Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
File:                     f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft (raw, json)
Hash identifier:          pa+LHQXCo40Arg7RAkLqxSLCZhGqANTXocCcpJ/onao=
Subject key identifier:   7A:8F:09:8A:D8:42:97:5B:C0:A7:66:0B:3D:52:99:8A:E8:3A:58:6F
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0EC8
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
Manifest number:          0E47
Signing time:             Thu 21 Nov 2024 00:30:40 +0000
Manifest this update:     Thu 21 Nov 2024 00:30:34 +0000
Manifest next update:     Sat 23 Nov 2024 00:30:34 +0000
Files and hashes:         1: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl (hash: 8tbaMi4rq2VEg6h3gQSBdCQkois35KsEvYcvCtnimGk=)
                          2: KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer (hash: oCaKZ+a1BiOObM5rclE3Fshxm+5L/3lmkz7BjCahbiU=)
                          3: 8ZI823Vz-wlzku4GArwdsbV78OM.cer (hash: U7InKx3r8SOSHwydL2tnMNRqWOF5jd6GUX3nsnoGm60=)
                          4: lyz9rusSb2_NRpalkPcBiDeqX_I.cer (hash: sJSmLsRGFbJeDHQIJQoGw4P9jyHZ7V5/0HnpUfFw6bU=)
                          5: n10GlKN56yP6tAip1LvVCOGqOSI.cer (hash: 7WxBv0JD3+i6qPeEQLHu9GCXkxZSFpQS9AapV0Tx0SA=)
                          6: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (hash: OjxUz78X6wC+DDaFfM2RPPPKoHJxDs7JRBm8u0ExcKY=)
                          7: ZbPoGBw9qNHWQehKRcjvgjndfqc.cer (hash: eXd9nIhluI9Jdj09NbPEWfGFgxExkkadHBM5y2Fu00I=)
                          8: BinJnUdgwom4TNvs8bbBPPUl6q8.cer (hash: QvHrwBtlz5V+p1QQw9Oo9ep1bUHmaORznelbURs/BRQ=)
                          9: btXWd58RVP-e4YoO_T3bdQZOoeU.cer (hash: LEkWfq8weJZAohtoFlFlZ12DZfXo2hHgEcfdefjG0nc=)
                          10: W8VPKEgipxexrUw3z2nQls5_Z3M.cer (hash: +vpbv/zEWzFCj/zrLolvBgXahMhexJC7FluyE1/ko6o=)
                          11: OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer (hash: 4raQJCa2aKda/tV+ZysLKqtV5yLvZcd44lum2w2gWDM=)
                          12: 6vTkF_QNHJDUbdlViOspDev7ius.cer (hash: IYRMDFaYLpdbDiFlN3Tzc8BWeMNCdBFXHmZid5hO8rI=)
                          13: 8GzMRNUs-b4RXOx6TaaxMJukOaU.cer (hash: 1uF3VybFIZcBVrYudbrwqFiiYbhum/rrpBd2bSpMKwc=)
                          14: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (hash: KwKI+Uwca3T6GiUKa7aLAvKLLGQV1Sd3b0vSM2REP40=)
                          15: nYezEXqhvXgot91GTXMHa66NzJY.cer (hash: 7DWwT32UrjXI7Qy4O1nzyKFPS3dl9N3G+smTf5xLFXE=)
                          16: qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (hash: 5dDfEjLMRfsnupw/vpJgEIbM5sQrmaAbUSrZe4gKk5c=)
                          17: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer (hash: cyWzJGNh3CJgFEWQd6tfV7fBd1RHifdwvx+p9XkelwU=)
                          18: D1pm1nbRb8eSfE4kaUoejHekQGs.cer (hash: MtdaYzz9P7DitZHeh9SMrS1/faC+n6dyBRUfRab37AM=)
                          19: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (hash: hsYJClyf79xILlkUQgvlhRCyWGsGtaxjxD2j4BloFi8=)
                          20: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (hash: 0eRZkfRFAIn9eBoPxVCQ/XQZry+F9SFgSqDXpgtvpFQ=)
                          21: VCiBspPW4uKh8hlSyLwDISbuu8k.cer (hash: SZ0G94pJwR7JKuvllOZcT8yjSntz2rrUno3PKmS39Vs=)
                          22: bynJvMAklSDlBwZp-vZmUm98jzA.cer (hash: gMAex0okJyu7IC8Riskj2vwPPdh9OZ0u11wek0RSr34=)
                          23: SGm5dfSdmA_lFc7dSaDEDruBrKI.cer (hash: 8zuw15QysPUT4OIfjn6RhgFX9sdWfIk7lT49UH9kGbM=)
                          24: 8qncFw2PMqBEwa8QUgRdbU4kIus.cer (hash: Sd9HSWNHgoVdRg8bakxyIW+U1DqKGXqGQjJXNDuwAzg=)
                          25: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer (hash: IhfigofNQ834mJLFh2xTb1D9V+VE8vcLw1ZagrTIZdQ=)
                          26: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer (hash: NTkqwpfBfJccAeKb44qGAZn8sYNMm4wcl1GtnDRjcGE=)
                          27: pyKwoONloK3D2e6zzL_MBi2Q76k.cer (hash: aPgVqfl2KgVgKGswhmkaoVU8fMx7+9n97hmgG6lUr64=)
                          28: gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer (hash: ENUpJFR3tVbeIrE2Is1YV7aGmPeWV+/7c/QqAvGxGeo=)
                          29: YiXGU2dIRI8cYBvpr6uCfJptjJg.cer (hash: wf3fHDtmVrJO/Awquj0XhDxAaP2+eES0nJEYhrYrpM4=)
                          30: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer (hash: EU+05lDy2eZ+biWNZqsBKeBd5wAaL9ncKbSIBorHBAY=)
                          31: mwftdzFoum4LC-Pl3LLPeB96yCo.cer (hash: /vbcTSyhLa503tMKyXeVlxqDY44xCj78Thw1YE5+Smc=)
                          32: 48LJS_VpO0HwWh1WV9GnhLXVcmE.cer (hash: piwFoQzJ0vrE+Md1TDjt5G3QE60FVx7H45JUQhQD6+Y=)
                          33: qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer (hash: /6dmDudJs2BiIcgOIvAtzIZ+hOFbd56Adla99blCJ00=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3784 (0xec8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Nov 21 00:30:34 2024 GMT
            Not After : Nov 23 00:30:34 2024 GMT
        Subject: CN=673e7f2b-b721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:eb:c6:14:bd:e1:05:4c:60:bd:59:97:a8:
                    0c:e3:18:8f:f7:c3:a6:29:40:10:01:f6:b8:8a:b7:
                    57:cc:89:11:d9:dd:17:29:63:95:5b:82:cd:6a:e5:
                    f4:8d:aa:62:3f:63:f8:1a:ca:4e:1d:71:38:d7:15:
                    6f:30:52:25:f7:00:f0:fd:15:ee:78:14:81:90:08:
                    55:53:9a:21:85:dc:fd:ca:a7:05:8d:44:d1:03:fb:
                    7f:23:a5:60:83:60:78:a8:6f:e0:7f:64:b8:18:e2:
                    10:d3:01:9a:bf:6b:9d:00:48:6a:c8:00:f8:7b:71:
                    b3:64:49:bb:c0:15:ef:2b:a0:ec:14:07:3c:f9:4b:
                    3b:31:b4:45:3e:6f:94:9a:cb:d6:16:d3:6c:29:66:
                    17:87:34:6a:01:96:df:f7:77:75:55:38:7a:02:ba:
                    c8:8a:bb:b8:6a:96:cb:ab:1e:90:2a:5f:3c:1d:88:
                    bf:43:70:ca:5b:cb:c3:b9:f6:ea:58:d4:4d:4c:be:
                    fb:a6:db:82:ba:e8:a5:7a:40:ea:83:fd:20:da:45:
                    46:50:0a:1d:90:b0:e9:11:f9:31:f4:41:bb:d8:60:
                    7d:3e:9b:d4:74:e6:e0:ff:7b:fb:7b:f7:a0:4c:58:
                    e0:40:97:31:24:ae:61:f6:8f:22:3f:37:4f:73:98:
                    cf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8F:09:8A:D8:42:97:5B:C0:A7:66:0B:3D:52:99:8A:E8:3A:58:6F
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c6:86:88:b1:f3:5c:dc:e8:00:34:44:45:5d:e1:4e:c8:f8:
         7d:b5:13:74:7c:cc:92:41:76:1c:33:43:6e:4e:6b:8d:8c:fd:
         b5:d2:b5:1e:3c:7a:88:6f:cb:ed:66:a2:9b:f3:14:90:a7:19:
         75:7d:b2:37:29:76:39:53:16:5f:b8:c9:44:54:5f:c5:62:e0:
         a5:7b:4c:c7:b5:0c:01:bd:ef:a8:31:65:21:46:40:56:29:36:
         6e:fe:40:50:b0:2c:43:13:a3:e5:ec:7b:8e:29:dc:f0:61:51:
         9b:45:02:4e:f6:9c:31:34:2c:d7:d1:50:0c:24:c7:3d:0a:14:
         77:ff:cf:f2:d4:b4:c7:7a:cd:d9:5b:8a:fa:07:38:db:96:67:
         77:97:18:01:05:e3:7f:ab:54:c3:0a:0e:c3:7b:a3:52:b8:e7:
         73:9b:57:87:87:6f:1d:aa:8d:d4:7b:2b:31:55:61:de:7a:88:
         b3:21:15:e4:dd:35:9c:b6:23:ed:8a:f7:ce:13:20:fa:c9:68:
         da:0a:f3:fd:3b:31:4e:ee:28:fe:e8:db:7d:fb:07:bc:34:e8:
         ec:f4:ef:b4:3b:1d:13:c7:ab:38:e6:2d:da:f5:8b:9e:a7:3a:
         90:6d:90:6c:a3:fe:60:9b:1b:25:84:00:64:99:b5:5c:b1:c8:
         1b:f9:df:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:25:54 2024 by rpki-client on console-ams.rpki-client.org