Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
File:                     At3Avw90-WSo2yJsvjP3007bAFM.mft (raw, json)
Hash identifier:          SJB4IbaymNNCscY1rK0qD2NfOyUfJUNEktOfIcanFD4=
Subject key identifier:   63:1B:40:34:71:2C:AF:89:B9:56:DF:02:60:43:11:59:DC:BC:A7:29
Authority key identifier: 02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53
Certificate issuer:       /CN=F36F51F8AR/serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
Certificate serial:       06E2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
Manifest number:          06E0
Signing time:             Sun 05 May 2024 01:02:56 +0000
Manifest this update:     Sun 05 May 2024 01:02:56 +0000
Manifest next update:     Tue 07 May 2024 01:02:56 +0000
Files and hashes:         1: At3Avw90-WSo2yJsvjP3007bAFM.crl (hash: acBitkFA6ucq6tQbVbg5EV+bCyvpmcvH7dE52qAAX6M=)
                          2: B0D116986C8D11ECA9758ACA5A40D577.roa (hash: lTLDiHShhMe4QavSzilaN/PR1KFjgS4fLvPFpQKkp0g=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                          rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F51F8AR/serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
        Validity
            Not Before: May  5 01:02:56 2024 GMT
            Not After : May  7 01:02:56 2024 GMT
        Subject: CN=6636dac0-d784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2f:3c:7e:4e:f2:04:84:d7:72:f1:a1:65:c4:
                    1d:ce:65:c2:b8:39:08:49:8e:b4:89:8a:11:8e:a9:
                    e9:35:aa:df:79:7a:e0:69:08:cd:b5:ce:6b:8d:16:
                    a0:56:86:0d:5c:d9:00:72:e8:b3:83:16:44:0e:ea:
                    af:35:37:c0:46:26:cc:7d:b9:0c:6b:db:86:2e:46:
                    07:4a:c2:b4:34:c3:52:f8:cb:aa:a8:41:54:10:43:
                    0e:ee:e2:0e:1f:1b:4a:61:1e:12:5a:30:38:b3:1d:
                    f3:4e:cb:15:99:e2:d4:57:2f:dc:64:7b:32:66:dd:
                    9e:e6:4e:44:60:d2:0f:bb:75:6c:39:0c:f9:f4:2e:
                    e2:c3:02:83:cb:06:aa:7c:55:42:e0:f6:fb:bd:13:
                    a2:89:04:23:e8:ea:e8:79:a1:bf:64:67:f9:1e:6d:
                    92:1f:8b:ce:dd:9c:f8:85:b0:29:c0:94:f8:b8:b1:
                    f9:4d:e6:b8:69:b2:10:18:b0:0b:af:96:de:24:42:
                    43:8e:3a:f0:37:ab:af:c1:2b:1d:2f:39:0e:db:b0:
                    b1:b1:ac:b7:67:77:29:c9:26:a0:db:41:7a:f2:7f:
                    cb:2f:7f:29:3a:1e:0a:37:36:75:7f:5a:24:d3:be:
                    4f:d6:f4:48:fd:88:53:a7:2e:35:47:45:e7:38:9c:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1B:40:34:71:2C:AF:89:B9:56:DF:02:60:43:11:59:DC:BC:A7:29
            X509v3 Authority Key Identifier:
                keyid:02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:29:d9:ed:47:a7:c0:9a:69:aa:24:39:12:af:42:53:30:cc:
         c2:b4:c8:d5:d9:f3:3d:c4:94:c5:d6:8a:9d:e1:bc:04:3a:8d:
         27:8d:33:e0:8e:f8:89:b1:28:20:39:a5:09:f4:30:3e:d3:48:
         ab:f3:96:a7:58:79:9f:2f:46:8f:9c:0f:aa:31:2d:66:b5:f4:
         7c:58:1e:39:c6:7a:fd:bb:23:2f:39:70:85:28:21:0b:0c:ca:
         bd:bd:95:42:5f:fd:0c:7a:56:87:5c:cf:9e:08:5b:5d:33:15:
         12:1c:7c:a3:ba:ee:3e:2d:74:f0:ce:27:47:2a:2e:10:9c:d0:
         0e:01:fb:e9:b8:2d:fc:7c:4f:53:c1:a2:3f:f1:49:29:29:66:
         6d:47:56:40:bb:69:10:9d:5d:82:67:93:3a:64:22:fc:ea:80:
         84:4f:cc:3d:0c:76:83:b7:f7:71:b4:0a:aa:e7:21:81:25:81:
         de:e9:b6:90:42:28:4b:fc:ae:fa:91:f0:e8:9c:3e:cc:f8:00:
         43:55:19:54:ac:22:31:6d:64:37:1a:34:a1:5c:3f:5d:99:21:
         5c:a8:f1:00:01:0a:1a:5f:da:08:e7:4b:08:1b:a3:30:d6:64:
         ab:b8:09:3a:dc:62:52:6e:fc:7d:99:30:b4:b4:5c:ed:ff:90:
         39:17:9d:ed
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjUxRjhBUjExMC8GA1UEBRMoMDJEREMwQkYwRjc0Rjk2NEE4REIyMjZDQkUzM0Y3
RDM0RURCMDA1MzAeFw0yNDA1MDUwMTAyNTZaFw0yNDA1MDcwMTAyNTZaMBgxFjAU
BgNVBAMTDTY2MzZkYWMwLWQ3ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdLzx+TvIEhNdy8aFlxB3OZcK4OQhJjrSJihGOqek1qt95euBpCM21zmuN
FqBWhg1c2QBy6LODFkQO6q81N8BGJsx9uQxr24YuRgdKwrQ0w1L4y6qoQVQQQw7u
4g4fG0phHhJaMDizHfNOyxWZ4tRXL9xkezJm3Z7mTkRg0g+7dWw5DPn0LuLDAoPL
Bqp8VULg9vu9E6KJBCPo6uh5ob9kZ/kebZIfi87dnPiFsCnAlPi4sflN5rhpshAY
sAuvlt4kQkOOOvA3q6/BKx0vOQ7bsLGxrLdndynJJqDbQXryf8svfyk6Hgo3NnV/
WiTTvk/W9Ej9iFOnLjVHRec4nJdLAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUYxtA
NHEsr4m5Vt8CYEMRWdy8pykwHwYDVR0jBBgwFoAUAt3Avw90+WSo2yJsvjP3007b
AFMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY1MUY4L0Q0QjA4NUNBQ0EzMzExRTk5NDVGOUI2QkY4QUVBMjI4L0F0M0F2
dzkwLVdTbzJ5SnN2alAzMDA3YkFGTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0F0M0F2dzkwLVdTbzJ5SnN2alAzMDA3YkFGTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjUxRjgvRDRCMDg1Q0FDQTMzMTFFOTk0NUY5QjZCRjhBRUEy
MjgvQXQzQXZ3OTAtV1NvMnlKc3ZqUDMwMDdiQUZNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZKdntR6fAmmmqJDkSr0JTMMzCtMjV2fM9
xJTF1oqd4bwEOo0njTPgjviJsSggOaUJ9DA+00ir85anWHmfL0aPnA+qMS1mtfR8
WB45xnr9uyMvOXCFKCELDMq9vZVCX/0MelaHXM+eCFtdMxUSHHyjuu4+LXTwzidH
Ki4QnNAOAfvpuC38fE9TwaI/8UkpKWZtR1ZAu2kQnV2CZ5M6ZCL86oCET8w9DHaD
t/dxtAqq5yGBJYHe6baQQihL/K76kfDonD7M+ABDVRlUrCIxbWQ3GjShXD9dmSFc
qPEAAQoaX9oI50sIG6Mw1mSruAk63GJSbvx9mTC0tFzt/5A5F53t
-----END CERTIFICATE-----
Generated at Sun May 5 02:33:32 2024 by rpki-client on console-fra.rpki-client.org