Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
File:                     -fFqivVlH4qYTwMxRWULP55dioY.mft (raw, json)
Hash identifier:          vOw9oRMV7cUA7UaeryIPcSe/ESoILRBm1AWM4aLB/I8=
Subject key identifier:   24:9E:D8:A6:AD:79:F3:F4:5B:3F:FD:89:DF:20:66:1B:60:9D:2B:F9
Authority key identifier: F9:F1:6A:8A:F5:65:1F:8A:98:4F:03:31:45:65:0B:3F:9E:5D:8A:86
Certificate issuer:       /CN=F36EC460AF/serialNumber=F9F16A8AF5651F8A984F033145650B3F9E5D8A86
Certificate serial:       047C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
Manifest number:          047A
Signing time:             Sun 16 Feb 2025 02:00:39 +0000
Manifest this update:     Sun 16 Feb 2025 02:00:38 +0000
Manifest next update:     Tue 18 Feb 2025 02:00:38 +0000
Files and hashes:         1: -fFqivVlH4qYTwMxRWULP55dioY.crl (hash: KGscyYWBmtaGt0+Up6PSda176/h9kK+/ojB2IKARQds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148 (0x47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC460AF
        Validity
            Not Before: Feb 16 02:00:38 2025 GMT
            Not After : Feb 18 02:00:38 2025 GMT
        Subject: CN=67b146c7-1c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d5:a8:65:7c:f8:c0:13:83:90:f0:68:38:d2:
                    d6:ce:ad:da:bc:d4:7a:71:f9:f0:22:01:e8:76:ed:
                    68:1f:86:db:80:9e:1a:09:99:6d:fb:29:df:39:ff:
                    ac:28:39:c0:2a:5e:01:26:2c:96:18:85:7b:63:39:
                    1a:cd:d7:2c:48:71:79:f8:c3:02:86:2d:2b:93:f9:
                    6b:41:d3:b1:d0:f1:e3:19:5a:42:c8:b8:a4:3a:3f:
                    78:e6:8e:8a:06:1c:e1:40:ba:d3:5a:68:79:74:b2:
                    b4:c7:01:bd:c9:e9:5c:6f:8d:06:5b:b5:23:e9:f3:
                    6f:10:b4:51:14:33:38:3c:20:f2:fa:b0:eb:97:89:
                    5f:0c:31:ca:ce:d6:7a:14:38:fa:45:68:eb:2e:7d:
                    2c:f4:64:91:3b:fd:8f:58:7a:90:84:59:65:23:29:
                    b9:ef:b9:de:8f:33:5d:f6:f0:26:36:97:ef:c9:72:
                    49:d0:06:fa:94:c3:47:a5:04:7e:d1:58:83:5f:f5:
                    f2:d0:8d:43:d8:9d:d3:84:f6:b4:c2:7d:9c:1a:6e:
                    cf:88:79:f7:5a:6d:0f:6a:a8:86:58:7c:ce:54:05:
                    83:34:40:42:12:6b:cb:08:d7:58:ff:48:ad:fc:a0:
                    cc:67:8c:5d:ae:5a:64:ed:13:c1:38:4d:8d:b1:c6:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9E:D8:A6:AD:79:F3:F4:5B:3F:FD:89:DF:20:66:1B:60:9D:2B:F9
            X509v3 Authority Key Identifier:
                keyid:F9:F1:6A:8A:F5:65:1F:8A:98:4F:03:31:45:65:0B:3F:9E:5D:8A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:f8:04:f3:bf:a5:19:62:01:40:36:02:ee:f6:6a:c5:69:
         42:f9:e6:69:b8:fe:10:40:06:d5:7f:d1:d6:fb:2b:01:37:94:
         63:55:69:a1:fb:37:17:44:92:e0:f0:63:5f:d5:ea:7b:ac:7c:
         9d:ed:df:ad:00:6b:cd:1c:9c:0e:be:4b:5f:6a:0d:07:7a:9a:
         a5:be:38:b2:7c:3f:79:3e:49:de:65:68:d4:58:70:ab:32:46:
         48:d6:9f:46:6f:fd:8b:79:d1:d1:19:4c:ed:71:d8:2a:bf:de:
         96:5f:a7:48:52:67:40:d9:6d:c7:97:8e:ad:d6:44:4a:6e:04:
         4e:ec:fb:06:ff:d9:ae:79:fe:45:e0:51:30:56:4e:66:07:ef:
         86:a0:e9:1c:94:f6:96:91:21:9c:8e:6e:39:5c:ba:f4:6f:23:
         2c:7b:e7:a2:17:d9:9d:69:cd:43:65:95:e7:17:ac:dd:10:8f:
         76:7c:5b:17:d0:89:a5:6d:37:dd:e2:8a:51:a4:89:9e:4a:67:
         26:b4:9f:2d:59:f2:5a:53:f1:5f:1c:aa:73:68:f5:13:be:78:
         c6:e8:a0:bb:dc:d3:9d:e4:7f:67:66:87:35:15:0f:c1:9e:3e:
         85:98:2f:d9:fd:00:96:4d:84:6e:a9:84:b8:05:35:66:dc:e7:
         8c:b4:5e:15
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUM0NjBBRjExMC8GA1UEBRMoRjlGMTZBOEFGNTY1MUY4QTk4NEYwMzMxNDU2NTBC
M0Y5RTVEOEE4NjAeFw0yNTAyMTYwMjAwMzhaFw0yNTAyMTgwMjAwMzhaMBgxFjAU
BgNVBAMTDTY3YjE0NmM3LTFjODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDg1ahlfPjAE4OQ8Gg40tbOrdq81Hpx+fAiAeh27WgfhtuAnhoJmW37Kd85
/6woOcAqXgEmLJYYhXtjORrN1yxIcXn4wwKGLSuT+WtB07HQ8eMZWkLIuKQ6P3jm
jooGHOFAutNaaHl0srTHAb3J6VxvjQZbtSPp828QtFEUMzg8IPL6sOuXiV8MMcrO
1noUOPpFaOsufSz0ZJE7/Y9YepCEWWUjKbnvud6PM1328CY2l+/JcknQBvqUw0el
BH7RWINf9fLQjUPYndOE9rTCfZwabs+IefdabQ9qqIZYfM5UBYM0QEISa8sI11j/
SK38oMxnjF2uWmTtE8E4TY2xxpAxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJJ7Y
pq158/RbP/2J3yBmG2CdK/kwHwYDVR0jBBgwFoAU+fFqivVlH4qYTwMxRWULP55d
ioYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDNDYwL0FDRUMyRDIyODk4MTExRUM5NUQzNTBCNDVBNDBENTc3Ly1mRnFp
dlZsSDRxWVR3TXhSV1VMUDU1ZGlvWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1mRnFpdlZsSDRxWVR3TXhSV1VMUDU1ZGlvWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUM0NjAvQUNFQzJEMjI4OTgxMTFFQzk1RDM1MEI0NUE0
MEQ1NzcvLWZGcWl2VmxINHFZVHdNeFJXVUxQNTVkaW9ZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA2jPgE87+lGWIBQDYC7vZqxWlC+eZp
uP4QQAbVf9HW+ysBN5RjVWmh+zcXRJLg8GNf1ep7rHyd7d+tAGvNHJwOvktfag0H
epqlvjiyfD95PkneZWjUWHCrMkZI1p9Gb/2LedHRGUztcdgqv96WX6dIUmdA2W3H
l46t1kRKbgRO7PsG/9muef5F4FEwVk5mB++GoOkclPaWkSGcjm45XLr0byMse+ei
F9mdac1DZZXnF6zdEI92fFsX0ImlbTfd4opRpImeSmcmtJ8tWfJaU/FfHKpzaPUT
vnjG6KC73NOd5H9nZoc1FQ/Bnj6FmC/Z/QCWTYRuqYS4BTVm3OeMtF4V
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:12 2025 by rpki-client