRImXqj
ZYjC9wPgwzXM4uIaamhYHTAfBgNVHSMEGDAWgBRk5It14hZ0+G1Oa19CNpp6c74l
QTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTM1MzAvNjQwNTFGNjZGREFBMTFFRUI4RDQ3ODU1MDE3MDAxQjEvWk9TTGRl
SVdkUGh0VG10ZlFqYWFlbk8tSlVFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWk9TTGRlSVdkUGh0VG10ZlFqYWFlbk8tSlVFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZFMzUzMC82NDA1MUY2NkZEQUExMUVFQjhENDc4NTUwMTcw
MDFCMS9aT1NMZGVJV2RQaHRUbXRmUWphYWVuTy1KVUUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKDZZu9eNe5IUXMq7vwv8sI4yV6CiwcT
CRp/bnHZ+gE4D0kdpT7acE8TTRweTUJ7BdN0pdfBwJ1qFvi2Y9nKepgmhC/VXaxS
Ya7vV+xg4HB1wkBLSlipMFj+00ccykEWm6Foxcfnbk+GQMhnFbhAalycMyp4+ezT
LT0FAwYcsqxPkzEpfA977uo5LvQ4vJXRkfxTO6KhElrVTbUqM6W4aEbJtXqHUTek
PyXFBZ7UdFDknS9KwKYC2J27+RjLZwI7iBuE4q2QZrGA3x5ofNPKO1O90IybJ+b+
CPmMcWTzfRcmaU1SZB4FRF5TQ64od1p+jkajKQpxTAYpumOspnmtLyI=
-----END CERTIFICATE-----