Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
File:                     M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft (raw, json)
Hash identifier:          QXJtWarwmmLPBKAnbrjjL830Gbx1wQWR+Yk3yr1dV9g=
Subject key identifier:   F5:70:E0:C1:41:D7:3E:A5:94:8D:E0:94:A2:35:88:37:8E:BD:26:96
Authority key identifier: 33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92
Certificate issuer:       /CN=F36E4CC6AF/serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
Certificate serial:       DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
Manifest number:          DB
Signing time:             Fri 22 Nov 2024 02:43:35 +0000
Manifest this update:     Fri 22 Nov 2024 02:43:35 +0000
Manifest next update:     Sun 24 Nov 2024 02:43:35 +0000
Files and hashes:         1: M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl (hash: EPZ3RmZqtAj+J8mJnJ0JtsGpsbRaRoX95hrjEI13b7Y=)
                          2: C0E88DD6025E11EFB5BAAD30017001B1.roa (hash: DJWXY1V0N/SZP8fVnsyyzg0SRQs5AOjIUrDn4upoYrc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4CC6AF/serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
        Validity
            Not Before: Nov 22 02:43:35 2024 GMT
            Not After : Nov 24 02:43:35 2024 GMT
        Subject: CN=673fefd7-e0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:c5:6b:fd:11:c8:0b:d7:ab:bb:ae:8e:db:
                    de:67:75:51:9f:56:20:5a:19:3f:0e:d5:18:27:c0:
                    24:69:b0:db:72:13:7f:fa:66:dc:48:9f:0f:90:40:
                    ea:3c:a3:a0:e2:e9:c1:ec:9f:fe:51:3a:48:38:68:
                    85:11:fd:25:6d:df:43:38:10:72:ba:78:54:f7:1b:
                    31:1e:28:dd:be:aa:f1:6b:7c:9d:aa:ef:41:9d:b6:
                    42:01:79:6e:89:41:d9:86:d9:79:09:20:32:43:bd:
                    ac:64:0d:6d:16:60:21:bd:34:0a:d5:ba:fd:84:23:
                    1a:48:12:cd:f7:c0:60:40:b6:8f:db:92:0b:1e:cd:
                    f2:5d:b1:ad:d2:d8:ec:f4:8f:f0:48:de:1d:cd:f7:
                    81:dc:25:8b:f6:c0:78:b6:8f:7f:d0:9a:17:23:bf:
                    08:9b:e1:1f:c3:f6:ee:e1:16:3f:6b:f2:af:1c:8f:
                    f5:9e:0e:95:5f:a2:fc:a7:be:1f:4c:e8:dc:17:d0:
                    37:53:d8:33:3e:de:aa:e0:dd:64:7d:3f:d0:33:d0:
                    50:5f:79:48:2e:9c:9d:13:74:b6:a0:8c:fc:84:9b:
                    a0:6d:a3:ab:3d:05:df:95:68:63:39:9b:f1:7b:6f:
                    46:fe:af:26:83:65:6f:a7:a7:7e:55:08:57:d1:0e:
                    45:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:70:E0:C1:41:D7:3E:A5:94:8D:E0:94:A2:35:88:37:8E:BD:26:96
            X509v3 Authority Key Identifier:
                keyid:33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:ae:b7:51:fd:6f:4a:35:77:e2:ba:91:8c:a6:52:97:05:3c:
         80:e9:59:b5:fb:d4:83:be:e2:df:c7:44:a2:d1:bd:c2:8d:27:
         c0:0c:af:70:d5:94:9c:6d:ac:11:d5:ef:d7:d5:9c:20:53:cc:
         3e:ba:e6:24:ea:15:df:01:1b:e4:19:4a:3c:05:fe:4b:4d:93:
         d8:69:c8:89:d3:a6:80:c2:cb:e7:17:fd:55:ea:ac:5d:f5:09:
         7a:c1:fd:29:f8:69:81:7b:b1:24:be:a4:43:08:ca:7c:ff:ab:
         a6:89:5d:95:ce:ab:ee:fb:8b:c0:5a:4e:97:9e:9d:ae:37:0b:
         f9:78:8a:82:22:70:04:24:d2:18:30:09:56:39:6a:94:72:6a:
         b3:9d:41:63:e8:e2:25:ab:f1:94:c5:a2:ab:25:31:13:78:bf:
         bf:6e:3a:81:0d:75:af:bd:73:f5:0a:15:4f:34:e9:25:fb:fe:
         7c:fd:3d:76:07:67:7b:b7:c2:6e:b7:08:14:1a:91:10:ab:c5:
         94:b1:7e:f6:db:e5:fc:d3:57:4b:da:73:32:2b:e4:2c:80:e7:
         61:79:59:05:5d:3b:c2:c0:ba:13:51:91:a7:cf:54:c7:55:65:
         74:69:1c:44:53:c3:fc:bd:b3:ef:4e:09:84:f3:8d:df:cd:f3:
         53:67:38:1e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICANwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTRDQzZBRjExMC8GA1UEBRMoMzM5NERGNzAxOTIzNDQzQzVGOThGMDNEQjdGRjA1
NzNBRUI3NjQ5MjAeFw0yNDExMjIwMjQzMzVaFw0yNDExMjQwMjQzMzVaMBgxFjAU
BgNVBAMTDTY3M2ZlZmQ3LWUwYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyp8Vr/RHIC9eru66O295ndVGfViBaGT8O1RgnwCRpsNtyE3/6ZtxInw+Q
QOo8o6Di6cHsn/5ROkg4aIUR/SVt30M4EHK6eFT3GzEeKN2+qvFrfJ2q70GdtkIB
eW6JQdmG2XkJIDJDvaxkDW0WYCG9NArVuv2EIxpIEs33wGBAto/bkgsezfJdsa3S
2Oz0j/BI3h3N94HcJYv2wHi2j3/Qmhcjvwib4R/D9u7hFj9r8q8cj/WeDpVfovyn
vh9M6NwX0DdT2DM+3qrg3WR9P9Az0FBfeUgunJ0TdLagjPyEm6Bto6s9Bd+VaGM5
m/F7b0b+ryaDZW+np35VCFfRDkXrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU9XDg
wUHXPqWUjeCUojWIN469JpYwHwYDVR0jBBgwFoAUM5TfcBkjRDxfmPA9t/8Fc663
ZJIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU0Q0M2LzNGQkZDRTJFMDI1NzExRUY4OTM1NTdGNDAwNzAwMUIxL001VGZj
QmtqUkR4Zm1QQTl0XzhGYzY2M1pKSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL001VGZjQmtqUkR4Zm1QQTl0XzhGYzY2M1pKSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTRDQzYvM0ZCRkNFMkUwMjU3MTFFRjg5MzU1N0Y0MDA3
MDAxQjEvTTVUZmNCa2pSRHhmbVBBOXRfOEZjNjYzWkpJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/rrdR/W9KNXfiupGMplKXBTyA6Vm1
+9SDvuLfx0Si0b3CjSfADK9w1ZScbawR1e/X1ZwgU8w+uuYk6hXfARvkGUo8Bf5L
TZPYaciJ06aAwsvnF/1V6qxd9Ql6wf0p+GmBe7EkvqRDCMp8/6umiV2Vzqvu+4vA
Wk6Xnp2uNwv5eIqCInAEJNIYMAlWOWqUcmqznUFj6OIlq/GUxaKrJTETeL+/bjqB
DXWvvXP1ChVPNOkl+/58/T12B2d7t8JutwgUGpEQq8WUsX722+X801dL2nMyK+Qs
gOdheVkFXTvCwLoTUZGnz1THVWV0aRxEU8P8vbPvTgmE843fzfNTZzge
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:00 2024 by rpki-client on console-fra.rpki-client.org