Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F245C/77C18ECED2F411EB99103042F8AEA228/T9RIGgiHeKui4qVallo_znRmJrQ.mft
File:                     T9RIGgiHeKui4qVallo_znRmJrQ.mft (raw, json)
Hash identifier:          hfXMhuxgJkzhXle3cYSuMKVWh6AUND24p6+zgHgm6yI=
Subject key identifier:   19:8F:3A:46:4F:54:43:5E:C2:F5:35:E7:E3:E1:93:19:41:F9:AD:F5
Authority key identifier: 4F:D4:48:1A:08:87:78:AB:A2:E2:A5:5A:96:5A:3F:CE:74:66:26:B4
Certificate issuer:       /CN=F36F245CAF/serialNumber=4FD4481A088778ABA2E2A55A965A3FCE746626B4
Certificate serial:       0432
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T9RIGgiHeKui4qVallo_znRmJrQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F245C/77C18ECED2F411EB99103042F8AEA228/T9RIGgiHeKui4qVallo_znRmJrQ.mft
Manifest number:          0431
Signing time:             Sun 28 Apr 2024 01:29:21 +0000
Manifest this update:     Sun 28 Apr 2024 01:29:21 +0000
Manifest next update:     Tue 30 Apr 2024 01:29:21 +0000
Files and hashes:         1: T9RIGgiHeKui4qVallo_znRmJrQ.crl (hash: Te0ih5MNDigo20OvzMr01Lz7lo4tsaRM3nA9x0/D7bo=)
                          2: 9BECE644D2FA11EBB748354AF8AEA228.roa (hash: LHg8fAnpmlc9wyvm4xopwLFKEdaFaQVDly59DHoY5Po=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F245C/77C18ECED2F411EB99103042F8AEA228/T9RIGgiHeKui4qVallo_znRmJrQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F245C/77C18ECED2F411EB99103042F8AEA228/T9RIGgiHeKui4qVallo_znRmJrQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T9RIGgiHeKui4qVallo_znRmJrQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Apr 2024 00:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1074 (0x432)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F245CAF/serialNumber=4FD4481A088778ABA2E2A55A965A3FCE746626B4
        Validity
            Not Before: Apr 28 01:29:21 2024 GMT
            Not After : Apr 30 01:29:21 2024 GMT
        Subject: CN=662da671-85f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c8:c6:0b:4f:b1:01:4f:41:d6:e2:29:c8:df:
                    e5:12:fc:26:d0:e7:02:ca:55:50:a3:2c:cb:fe:1c:
                    a1:d4:c2:2b:5e:af:39:e9:9e:a2:24:1a:3f:b5:f5:
                    36:b0:39:e9:c3:05:e6:e0:1b:5b:0e:c6:3d:3a:7a:
                    45:27:60:6d:2f:ef:c9:bf:8b:92:93:fa:74:9b:a1:
                    cc:66:29:0a:40:72:c6:b7:fd:45:3c:44:90:32:24:
                    6f:75:97:7d:2e:2e:75:c8:ad:80:c5:ad:66:a8:f4:
                    42:70:b1:a7:29:24:f4:7d:0b:fd:4a:73:93:a5:fc:
                    7b:56:1a:b0:81:13:9b:1e:70:4b:df:7c:5e:da:95:
                    65:99:c6:6e:52:b4:4f:64:c3:44:98:5e:1f:c1:14:
                    80:df:fd:c2:63:8c:cf:17:fd:59:a6:f6:4d:01:d3:
                    de:3c:23:1e:4b:e9:19:d2:97:1c:01:26:19:02:0e:
                    d2:bf:21:ff:96:8a:bf:bb:02:df:f7:a7:5e:5a:66:
                    3f:ad:c2:0b:94:e2:b9:81:3a:52:27:83:e3:88:1e:
                    a7:7a:ad:90:b9:70:69:e1:f2:43:2d:5c:d3:be:76:
                    ff:c7:b7:b4:97:fe:43:87:39:49:9e:39:90:5f:72:
                    04:29:88:55:34:44:ed:95:3b:47:6c:22:f7:44:b5:
                    b7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:3A:46:4F:54:43:5E:C2:F5:35:E7:E3:E1:93:19:41:F9:AD:F5
            X509v3 Authority Key Identifier:
                keyid:4F:D4:48:1A:08:87:78:AB:A2:E2:A5:5A:96:5A:3F:CE:74:66:26:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F245C/77C18ECED2F411EB99103042F8AEA228/T9RIGgiHeKui4qVallo_znRmJrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T9RIGgiHeKui4qVallo_znRmJrQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F245C/77C18ECED2F411EB99103042F8AEA228/T9RIGgiHeKui4qVallo_znRmJrQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:13:d9:6f:57:6f:23:aa:0a:3e:d5:da:ac:c9:79:e9:78:9d:
         34:62:a9:8f:d6:02:53:b2:7b:23:a0:c8:26:52:87:f2:a4:3f:
         21:6b:7a:8a:bc:8f:d5:0e:5f:d8:16:0b:73:52:a3:c1:61:3c:
         2e:81:f2:1e:57:ec:7a:5c:14:2d:1e:fc:ed:ea:78:80:73:ea:
         c9:d7:e1:47:c4:8f:e9:23:9a:1c:ce:66:fc:76:df:f6:7c:40:
         fe:3a:17:09:42:86:4b:91:f2:03:bc:8f:a7:48:81:a7:b9:f8:
         88:34:e7:84:16:b6:fb:73:2f:af:4e:9e:3a:5c:23:fa:85:18:
         bf:11:89:64:b7:42:42:85:a8:82:95:10:81:41:75:bf:ad:df:
         5c:2b:2d:25:19:31:4e:29:9b:dc:b8:de:3d:6f:2a:b0:81:db:
         ef:23:f1:a2:8e:45:65:06:69:9f:69:20:ad:7f:af:4a:9d:61:
         62:35:48:7b:b6:a5:09:14:01:c0:b8:02:84:1b:78:bd:45:36:
         65:df:56:3f:a5:ce:2f:e6:a1:ed:8c:ea:df:46:63:1b:8d:b6:
         4e:06:ec:02:85:26:63:5f:c3:ad:2e:83:9e:fd:f8:05:a4:2c:
         1d:36:7b:a8:64:84:3c:59:00:33:6e:32:99:58:7f:10:6d:15:
         b2:69:f4:6a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjI0NUNBRjExMC8GA1UEBRMoNEZENDQ4MUEwODg3NzhBQkEyRTJBNTVBOTY1QTNG
Q0U3NDY2MjZCNDAeFw0yNDA0MjgwMTI5MjFaFw0yNDA0MzAwMTI5MjFaMBgxFjAU
BgNVBAMTDTY2MmRhNjcxLTg1ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfyMYLT7EBT0HW4inI3+US/CbQ5wLKVVCjLMv+HKHUwiterznpnqIkGj+1
9TawOenDBebgG1sOxj06ekUnYG0v78m/i5KT+nSbocxmKQpAcsa3/UU8RJAyJG91
l30uLnXIrYDFrWao9EJwsacpJPR9C/1Kc5Ol/HtWGrCBE5secEvffF7alWWZxm5S
tE9kw0SYXh/BFIDf/cJjjM8X/Vmm9k0B0948Ix5L6RnSlxwBJhkCDtK/If+Wir+7
At/3p15aZj+twguU4rmBOlIng+OIHqd6rZC5cGnh8kMtXNO+dv/Ht7SX/kOHOUme
OZBfcgQpiFU0RO2VO0dsIvdEtbe1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGY86
Rk9UQ17C9TXn4+GTGUH5rfUwHwYDVR0jBBgwFoAUT9RIGgiHeKui4qVallo/znRm
JrQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYyNDVDLzc3QzE4RUNFRDJGNDExRUI5OTEwMzA0MkY4QUVBMjI4L1Q5UklH
Z2lIZUt1aTRxVmFsbG9fem5SbUpyUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Q5UklHZ2lIZUt1aTRxVmFsbG9fem5SbUpyUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjI0NUMvNzdDMThFQ0VEMkY0MTFFQjk5MTAzMDQyRjhB
RUEyMjgvVDlSSUdnaUhlS3VpNHFWYWxsb196blJtSnJRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC3E9lvV28jqgo+1dqsyXnpeJ00YqmP
1gJTsnsjoMgmUofypD8ha3qKvI/VDl/YFgtzUqPBYTwugfIeV+x6XBQtHvzt6niA
c+rJ1+FHxI/pI5oczmb8dt/2fED+OhcJQoZLkfIDvI+nSIGnufiINOeEFrb7cy+v
Tp46XCP6hRi/EYlkt0JChaiClRCBQXW/rd9cKy0lGTFOKZvcuN49byqwgdvvI/Gi
jkVlBmmfaSCtf69KnWFiNUh7tqUJFAHAuAKEG3i9RTZl31Y/pc4v5qHtjOrfRmMb
jbZOBuwChSZjX8OtLoOe/fgFpCwdNnuoZIQ8WQAzbjKZWH8QbRWyafRq
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:14 2024 by rpki-client on console-ams.rpki-client.org