Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
File:                     xSvyehTUxJuqAvCZWQ287LDgS5c.mft (raw, json)
Hash identifier:          0amjUQXlgr+LAEQzKNe52kBZoxQgCWkiSclJJjeofLg=
Subject key identifier:   51:CE:DD:AF:AE:CE:66:17:E9:DA:29:8B:83:1F:8A:29:D7:82:2F:39
Authority key identifier: C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
Certificate issuer:       /CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Certificate serial:       01FC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
Manifest number:          01FB
Signing time:             Tue 07 May 2024 02:04:08 +0000
Manifest this update:     Tue 07 May 2024 02:04:07 +0000
Manifest next update:     Thu 09 May 2024 02:04:07 +0000
Files and hashes:         1: xSvyehTUxJuqAvCZWQ287LDgS5c.crl (hash: bA/WFAVg8zY2Mz5l6RLt0isVijWfrPqtlhOZf40+DDw=)
                          2: DC60099290ED11EDA023F07CF1222468.roa (hash: 9KneDc8AxCXKlLKwihUlSkgU/m9aNJKS4oxTHOBZ0ns=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                          rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
        Validity
            Not Before: May  7 02:04:07 2024 GMT
            Not After : May  9 02:04:07 2024 GMT
        Subject: CN=66398c18-3f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:73:b8:7b:cb:69:f3:e6:79:b0:93:6b:b0:
                    fa:e0:7f:a0:36:a5:1f:0f:1b:23:1b:8c:91:62:2b:
                    f1:21:b3:f4:ef:80:1a:19:dc:80:98:80:d1:ed:36:
                    eb:1e:65:58:b9:c2:86:0d:ea:46:50:28:09:bd:60:
                    46:a9:a8:1e:7a:fe:99:5b:43:2e:5c:b7:10:67:40:
                    4a:15:67:ad:bf:b5:db:25:0a:bf:cc:95:bc:0f:fa:
                    ec:ba:62:aa:de:7e:1b:2f:3a:99:b9:90:c7:98:15:
                    98:47:c2:44:d4:43:f4:db:e6:9c:c4:cb:15:cd:cc:
                    84:11:7d:af:97:71:d4:03:92:2c:a4:e8:3f:0e:54:
                    b4:7d:1c:8e:13:5c:5c:1c:82:70:2c:53:70:b1:56:
                    65:2b:10:ca:9e:24:a8:07:ca:92:09:71:b6:77:c9:
                    51:80:af:29:2b:7e:b9:89:05:fc:6b:51:21:ac:d6:
                    14:b7:c5:ab:f7:eb:5a:74:35:c6:37:ae:1e:04:6b:
                    2d:39:37:f9:60:2a:44:0a:d9:0d:1c:5c:0b:70:89:
                    9d:e6:34:da:41:53:02:35:7b:a2:53:ad:23:4e:7d:
                    4d:f7:7f:69:03:ed:11:da:d8:99:ca:67:ae:67:64:
                    8c:bc:3f:11:89:1a:5d:ce:54:18:5b:84:ae:49:e1:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CE:DD:AF:AE:CE:66:17:E9:DA:29:8B:83:1F:8A:29:D7:82:2F:39
            X509v3 Authority Key Identifier:
                keyid:C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f6:14:7e:b7:3d:47:50:7c:1f:3f:e6:52:aa:d9:6e:58:2c:
         80:e6:e6:d0:23:89:a3:90:6e:1b:df:27:10:24:a1:8c:60:28:
         b5:08:91:b4:a5:36:ca:de:ac:ce:7b:df:d9:e4:19:70:93:5a:
         17:41:e8:8d:69:90:90:cf:5a:ec:3e:29:94:8a:5f:fe:d2:60:
         2f:a5:32:8c:82:cd:ce:de:0a:51:fe:42:47:85:5f:fd:21:0d:
         13:81:3c:a9:12:9d:de:41:3d:49:f6:88:76:e4:1b:e2:ac:a3:
         83:0d:22:4c:9b:72:11:7c:77:8e:9c:bc:c0:6f:6e:e5:ba:45:
         48:94:df:49:23:e6:e6:13:3a:14:82:93:48:1f:22:d9:91:aa:
         56:1a:3a:c7:5e:d1:f9:1f:80:2c:64:c8:83:39:3f:cb:fa:51:
         a4:d3:04:0d:46:1c:30:1f:a0:8f:a7:43:63:a3:33:aa:9b:ee:
         62:f3:24:f9:39:59:e4:b8:ca:62:70:e5:3c:a3:cb:e6:bb:a9:
         52:23:3f:cc:b2:34:cb:fe:55:3c:3c:9f:c5:bc:8f:8d:63:ba:
         a5:a5:16:6f:2a:04:b7:79:35:74:08:53:7d:c9:47:0d:5c:d3:
         79:9a:21:ce:57:3f:47:d6:43:af:74:69:0b:a0:97:57:f7:f0:
         8d:27:b3:83
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTg5MzZBUjExMC8GA1UEBRMoQzUyQkYyN0ExNEQ0QzQ5QkFBMDJGMDk5NTkwREJD
RUNCMEUwNEI5NzAeFw0yNDA1MDcwMjA0MDdaFw0yNDA1MDkwMjA0MDdaMBgxFjAU
BgNVBAMTDTY2Mzk4YzE4LTNmNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDB9HO4e8tp8+Z5sJNrsPrgf6A2pR8PGyMbjJFiK/Ehs/TvgBoZ3ICYgNHt
NuseZVi5woYN6kZQKAm9YEapqB56/plbQy5ctxBnQEoVZ62/tdslCr/MlbwP+uy6
YqrefhsvOpm5kMeYFZhHwkTUQ/Tb5pzEyxXNzIQRfa+XcdQDkiyk6D8OVLR9HI4T
XFwcgnAsU3CxVmUrEMqeJKgHypIJcbZ3yVGArykrfrmJBfxrUSGs1hS3xav361p0
NcY3rh4Eay05N/lgKkQK2Q0cXAtwiZ3mNNpBUwI1e6JTrSNOfU33f2kD7RHa2JnK
Z65nZIy8PxGJGl3OVBhbhK5J4Y6hAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUUc7d
r67OZhfp2imLgx+KKdeCLzkwHwYDVR0jBBgwFoAUxSvyehTUxJuqAvCZWQ287LDg
S5cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU4OTM2LzkxQjQ4RDA2OTBFQzExRURBOUUzNDJGOEYxMjIyNDY4L3hTdnll
aFRVeEp1cUF2Q1pXUTI4N0xEZ1M1Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hTdnllaFRVeEp1cUF2Q1pXUTI4N0xEZ1M1Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RTg5MzYvOTFCNDhEMDY5MEVDMTFFREE5RTM0MkY4RjEyMjI0
NjgveFN2eWVoVFV4SnVxQXZDWldRMjg3TERnUzVjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCu9hR+tz1HUHwfP+ZSqtluWCyA5ubQI4mj
kG4b3ycQJKGMYCi1CJG0pTbK3qzOe9/Z5Blwk1oXQeiNaZCQz1rsPimUil/+0mAv
pTKMgs3O3gpR/kJHhV/9IQ0TgTypEp3eQT1J9oh25BvirKODDSJMm3IRfHeOnLzA
b27lukVIlN9JI+bmEzoUgpNIHyLZkapWGjrHXtH5H4AsZMiDOT/L+lGk0wQNRhww
H6CPp0NjozOqm+5i8yT5OVnkuMpicOU8o8vmu6lSIz/MsjTL/lU8PJ/FvI+NY7ql
pRZvKgS3eTV0CFN9yUcNXNN5miHOVz9H1kOvdGkLoJdX9/CNJ7OD
-----END CERTIFICATE-----
Generated at Tue May 7 03:12:15 2024 by rpki-client on console-fra.rpki-client.org