Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
File:                     NokmebLgyF9VbZR98hkWGboqv-Y.mft (raw, json)
Hash identifier:          DuoJ4QbSrUlSHAObYe4MqoXoiZ7WVBOeREWRMTzDEhg=
Subject key identifier:   55:58:8A:35:E0:98:C2:12:3B:E0:4B:47:74:8F:82:EF:F8:06:7D:D1
Authority key identifier: 36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
Certificate issuer:       /CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Certificate serial:       02CE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
Manifest number:          02C6
Signing time:             Wed 08 May 2024 01:53:08 +0000
Manifest this update:     Wed 08 May 2024 01:53:08 +0000
Manifest next update:     Fri 10 May 2024 01:53:08 +0000
Files and hashes:         1: NokmebLgyF9VbZR98hkWGboqv-Y.crl (hash: FEeH+ja1czn4xo52n7dyz89XPzmxBUVahphNsNaTYpo=)
                          2: 4E341B66638F11EEAE8F3A334AD9E6FC.roa (hash: u8+tUOrRrY4s158s9cBRWpl8atAcZbRDPn+y7aqq15Q=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 10 May 2024 00:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
        Validity
            Not Before: May  8 01:53:08 2024 GMT
            Not After : May 10 01:53:08 2024 GMT
        Subject: CN=663adb04-9be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a3:1e:42:d6:a9:54:16:9e:59:cc:55:d5:74:
                    90:4d:b0:16:85:5d:fd:f1:2e:39:45:9d:3e:c1:29:
                    2c:5b:78:7f:3e:b3:c4:e1:a7:96:a0:73:66:9f:42:
                    3f:7d:80:4e:43:00:61:57:9e:f8:12:a0:bb:85:85:
                    02:9a:77:f6:2f:a5:23:5e:c4:6a:64:97:60:ea:37:
                    4b:15:13:fd:6f:a5:06:96:8c:e9:7e:cc:42:0c:1e:
                    f8:35:70:86:6b:cf:b9:ec:ac:98:a1:e9:4b:34:12:
                    96:9d:9a:4a:cf:7b:3d:4f:08:bb:8e:92:78:cc:4c:
                    df:ad:7f:64:49:5f:7d:b0:23:f1:3c:c3:01:b9:c9:
                    b6:cc:67:f2:1f:c9:19:ab:4b:86:59:9f:75:e6:21:
                    1f:60:71:3d:8c:0d:06:1f:89:dc:0a:b4:09:89:50:
                    af:59:4f:51:da:9a:dd:49:c0:28:05:f7:b8:c1:b3:
                    c0:7f:d5:c9:1c:91:49:36:b3:b3:39:e7:6d:81:17:
                    28:b4:2c:23:36:55:19:7a:48:c3:d7:93:20:28:f7:
                    9e:3a:39:ff:ea:d5:d4:80:16:48:2b:f8:57:f5:48:
                    0b:fd:24:69:cd:4b:7a:0f:12:19:bc:8a:ca:14:b0:
                    79:06:52:a8:9d:27:f1:67:24:6a:59:89:da:7b:06:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:58:8A:35:E0:98:C2:12:3B:E0:4B:47:74:8F:82:EF:F8:06:7D:D1
            X509v3 Authority Key Identifier:
                keyid:36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f9:cd:07:ac:70:15:d7:12:04:1d:a8:a8:4b:e2:06:36:07:7d:
         23:5a:ac:09:e8:c0:38:7c:f2:6d:cd:98:8b:60:ab:7d:8d:4a:
         15:ec:6d:c5:64:1a:88:83:99:30:b7:b4:55:ab:06:1b:e2:d7:
         8c:60:03:68:cf:6a:9f:d1:41:c8:af:12:41:c0:c6:39:8c:47:
         66:97:90:58:8c:52:9f:af:41:11:dc:c0:d7:88:5c:a3:fb:08:
         1d:e6:a9:b1:2d:35:6d:55:96:cd:d0:5c:a0:5f:ae:6b:97:9a:
         19:e2:37:86:32:27:4f:30:91:e2:ea:c5:9b:32:a0:35:a2:98:
         dc:86:45:3b:24:d6:94:88:02:5e:9c:2c:0e:a8:22:bd:12:eb:
         4a:4c:6f:4f:3a:d3:6c:2d:3b:f2:55:60:1d:2c:8f:f6:ee:d0:
         be:eb:1c:2b:92:74:d7:05:55:46:e0:1e:d3:dd:fa:34:aa:0d:
         7c:e5:1d:bc:13:31:85:52:d0:ff:7d:05:57:1c:e1:54:b0:bd:
         90:30:9b:3b:bd:6a:50:13:33:a8:23:9b:f2:1c:e5:24:be:a2:
         e9:e6:bb:45:02:d3:d1:de:02:84:96:47:c4:da:dc:e7:4c:d2:
         de:71:c2:d4:96:58:5f:30:ed:93:fd:3c:a4:ab:2c:26:04:fe:
         5b:fe:18:dd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Rjg1NEFBRjExMC8GA1UEBRMoMzY4OTI2NzlCMkUwQzg1RjU1NkQ5NDdERjIxOTE2
MTlCQTJBQkZFNjAeFw0yNDA1MDgwMTUzMDhaFw0yNDA1MTAwMTUzMDhaMBgxFjAU
BgNVBAMTDTY2M2FkYjA0LTliZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUox5C1qlUFp5ZzFXVdJBNsBaFXf3xLjlFnT7BKSxbeH8+s8Thp5agc2af
Qj99gE5DAGFXnvgSoLuFhQKad/YvpSNexGpkl2DqN0sVE/1vpQaWjOl+zEIMHvg1
cIZrz7nsrJih6Us0EpadmkrPez1PCLuOknjMTN+tf2RJX32wI/E8wwG5ybbMZ/If
yRmrS4ZZn3XmIR9gcT2MDQYfidwKtAmJUK9ZT1Hamt1JwCgF97jBs8B/1ckckUk2
s7M5522BFyi0LCM2VRl6SMPXkyAo9546Of/q1dSAFkgr+Ff1SAv9JGnNS3oPEhm8
isoUsHkGUqidJ/FnJGpZidp7Bk4rAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVViK
NeCYwhI74EtHdI+C7/gGfdEwHwYDVR0jBBgwFoAUNokmebLgyF9VbZR98hkWGboq
v+YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4NTRBLzIwMkVEMjAyMDhGNDExRUQ5MjdDMEQ5OEYxMjIyNDY4L05va21l
YkxneUY5VmJaUjk4aGtXR2JvcXYtWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05va21lYkxneUY5VmJaUjk4aGtXR2JvcXYtWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Rjg1NEEvMjAyRUQyMDIwOEY0MTFFRDkyN0MwRDk4RjEy
MjI0NjgvTm9rbWViTGd5RjlWYlpSOThoa1dHYm9xdi1ZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQD5zQescBXXEgQdqKhL4gY2B30jWqwJ
6MA4fPJtzZiLYKt9jUoV7G3FZBqIg5kwt7RVqwYb4teMYANoz2qf0UHIrxJBwMY5
jEdml5BYjFKfr0ER3MDXiFyj+wgd5qmxLTVtVZbN0FygX65rl5oZ4jeGMidPMJHi
6sWbMqA1opjchkU7JNaUiAJenCwOqCK9EutKTG9POtNsLTvyVWAdLI/27tC+6xwr
knTXBVVG4B7T3fo0qg185R28EzGFUtD/fQVXHOFUsL2QMJs7vWpQEzOoI5vyHOUk
vqLp5rtFAtPR3gKElkfE2tznTNLeccLUllhfMO2T/TykqywmBP5b/hjd
-----END CERTIFICATE-----
Generated at Wed May 8 04:40:15 2024 by rpki-client on console-fra.rpki-client.org