Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
File:                     f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft (raw, json)
Hash identifier:          XIwtcO2WdL+pmscMj+/0LPSjuOyy8GIvl6ZgA+Dk8TI=
Subject key identifier:   9D:6F:17:23:4C:88:76:EE:A2:5D:7C:80:D5:0E:5E:4C:0A:33:2A:A1
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       0E3F
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
Manifest number:          0DC3
Signing time:             Thu 18 Jul 2024 00:25:32 +0000
Manifest this update:     Thu 18 Jul 2024 00:25:27 +0000
Manifest next update:     Sat 20 Jul 2024 00:25:27 +0000
Files and hashes:         1: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl (hash: f7ZPsnedBoA9mBw7Dn/JM93u1kD7CvIC3IaAj/EATx0=)
                          2: KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer (hash: oCaKZ+a1BiOObM5rclE3Fshxm+5L/3lmkz7BjCahbiU=)
                          3: 8ZI823Vz-wlzku4GArwdsbV78OM.cer (hash: U7InKx3r8SOSHwydL2tnMNRqWOF5jd6GUX3nsnoGm60=)
                          4: lyz9rusSb2_NRpalkPcBiDeqX_I.cer (hash: sJSmLsRGFbJeDHQIJQoGw4P9jyHZ7V5/0HnpUfFw6bU=)
                          5: n10GlKN56yP6tAip1LvVCOGqOSI.cer (hash: 7WxBv0JD3+i6qPeEQLHu9GCXkxZSFpQS9AapV0Tx0SA=)
                          6: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (hash: OjxUz78X6wC+DDaFfM2RPPPKoHJxDs7JRBm8u0ExcKY=)
                          7: ZbPoGBw9qNHWQehKRcjvgjndfqc.cer (hash: eXd9nIhluI9Jdj09NbPEWfGFgxExkkadHBM5y2Fu00I=)
                          8: BinJnUdgwom4TNvs8bbBPPUl6q8.cer (hash: QvHrwBtlz5V+p1QQw9Oo9ep1bUHmaORznelbURs/BRQ=)
                          9: btXWd58RVP-e4YoO_T3bdQZOoeU.cer (hash: LEkWfq8weJZAohtoFlFlZ12DZfXo2hHgEcfdefjG0nc=)
                          10: W8VPKEgipxexrUw3z2nQls5_Z3M.cer (hash: +vpbv/zEWzFCj/zrLolvBgXahMhexJC7FluyE1/ko6o=)
                          11: OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer (hash: 4raQJCa2aKda/tV+ZysLKqtV5yLvZcd44lum2w2gWDM=)
                          12: 6vTkF_QNHJDUbdlViOspDev7ius.cer (hash: IYRMDFaYLpdbDiFlN3Tzc8BWeMNCdBFXHmZid5hO8rI=)
                          13: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (hash: KwKI+Uwca3T6GiUKa7aLAvKLLGQV1Sd3b0vSM2REP40=)
                          14: nYezEXqhvXgot91GTXMHa66NzJY.cer (hash: 7DWwT32UrjXI7Qy4O1nzyKFPS3dl9N3G+smTf5xLFXE=)
                          15: qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (hash: 5dDfEjLMRfsnupw/vpJgEIbM5sQrmaAbUSrZe4gKk5c=)
                          16: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer (hash: cyWzJGNh3CJgFEWQd6tfV7fBd1RHifdwvx+p9XkelwU=)
                          17: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (hash: hsYJClyf79xILlkUQgvlhRCyWGsGtaxjxD2j4BloFi8=)
                          18: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (hash: 0eRZkfRFAIn9eBoPxVCQ/XQZry+F9SFgSqDXpgtvpFQ=)
                          19: VCiBspPW4uKh8hlSyLwDISbuu8k.cer (hash: SZ0G94pJwR7JKuvllOZcT8yjSntz2rrUno3PKmS39Vs=)
                          20: bynJvMAklSDlBwZp-vZmUm98jzA.cer (hash: gMAex0okJyu7IC8Riskj2vwPPdh9OZ0u11wek0RSr34=)
                          21: SGm5dfSdmA_lFc7dSaDEDruBrKI.cer (hash: 8zuw15QysPUT4OIfjn6RhgFX9sdWfIk7lT49UH9kGbM=)
                          22: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer (hash: NTkqwpfBfJccAeKb44qGAZn8sYNMm4wcl1GtnDRjcGE=)
                          23: gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer (hash: ENUpJFR3tVbeIrE2Is1YV7aGmPeWV+/7c/QqAvGxGeo=)
                          24: YiXGU2dIRI8cYBvpr6uCfJptjJg.cer (hash: wf3fHDtmVrJO/Awquj0XhDxAaP2+eES0nJEYhrYrpM4=)
                          25: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer (hash: EU+05lDy2eZ+biWNZqsBKeBd5wAaL9ncKbSIBorHBAY=)
                          26: mwftdzFoum4LC-Pl3LLPeB96yCo.cer (hash: /vbcTSyhLa503tMKyXeVlxqDY44xCj78Thw1YE5+Smc=)
                          27: 48LJS_VpO0HwWh1WV9GnhLXVcmE.cer (hash: piwFoQzJ0vrE+Md1TDjt5G3QE60FVx7H45JUQhQD6+Y=)
                          28: qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer (hash: /6dmDudJs2BiIcgOIvAtzIZ+hOFbd56Adla99blCJ00=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Jul 2024 00:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3647 (0xe3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Jul 18 00:25:27 2024 GMT
            Not After : Jul 20 00:25:27 2024 GMT
        Subject: CN=669860f7-e918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1f:e3:64:75:b0:83:84:1c:f6:2d:24:bc:9d:
                    3b:7b:f4:bc:a9:b7:a2:19:5c:df:66:e9:4a:e3:c9:
                    5e:24:a0:54:73:a5:11:c7:ff:06:ea:3f:45:f3:12:
                    e0:f0:22:97:81:60:16:51:3f:16:db:5a:f1:ef:d7:
                    5e:d3:fb:ac:81:2a:96:4c:8b:06:9e:22:21:76:fa:
                    a0:49:1a:74:f5:a8:8d:74:4a:6c:79:3f:23:dc:63:
                    90:de:b4:bb:0f:40:2b:52:e5:ad:fa:1b:cd:22:f6:
                    ce:71:99:79:b4:8b:44:30:17:8b:55:0e:9f:f2:11:
                    5c:95:bd:67:0e:4e:88:7a:97:c0:b2:49:4d:f6:20:
                    6b:58:92:9f:3e:95:a2:42:8e:5f:ad:68:f0:2e:fb:
                    bf:95:fe:f9:23:17:cf:79:62:26:c9:2d:8a:8d:6e:
                    d3:90:b5:03:06:7d:33:ad:17:80:7a:89:db:e7:53:
                    c1:a3:f9:8d:16:9d:99:9a:2d:2b:a5:6c:b9:c7:19:
                    01:5e:e9:7e:6e:15:53:c0:1d:b2:25:4d:d3:87:2f:
                    4f:d3:a1:3b:bf:b7:4b:fb:2b:f4:b2:fb:a2:75:db:
                    82:9d:42:32:aa:dd:29:5e:ae:32:07:2a:8a:26:bd:
                    d2:67:76:8b:35:1c:c8:92:02:80:46:55:e4:2c:f1:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6F:17:23:4C:88:76:EE:A2:5D:7C:80:D5:0E:5E:4C:0A:33:2A:A1
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cd:2c:08:65:04:66:b5:ca:a9:6c:fd:bd:62:e2:9e:1b:ae:
         c2:cd:78:74:4c:19:82:e7:af:d5:ef:bd:be:bf:55:2d:bb:48:
         60:b7:46:15:44:f3:b6:ba:6e:f7:08:9a:7e:2a:e6:54:4b:05:
         0f:19:e4:68:47:16:15:2b:dc:9d:a0:de:4e:13:53:39:3c:4b:
         cb:c3:37:ec:f7:67:75:9a:5a:64:12:0c:e6:2a:2b:07:4f:b3:
         ed:dc:89:e4:92:cb:e0:12:00:3e:bc:1f:ad:5c:2c:2e:e4:59:
         1b:39:b6:24:53:f5:f4:b9:31:f5:7c:94:4d:e7:f2:47:78:97:
         1b:e1:ab:4b:1e:ca:98:60:58:af:88:a6:0c:f5:9c:47:9a:f1:
         9a:a2:f2:a4:2e:bb:86:e3:89:06:5d:ff:5a:28:d8:0c:2f:81:
         f6:9d:a9:7d:a8:70:33:39:8f:44:e7:d7:81:09:6c:0e:49:1d:
         7d:6a:25:48:2b:7e:51:f4:9c:d1:64:d8:92:58:06:54:ba:1c:
         66:fb:cd:f1:72:ca:52:67:af:84:0e:7c:8c:42:b1:05:3d:8d:
         a1:ae:e3:2b:2a:d7:e9:82:6b:34:e4:91:5e:1e:71:1e:3d:59:
         0b:a5:02:11:cc:8b:a3:ae:c7:64:ac:ac:28:36:cf:33:2a:b6:
         11:b6:41:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 01:58:48 2024 by rpki-client on console-ams.rpki-client.org