Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft
File:                     VG_z86lS6oeZmUVVaekH4Pt8gZs.mft (raw, json)
Hash identifier:          oZcqAwExZVvlz0MbQBiYBmOJlA661tdlvP6jGkvqWwM=
Subject key identifier:   58:3A:A5:EF:6A:40:96:26:55:F5:CE:33:02:01:C7:13:D1:AC:4B:65
Authority key identifier: 54:6F:F3:F3:A9:52:EA:87:99:99:45:55:69:E9:07:E0:FB:7C:81:9B
Certificate issuer:       /CN=F3611ED8AF/serialNumber=546FF3F3A952EA879999455569E907E0FB7C819B
Certificate serial:       4B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VG_z86lS6oeZmUVVaekH4Pt8gZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft
Manifest number:          4A
Signing time:             Fri 22 Nov 2024 02:55:03 +0000
Manifest this update:     Fri 22 Nov 2024 02:55:03 +0000
Manifest next update:     Sun 24 Nov 2024 02:55:03 +0000
Files and hashes:         1: VG_z86lS6oeZmUVVaekH4Pt8gZs.crl (hash: kFbUWwNPdwFxZiW42BRw0bOgKJMNJ66qSy/L0hRF9qY=)
                          2: 8C71A80E71D911EF95953447762E951A.roa (hash: qQJ1tyFupoDgwet6xtHwuOu1NKoamzpsB9579wpp6Y4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VG_z86lS6oeZmUVVaekH4Pt8gZs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611ED8AF/serialNumber=546FF3F3A952EA879999455569E907E0FB7C819B
        Validity
            Not Before: Nov 22 02:55:03 2024 GMT
            Not After : Nov 24 02:55:03 2024 GMT
        Subject: CN=673ff287-c763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:70:c9:25:4f:ad:f0:f8:dd:de:d2:34:98:
                    e2:ae:c1:7e:46:3b:ab:f9:df:e6:bf:03:48:e7:ef:
                    49:3c:ac:e9:7f:f0:b1:de:76:38:ac:d2:72:1b:0b:
                    69:f6:34:8d:28:c9:0e:42:6c:34:5f:34:86:4d:1b:
                    91:a8:3c:ab:2f:e4:20:9a:69:ab:3c:96:ee:f0:0a:
                    a2:b0:2d:ef:28:f9:9a:8c:0a:14:cf:c9:53:3b:59:
                    07:c4:14:b1:bc:4c:62:9c:a1:68:00:cb:2a:ac:81:
                    41:be:e9:28:c0:37:ba:25:4b:11:6f:e2:ae:bd:e7:
                    da:e1:aa:32:e7:c9:5f:d3:b5:a8:7f:f2:e6:85:b0:
                    69:4b:e3:81:c2:87:3e:6d:19:06:c4:c3:3b:cd:4f:
                    75:e2:2c:95:79:c4:b1:59:60:31:1d:59:78:84:0a:
                    b9:12:ce:51:30:f2:74:99:73:41:2a:d4:8b:df:e9:
                    c4:4d:c1:75:78:58:e7:f0:f1:c2:63:79:a2:50:af:
                    f8:e2:cf:29:9e:a0:b4:d0:b1:48:65:7a:93:cc:ae:
                    09:76:d4:c0:f0:59:18:46:a5:38:2f:6f:a8:3a:21:
                    ab:49:23:94:a3:83:de:c4:fd:66:a2:df:15:36:de:
                    62:c2:f4:5f:70:9d:f3:46:9a:63:12:6b:1e:dd:03:
                    6c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3A:A5:EF:6A:40:96:26:55:F5:CE:33:02:01:C7:13:D1:AC:4B:65
            X509v3 Authority Key Identifier:
                keyid:54:6F:F3:F3:A9:52:EA:87:99:99:45:55:69:E9:07:E0:FB:7C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VG_z86lS6oeZmUVVaekH4Pt8gZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6e:87:ed:e1:43:ac:d0:4c:b9:aa:72:41:cc:51:85:e1:6b:
         ae:75:cb:d2:74:a4:dd:31:17:e3:ad:1e:31:38:b8:68:c5:09:
         66:4e:39:33:16:11:4f:57:26:da:10:08:d6:bb:2b:48:88:de:
         f7:e0:80:4d:74:2d:55:df:3e:14:0c:de:4b:87:f8:48:e2:e0:
         47:6d:d3:fe:c9:b6:69:be:8c:ba:17:19:c0:3e:df:78:6f:51:
         c8:0f:3f:07:57:69:5b:ab:c9:f4:79:4d:12:db:b3:40:76:ab:
         42:e5:e9:18:bf:b1:78:58:64:98:f5:01:e4:8e:d5:4e:b0:bc:
         86:d3:04:cb:25:1c:21:07:dc:e1:d4:68:ed:c0:a1:c0:31:9a:
         d7:e6:1a:ff:f1:c9:21:d0:bd:66:fc:14:ab:76:74:e4:a4:d3:
         5e:e1:d8:be:73:d0:d4:87:4b:a6:95:eb:d0:67:05:bf:97:98:
         a3:7e:d9:ba:cc:91:b5:38:15:ba:2e:db:8e:31:75:7e:9f:8e:
         46:7a:25:4e:26:96:f1:a0:9c:8a:bc:9b:64:f1:be:f4:00:6f:
         cc:c5:54:12:ee:f9:fc:9e:e1:2c:3c:d8:81:f1:1d:5e:6c:c3:
         89:8f:69:35:f6:99:99:32:59:78:11:b7:04:76:c5:f9:7d:77:
         6e:60:37:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----