Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
File:                     LmD5YTFKp9b93e6durMSN0cF5ss.mft (raw, json)
Hash identifier:          ieQNwEX0e0BaRHESVGgtpqYJvAYbcrn2rbsYWUAmfFA=
Subject key identifier:   B2:A1:51:01:1D:60:4C:1E:FE:0D:2D:69:FB:51:28:28:85:44:D9:40
Authority key identifier: 2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB
Certificate issuer:       /CN=F36FC8A0AF/serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
Certificate serial:       0108
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
Manifest number:          0107
Signing time:             Tue 28 May 2024 02:27:57 +0000
Manifest this update:     Tue 28 May 2024 02:27:56 +0000
Manifest next update:     Thu 30 May 2024 02:27:56 +0000
Files and hashes:         1: LmD5YTFKp9b93e6durMSN0cF5ss.crl (hash: InEkzUmztDtzNBeqibpHUnQN7LawX07mEIQ98CF4F6g=)
                          2: 333100CC56E711EEB82D22544AD9E6FC.roa (hash: iWB0O9f+LLwbK/f70tuWF05AYGrsYH+zV7rCgvpguSc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 May 2024 00:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC8A0AF/serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
        Validity
            Not Before: May 28 02:27:56 2024 GMT
            Not After : May 30 02:27:56 2024 GMT
        Subject: CN=6655412d-db03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:67:1a:43:0d:aa:6a:54:91:75:e3:a9:bf:
                    26:d5:3f:d1:df:a6:79:25:4b:bc:ed:85:c8:63:f1:
                    03:af:02:c8:3f:78:6f:a1:3d:f1:c6:b0:f6:26:aa:
                    9a:38:e8:f0:24:f2:7b:6d:41:dc:6c:28:aa:94:4b:
                    30:3f:c5:e7:12:f2:6a:5b:2e:36:4b:71:4b:6d:3b:
                    0e:9b:e8:2f:35:69:5d:49:b0:be:7b:0f:29:06:58:
                    2a:20:58:e4:bf:08:21:92:5c:ac:a1:c2:8c:80:cb:
                    0f:12:2b:fe:f1:cf:14:f0:a5:d6:7f:50:2a:f1:29:
                    74:a8:a7:61:6e:ed:76:03:c9:03:b4:88:e0:16:b7:
                    9f:1a:2c:d0:93:33:00:f4:13:e8:76:46:57:b7:89:
                    fd:08:89:2d:9b:b9:93:1c:49:6e:d2:2b:66:36:fb:
                    8d:c9:ad:ae:4d:7c:db:eb:b3:e7:cb:77:7c:ff:b1:
                    66:a8:10:7e:b3:17:a2:0f:59:ce:af:84:63:54:7d:
                    af:75:55:23:60:f9:c3:8a:0c:06:04:a4:c6:ff:bd:
                    b1:a6:82:55:26:08:e9:79:9f:18:75:f9:d4:a9:75:
                    01:91:3c:b6:03:f8:53:c8:d6:1b:be:a9:2f:9e:86:
                    c6:47:56:ba:17:ae:d6:78:37:70:3f:99:a6:2f:ca:
                    45:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A1:51:01:1D:60:4C:1E:FE:0D:2D:69:FB:51:28:28:85:44:D9:40
            X509v3 Authority Key Identifier:
                keyid:2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:03:f2:9e:78:20:0a:e1:54:1e:e6:75:85:8e:83:4b:51:0a:
         66:8a:6a:5d:e2:16:68:5d:a9:88:35:3e:61:1d:4e:4c:45:eb:
         c5:77:91:e7:02:2a:b3:a2:87:30:f8:df:da:ee:b8:12:d1:55:
         56:c5:2e:c3:d3:d2:67:08:27:e4:9f:38:46:03:5d:62:b1:0f:
         ab:c0:c5:a2:1d:a0:94:1b:0c:97:75:f0:2d:da:85:59:17:f0:
         74:06:61:97:01:b3:5d:c9:f6:99:20:fa:b0:8f:bb:bf:7f:e5:
         3b:6d:96:51:5c:0e:0b:bd:c9:6f:72:0c:53:cd:9b:16:a4:bc:
         4d:6d:97:1d:e9:e2:66:91:cb:b2:65:9d:3b:61:25:1b:98:be:
         39:cf:8d:fc:6c:47:e2:b7:22:34:89:dc:6b:31:e7:43:54:b3:
         e3:df:47:0d:2d:27:46:8f:2e:8b:cd:3d:f2:db:86:dd:4e:3e:
         c1:a7:9a:75:4a:98:67:d5:18:2f:15:e7:a1:e6:ee:92:f6:d3:
         f2:07:4d:7e:6e:c7:6c:91:3d:e4:29:e5:e8:e2:f6:e3:4c:90:
         c1:7c:e6:df:a8:30:ab:32:ff:6d:f7:50:9e:e7:23:3e:be:c6:
         04:38:3c:1a:9a:bc:b8:b6:9f:44:35:4d:ec:d2:e5:a2:bc:f8:
         5a:da:69:71
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkM4QTBBRjExMC8GA1UEBRMoMkU2MEY5NjEzMTRBQTdENkZERERFRTlEQkFCMzEy
Mzc0NzA1RTZDQjAeFw0yNDA1MjgwMjI3NTZaFw0yNDA1MzAwMjI3NTZaMBgxFjAU
BgNVBAMTDTY2NTU0MTJkLWRiMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCgMmcaQw2qalSRdeOpvybVP9HfpnklS7zthchj8QOvAsg/eG+hPfHGsPYm
qpo46PAk8nttQdxsKKqUSzA/xecS8mpbLjZLcUttOw6b6C81aV1JsL57DykGWCog
WOS/CCGSXKyhwoyAyw8SK/7xzxTwpdZ/UCrxKXSop2Fu7XYDyQO0iOAWt58aLNCT
MwD0E+h2Rle3if0IiS2buZMcSW7SK2Y2+43Jra5NfNvrs+fLd3z/sWaoEH6zF6IP
Wc6vhGNUfa91VSNg+cOKDAYEpMb/vbGmglUmCOl5nxh1+dSpdQGRPLYD+FPI1hu+
qS+ehsZHVroXrtZ4N3A/maYvykXTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsqFR
AR1gTB7+DS1p+1EoKIVE2UAwHwYDVR0jBBgwFoAULmD5YTFKp9b93e6durMSN0cF
5sswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDOEEwL0YxMDkyNkEyNTZFNjExRUVBOTVCMjY1MzRBRDlFNkZDL0xtRDVZ
VEZLcDliOTNlNmR1ck1TTjBjRjVzcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xtRDVZVEZLcDliOTNlNmR1ck1TTjBjRjVzcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkM4QTAvRjEwOTI2QTI1NkU2MTFFRUE5NUIyNjUzNEFE
OUU2RkMvTG1ENVlURktwOWI5M2U2ZHVyTVNOMGNGNXNzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZA/KeeCAK4VQe5nWFjoNLUQpmimpd
4hZoXamINT5hHU5MRevFd5HnAiqzoocw+N/a7rgS0VVWxS7D09JnCCfknzhGA11i
sQ+rwMWiHaCUGwyXdfAt2oVZF/B0BmGXAbNdyfaZIPqwj7u/f+U7bZZRXA4Lvclv
cgxTzZsWpLxNbZcd6eJmkcuyZZ07YSUbmL45z438bEfityI0idxrMedDVLPj30cN
LSdGjy6LzT3y24bdTj7Bp5p1Sphn1RgvFeeh5u6S9tPyB01+bsdskT3kKeXo4vbj
TJDBfObfqDCrMv9t91Ce5yM+vsYEODwamry4tp9ENU3s0uWivPha2mlx
-----END CERTIFICATE-----
Generated at Tue May 28 03:12:58 2024 by rpki-client on console-fra.rpki-client.org