Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
File:                     sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft (raw, json)
Hash identifier:          1oi8DM5odkZVQl/R+NRDtceeLOO50UmM6LnYUigFlkA=
Subject key identifier:   5F:4A:E6:00:9E:4C:64:3F:30:70:BD:7F:9D:B6:0A:3A:CC:8A:69:EE
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Certificate issuer:       /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial:       AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
Manifest number:          A7
Signing time:             Wed 23 Oct 2024 10:42:07 +0000
Manifest this update:     Wed 23 Oct 2024 10:42:07 +0000
Manifest next update:     Fri 25 Oct 2024 10:42:07 +0000
Files and hashes:         1: sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl (hash: Uo/S9OqC+zTS8KNxZtHmjTRcrZi4eE4gUlzOC0lz8ZA=)
                          2: 0EB2B67C8FAE11EFB0C6F19A762E951A.roa (hash: dRhtvM/2t47z2JwA9sfqbVs7olYpopo1AghyJCkiJnU=)
                          3: A3E369B88FAD11EF84E8C298762E951A.roa (hash: KHj93NQJWTZ8oMi0gw+QEnklPoZI/vRnCOYhgqAuDO0=)
                          4: 7017818A912B11EFA858BC80762E951A.roa (hash: 8BIH5JeOynzixiDGrMvrW3MY/Y2dPuOtFBanjsebARk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 10:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
        Validity
            Not Before: Oct 23 10:42:07 2024 GMT
            Not After : Oct 25 10:42:07 2024 GMT
        Subject: CN=6718d2ff-17f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:50:dc:4b:2b:84:d4:e5:db:67:c8:35:2c:96:
                    27:cd:3b:5b:ce:31:6f:04:79:d0:7f:dd:6f:b3:55:
                    ed:44:a9:19:27:c5:02:5e:53:c4:89:04:f4:82:9e:
                    d1:82:bb:a9:15:4d:cf:d4:d7:2c:e9:02:fd:4a:43:
                    4d:f7:2f:36:39:8d:88:53:ab:e3:07:87:fc:31:5e:
                    b9:ab:1f:9f:f9:af:7e:6d:3c:ac:4b:9c:85:7a:c2:
                    eb:01:86:13:b3:15:24:0b:b1:26:9d:b7:59:10:ee:
                    fc:6c:eb:43:8c:a2:a9:2c:f4:c7:84:d6:e7:27:96:
                    83:8e:6a:8d:9a:29:e8:09:06:31:bc:36:06:3f:f3:
                    f4:25:3d:8c:1b:9d:55:fd:26:d6:be:0a:00:cb:aa:
                    af:3b:87:24:56:ed:65:0b:67:20:81:15:c8:44:bf:
                    95:55:e0:a8:fc:68:4e:50:02:a1:ce:f8:60:b2:7e:
                    8d:a5:52:3a:0d:f4:d4:77:e0:ed:cf:9f:01:26:ab:
                    45:62:4c:97:8c:b6:f1:09:78:ec:b0:0f:89:6b:be:
                    55:95:8b:6c:bd:ec:47:9f:7f:43:22:c9:41:ce:57:
                    5b:11:b1:dd:a9:f9:13:19:38:14:fc:a2:ee:4d:cf:
                    b7:07:0d:fa:dc:c7:18:5e:d7:b1:71:76:72:e9:de:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4A:E6:00:9E:4C:64:3F:30:70:BD:7F:9D:B6:0A:3A:CC:8A:69:EE
            X509v3 Authority Key Identifier:
                keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:41:be:5d:3c:9c:91:4c:4e:ab:ad:7b:b8:22:97:17:1b:32:
         eb:cc:20:b6:96:50:66:34:24:b4:2c:05:0f:db:c9:18:13:43:
         7f:eb:1d:ad:46:21:ff:32:85:37:47:b9:25:50:5c:75:26:08:
         3b:98:18:4d:2e:8c:92:47:29:ea:6b:50:72:fc:6e:9c:30:b7:
         b6:20:b4:b1:b5:8f:9a:44:f0:95:7c:b6:1a:ef:ab:b7:fc:26:
         79:dd:e0:5c:09:ac:a8:90:e2:25:06:ba:f0:38:72:37:fe:56:
         2b:f8:f7:f1:4c:06:42:b1:e8:c0:dd:1a:ba:16:5d:32:a6:b8:
         3d:74:93:f6:c8:c7:7a:74:75:61:69:dc:19:10:dc:94:fb:0a:
         34:90:bf:c2:ae:2b:0b:5f:7c:bc:a4:19:3f:24:a2:01:0f:4d:
         4c:33:cc:4c:c6:e3:c6:57:3d:21:46:54:bf:da:a0:e7:70:b2:
         e2:da:32:15:7b:50:0f:09:7d:6c:04:07:74:4e:23:67:29:ab:
         85:2b:6c:83:d7:9c:ea:ac:9a:7d:28:ec:ab:dd:75:b0:96:75:
         a8:52:7c:4b:d8:b1:fa:87:e2:4c:d7:46:af:8d:98:92:b7:be:
         31:27:c4:fd:81:48:80:6d:74:e8:aa:2c:7e:e9:8d:fd:56:3a:
         ca:ff:98:0b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjhGODZBRjExMC8GA1UEBRMoQjFCQTNEN0M3RDhFQ0Q1MTFGREE0QkYwRUMyOUY2
QTk5QjJDMzFCQjAeFw0yNDEwMjMxMDQyMDdaFw0yNDEwMjUxMDQyMDdaMBgxFjAU
BgNVBAMTDTY3MThkMmZmLTE3ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNUNxLK4TU5dtnyDUslifNO1vOMW8EedB/3W+zVe1EqRknxQJeU8SJBPSC
ntGCu6kVTc/U1yzpAv1KQ033LzY5jYhTq+MHh/wxXrmrH5/5r35tPKxLnIV6wusB
hhOzFSQLsSadt1kQ7vxs60OMoqks9MeE1ucnloOOao2aKegJBjG8NgY/8/QlPYwb
nVX9Jta+CgDLqq87hyRW7WULZyCBFchEv5VV4Kj8aE5QAqHO+GCyfo2lUjoN9NR3
4O3PnwEmq0ViTJeMtvEJeOywD4lrvlWVi2y97Eeff0MiyUHOV1sRsd2p+RMZOBT8
ou5Nz7cHDfrcxxhe17FxdnLp3rmjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUX0rm
AJ5MZD8wcL1/nbYKOsyKae4wHwYDVR0jBBgwFoAUsbo9fH2OzVEf2kvw7Cn2qZss
MbswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4Rjg2LzQzMTU5ODg2MTkyOTExRUZBNzBDQzA2RTAxNzAwMUIxL3Nibzlm
SDJPelZFZjJrdnc3Q24ycVpzc01icy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3NibzlmSDJPelZFZjJrdnc3Q24ycVpzc01icy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjhGODYvNDMxNTk4ODYxOTI5MTFFRkE3MENDMDZFMDE3
MDAxQjEvc2JvOWZIMk96VkVmMmt2dzdDbjJxWnNzTWJzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKQb5dPJyRTE6rrXu4IpcXGzLrzCC2
llBmNCS0LAUP28kYE0N/6x2tRiH/MoU3R7klUFx1Jgg7mBhNLoySRynqa1By/G6c
MLe2ILSxtY+aRPCVfLYa76u3/CZ53eBcCayokOIlBrrwOHI3/lYr+PfxTAZCsejA
3Rq6Fl0yprg9dJP2yMd6dHVhadwZENyU+wo0kL/CrisLX3y8pBk/JKIBD01MM8xM
xuPGVz0hRlS/2qDncLLi2jIVe1APCX1sBAd0TiNnKauFK2yD15zqrJp9KOyr3XWw
lnWoUnxL2LH6h+JM10avjZiSt74xJ8T9gUiAbXToqix+6Y39VjrK/5gL
-----END CERTIFICATE-----
Generated at Wed Oct 23 12:11:03 2024 by rpki-client on console-ams.rpki-client.org