Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
File:                     Peh56gnhe4ORxyjbem-nsnOQS3o.mft (raw, json)
Hash identifier:          JgKOJc0ranoi8e6NMTK0nZJBCg8pfY8Xu+DW7ep3usU=
Subject key identifier:   84:9E:C8:82:81:75:56:1A:28:E4:68:95:EF:3E:3C:80:9F:BC:11:F6
Authority key identifier: 3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A
Certificate issuer:       /CN=F36E6D28AF/serialNumber=3DE879EA09E17B8391C728DB7A6FA7B273904B7A
Certificate serial:       0417
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
Manifest number:          0416
Signing time:             Thu 02 May 2024 01:29:50 +0000
Manifest this update:     Thu 02 May 2024 01:29:49 +0000
Manifest next update:     Sat 04 May 2024 01:29:49 +0000
Files and hashes:         1: Peh56gnhe4ORxyjbem-nsnOQS3o.crl (hash: 7faS+Q9sPL7RghJvckYw4PC9zVPcWFSbmV9x8rs2BEQ=)
                          2: 4CA13A74EA1D11EBAEB1FE0BD8A014CE.roa (hash: sIG4V1gL0C8GEyce4Zp/c68CcXuUBRgl5avwx6jTy/M=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6D28AF/serialNumber=3DE879EA09E17B8391C728DB7A6FA7B273904B7A
        Validity
            Not Before: May  2 01:29:49 2024 GMT
            Not After : May  4 01:29:49 2024 GMT
        Subject: CN=6632ec8d-142c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:79:43:01:f7:69:98:be:e1:da:89:54:66:
                    9c:59:6c:f2:a8:8e:9b:42:40:ef:1e:1a:18:bc:f1:
                    82:55:36:ee:10:bd:fe:51:22:d5:51:1c:20:74:c3:
                    9a:38:f6:63:06:50:1c:6e:96:1f:48:5b:60:48:74:
                    ae:6a:c7:52:f9:c1:04:f9:0f:ea:24:24:a9:a8:17:
                    75:60:c4:3f:b2:80:80:f6:c4:4c:b9:88:d5:d3:7c:
                    e1:71:1e:15:18:43:98:d1:48:64:a5:6e:46:e0:f8:
                    e8:2f:54:14:87:2a:d9:76:30:8c:06:72:a1:b0:1c:
                    07:99:18:d2:8d:f2:8e:00:2b:a4:20:d0:c6:1a:7a:
                    d0:69:27:1b:af:01:a2:de:25:c9:fe:69:84:1d:b5:
                    0e:ca:9a:57:41:e9:44:05:00:93:fa:ca:10:58:3c:
                    da:21:50:fd:83:f3:61:01:ed:f5:c8:58:b1:af:ff:
                    5a:cf:54:ca:c3:30:db:3f:fd:e5:5c:2d:4f:6f:7a:
                    53:f6:36:8c:9c:9b:86:8d:71:a9:55:18:d7:e7:23:
                    56:b0:8c:63:cd:0d:82:18:bf:19:25:89:05:56:4b:
                    c6:f7:d9:4b:10:d1:bf:8a:63:24:80:a6:71:19:51:
                    05:19:89:bc:75:89:1b:44:fa:2d:69:59:3c:9b:1d:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9E:C8:82:81:75:56:1A:28:E4:68:95:EF:3E:3C:80:9F:BC:11:F6
            X509v3 Authority Key Identifier:
                keyid:3D:E8:79:EA:09:E1:7B:83:91:C7:28:DB:7A:6F:A7:B2:73:90:4B:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Peh56gnhe4ORxyjbem-nsnOQS3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6D28/0192A7F2EA1D11EBB8B69A0BD8A014CE/Peh56gnhe4ORxyjbem-nsnOQS3o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ec:7c:27:eb:de:a1:db:fe:92:81:44:35:59:53:7a:ab:73:
         ce:09:e0:a8:f0:81:97:d7:d5:48:20:36:40:9a:24:46:67:a5:
         72:27:49:90:6a:c8:ed:f3:17:66:f2:94:ee:75:30:77:41:81:
         dd:b7:3e:86:c0:18:a4:fb:40:78:3d:f9:d3:9d:9c:de:2f:5b:
         1f:02:9a:96:c7:c4:16:7f:1d:43:c6:dc:69:63:c9:ed:bb:fb:
         61:ad:84:b3:04:26:41:6b:5c:cd:ee:66:5c:c1:c9:80:f0:f6:
         7a:9a:8d:07:5e:66:7e:57:e2:b0:b6:e7:52:d0:44:ad:67:ce:
         cb:2d:8a:0e:87:46:a1:e7:b4:76:32:f7:e5:56:9d:1f:46:62:
         b8:ef:8b:28:f8:d0:e4:02:bd:5a:7a:c4:0e:b0:c3:91:ca:28:
         91:fb:14:43:75:c4:b8:2f:2f:46:f3:ba:ea:05:67:8b:ff:da:
         72:2c:d1:02:70:d6:40:1d:13:8a:d8:fe:72:d4:18:c2:87:1d:
         c5:08:4f:71:e6:60:e4:2a:fa:f5:8c:47:f2:52:46:d9:03:be:
         51:d2:dd:9c:28:2e:4b:61:ea:83:a9:49:de:1c:35:29:cb:99:
         d9:aa:ca:88:d0:2d:97:5d:3c:c3:e8:a2:c4:46:be:42:64:03:
         65:33:e9:e4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTZEMjhBRjExMC8GA1UEBRMoM0RFODc5RUEwOUUxN0I4MzkxQzcyOERCN0E2RkE3
QjI3MzkwNEI3QTAeFw0yNDA1MDIwMTI5NDlaFw0yNDA1MDQwMTI5NDlaMBgxFjAU
BgNVBAMTDTY2MzJlYzhkLTE0MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjKnlDAfdpmL7h2olUZpxZbPKojptCQO8eGhi88YJVNu4Qvf5RItVRHCB0
w5o49mMGUBxulh9IW2BIdK5qx1L5wQT5D+okJKmoF3VgxD+ygID2xEy5iNXTfOFx
HhUYQ5jRSGSlbkbg+OgvVBSHKtl2MIwGcqGwHAeZGNKN8o4AK6Qg0MYaetBpJxuv
AaLeJcn+aYQdtQ7KmldB6UQFAJP6yhBYPNohUP2D82EB7fXIWLGv/1rPVMrDMNs/
/eVcLU9velP2Noycm4aNcalVGNfnI1awjGPNDYIYvxkliQVWS8b32UsQ0b+KYySA
pnEZUQUZibx1iRtE+i1pWTybHQDJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhJ7I
goF1Vhoo5GiV7z48gJ+8EfYwHwYDVR0jBBgwFoAUPeh56gnhe4ORxyjbem+nsnOQ
S3owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU2RDI4LzAxOTJBN0YyRUExRDExRUJCOEI2OUEwQkQ4QTAxNENFL1BlaDU2
Z25oZTRPUnh5amJlbS1uc25PUVMzby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BlaDU2Z25oZTRPUnh5amJlbS1uc25PUVMzby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTZEMjgvMDE5MkE3RjJFQTFEMTFFQkI4QjY5QTBCRDhB
MDE0Q0UvUGVoNTZnbmhlNE9SeHlqYmVtLW5zbk9RUzNvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBh7Hwn696h2/6SgUQ1WVN6q3POCeCo
8IGX19VIIDZAmiRGZ6VyJ0mQasjt8xdm8pTudTB3QYHdtz6GwBik+0B4PfnTnZze
L1sfApqWx8QWfx1DxtxpY8ntu/thrYSzBCZBa1zN7mZcwcmA8PZ6mo0HXmZ+V+Kw
tudS0EStZ87LLYoOh0ah57R2MvflVp0fRmK474so+NDkAr1aesQOsMORyiiR+xRD
dcS4Ly9G87rqBWeL/9pyLNECcNZAHROK2P5y1BjChx3FCE9x5mDkKvr1jEfyUkbZ
A75R0t2cKC5LYeqDqUneHDUpy5nZqsqI0C2XXTzD6KLERr5CZANlM+nk
-----END CERTIFICATE-----
Generated at Thu May 2 03:12:52 2024 by rpki-client on console-ams.rpki-client.org