Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
File:                     tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft (raw, json)
Hash identifier:          WgtQeGFM7W1kTHyXLCECzoUsQXk8tL/sPWyfK683NjQ=
Subject key identifier:   D5:4E:82:6D:14:75:A0:AD:0A:C3:00:97:B2:0C:0D:43:C9:A9:51:D5
Authority key identifier: B5:C7:42:46:EE:5E:3C:8F:A9:99:84:1D:DC:44:36:53:F8:54:BA:7D
Certificate issuer:       /CN=F36E75A9AF/serialNumber=B5C74246EE5E3C8FA999841DDC443653F854BA7D
Certificate serial:       71
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
Manifest number:          70
Signing time:             Sun 19 May 2024 02:31:03 +0000
Manifest this update:     Sun 19 May 2024 02:31:03 +0000
Manifest next update:     Tue 21 May 2024 02:31:03 +0000
Files and hashes:         1: tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl (hash: 4iBWhSOivxQRdHH1uEPtOQgbTp8O4uC7QCPkbwgBEUo=)
                          2: A95C3E7CC46711EE9DAAFFA7775412E6.roa (hash: 5YGMUo45vZOEsVw7rxMl98qm2QPWhnBn5cPNqxBly50=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E75A9AF/serialNumber=B5C74246EE5E3C8FA999841DDC443653F854BA7D
        Validity
            Not Before: May 19 02:31:03 2024 GMT
            Not After : May 21 02:31:03 2024 GMT
        Subject: CN=66496467-cef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:87:aa:5f:d8:f1:be:39:c8:8b:21:59:f7:
                    bc:c0:80:53:92:d7:9b:a1:63:74:5e:fd:f8:fa:0a:
                    67:22:c5:0b:e6:ad:58:a4:c8:69:cd:ca:dd:df:a8:
                    16:52:45:3f:80:98:0c:36:50:09:21:ff:bd:07:c1:
                    07:b2:dd:de:ba:e2:3c:3f:e0:62:cf:d6:b3:e3:06:
                    49:e4:25:fb:da:3f:ac:64:7f:47:9c:cb:f0:62:eb:
                    07:6c:05:48:19:5b:ea:c1:3a:51:85:9f:cd:cf:90:
                    34:b3:47:af:b3:7a:06:f9:de:f4:7e:0e:96:27:c8:
                    5f:25:9f:20:4a:b3:14:3c:08:6c:42:2b:9e:a0:c3:
                    55:c2:6a:0b:02:6c:28:4c:be:48:20:48:dd:87:d2:
                    0d:49:c8:ae:e5:45:c2:52:32:e8:70:05:7d:e4:2e:
                    de:61:9a:05:a4:7f:05:65:f4:d9:c9:00:4d:ae:db:
                    35:e3:4b:de:a8:07:44:74:33:aa:2f:bb:14:85:60:
                    dc:68:3b:a2:62:63:b3:2e:34:0a:27:36:9d:48:c5:
                    ee:d2:73:dd:80:b2:0a:18:74:f3:0e:e9:93:43:7c:
                    85:fe:22:1c:b2:10:c1:a9:d9:64:6c:95:6d:58:11:
                    c7:22:6b:98:4b:4d:7f:f6:7f:73:bb:ef:27:62:86:
                    87:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4E:82:6D:14:75:A0:AD:0A:C3:00:97:B2:0C:0D:43:C9:A9:51:D5
            X509v3 Authority Key Identifier:
                keyid:B5:C7:42:46:EE:5E:3C:8F:A9:99:84:1D:DC:44:36:53:F8:54:BA:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f8:9a:dc:85:06:b6:c8:63:08:f3:59:2b:56:80:fa:25:de:
         46:37:d6:ed:4c:f3:82:72:02:48:78:d4:bf:34:4e:9a:89:0e:
         77:67:53:2d:d7:5b:b8:b8:82:3a:49:a9:2d:de:fd:05:61:a0:
         73:6f:52:05:48:19:41:3c:8f:8d:99:26:28:aa:8c:7e:8b:31:
         47:e5:10:98:44:5c:ab:2d:d4:64:9b:52:a3:10:24:60:93:1e:
         6b:38:39:b7:e3:4e:4f:89:64:9c:a9:a2:1f:9a:d5:9b:da:7a:
         b4:6d:9f:50:7f:32:9d:7a:3e:d6:9e:73:a7:4a:3d:f8:1c:a5:
         b0:80:40:8f:05:b5:9a:a3:8b:4d:db:98:6a:45:9b:a8:5d:28:
         1f:4d:81:7c:fe:69:ba:ed:f3:52:1e:62:0a:d8:86:3a:fc:81:
         9e:8c:37:51:7a:d8:11:7f:a8:44:19:c4:29:f8:d5:1b:f2:7d:
         86:e9:6e:9b:4c:c9:6c:51:6c:08:60:d5:b4:4f:97:3c:de:a1:
         28:a3:fa:52:f5:01:74:e9:d6:f5:64:e7:d8:cd:e4:18:85:e6:
         d9:97:56:36:e8:32:e0:bd:1b:c6:16:36:7b:03:44:40:a1:9d:
         2b:6f:ed:14:83:57:1f:de:0b:14:2a:89:a8:4a:a8:9c:1d:df:
         98:d9:b4:50
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBcTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
NzVBOUFGMTEwLwYDVQQFEyhCNUM3NDI0NkVFNUUzQzhGQTk5OTg0MUREQzQ0MzY1
M0Y4NTRCQTdEMB4XDTI0MDUxOTAyMzEwM1oXDTI0MDUyMTAyMzEwM1owGDEWMBQG
A1UEAxMNNjY0OTY0NjctY2VmOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALv4h6pf2PG+OciLIVn3vMCAU5LXm6FjdF79+PoKZyLFC+atWKTIac3K3d+o
FlJFP4CYDDZQCSH/vQfBB7Ld3rriPD/gYs/Ws+MGSeQl+9o/rGR/R5zL8GLrB2wF
SBlb6sE6UYWfzc+QNLNHr7N6Bvne9H4OlifIXyWfIEqzFDwIbEIrnqDDVcJqCwJs
KEy+SCBI3YfSDUnIruVFwlIy6HAFfeQu3mGaBaR/BWX02ckATa7bNeNL3qgHRHQz
qi+7FIVg3Gg7omJjsy40Cic2nUjF7tJz3YCyChh08w7pk0N8hf4iHLIQwanZZGyV
bVgRxyJrmEtNf/Z/c7vvJ2KGh58CAwEAAaOCArgwggK0MB0GA1UdDgQWBBTVToJt
FHWgrQrDAJeyDA1DyalR1TAfBgNVHSMEGDAWgBS1x0JG7l48j6mZhB3cRDZT+FS6
fTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RTc1QTkvNTU1MjAzNDBDNDA2MTFFRThGNEEyODhENzc1NDEyRTYvdGNkQ1J1
NWVQSS1wbVlRZDNFUTJVX2hVdW4wLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdGNkQ1J1NWVQSS1wbVlRZDNFUTJVX2hVdW4wLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZFNzVBOS81NTUyMDM0MEM0MDYxMUVFOEY0QTI4OEQ3NzU0
MTJFNi90Y2RDUnU1ZVBJLXBtWVFkM0VRMlVfaFV1bjAubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAHL4mtyFBrbIYwjzWStWgPol3kY31u1M
84JyAkh41L80TpqJDndnUy3XW7i4gjpJqS3e/QVhoHNvUgVIGUE8j42ZJiiqjH6L
MUflEJhEXKst1GSbUqMQJGCTHms4ObfjTk+JZJypoh+a1ZvaerRtn1B/Mp16Ptae
c6dKPfgcpbCAQI8FtZqji03bmGpFm6hdKB9NgXz+abrt81IeYgrYhjr8gZ6MN1F6
2BF/qEQZxCn41RvyfYbpbptMyWxRbAhg1bRPlzzeoSij+lL1AXTp1vVk59jN5BiF
5tmXVjboMuC9G8YWNnsDREChnStv7RSDVx/eCxQqiahKqJwd35jZtFA=
-----END CERTIFICATE-----
Generated at Sun May 19 03:38:12 2024 by rpki-client on console-ams.rpki-client.org