Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
File:                     aRHVUPOKT27JEBz-cu1_bZFhR3E.mft (raw, json)
Hash identifier:          0NE3tWLoDfgOfnzj0UFuQsh5GOc5+jVfRg0oi2pPo20=
Subject key identifier:   94:B7:0D:62:5E:E2:76:0F:53:1A:A3:71:DE:F5:D9:9F:EB:D2:7A:60
Authority key identifier: 69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71
Certificate issuer:       /CN=F3615826AF/serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
Certificate serial:       04DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
Manifest number:          04DC
Signing time:             Thu 21 Nov 2024 01:34:43 +0000
Manifest this update:     Thu 21 Nov 2024 01:34:43 +0000
Manifest next update:     Sat 23 Nov 2024 01:34:43 +0000
Files and hashes:         1: aRHVUPOKT27JEBz-cu1_bZFhR3E.crl (hash: ADbeY+8a8EuHMfpGFxmgdtVEUkWEElls77GMQxo+JY0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615826AF/serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
        Validity
            Not Before: Nov 21 01:34:43 2024 GMT
            Not After : Nov 23 01:34:43 2024 GMT
        Subject: CN=673e8e33-e274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:a9:b4:2e:1c:a9:6a:dc:3d:cd:42:0c:01:
                    d5:ec:92:75:c1:f5:a4:32:3d:80:7d:a4:2a:e1:8c:
                    b3:7c:ca:a3:c3:f9:56:2a:9d:79:f6:ae:ab:1c:98:
                    70:95:fa:a9:00:c1:07:f4:f6:92:18:35:37:00:89:
                    4c:4a:57:35:c4:56:20:fe:93:3c:da:37:8d:10:91:
                    29:85:d8:38:28:b8:1d:e8:38:28:20:77:f5:86:2b:
                    29:97:ce:fe:9d:e8:93:6c:dd:c6:01:91:d7:eb:a9:
                    ad:51:2c:5e:11:66:47:03:7f:b0:9e:dc:4d:4b:3e:
                    72:73:18:58:bf:bb:d8:24:04:15:40:1c:f8:55:d4:
                    9c:19:41:63:61:2f:41:4c:40:77:71:28:0e:2d:a5:
                    ca:20:55:08:78:b2:e1:e4:72:09:c4:56:34:2c:0a:
                    b7:7d:c4:de:5e:b2:86:11:42:7d:a4:7b:99:3c:86:
                    fa:42:64:77:f8:c2:54:c3:5d:77:f5:7d:cf:67:12:
                    9c:40:00:43:24:2d:6e:3c:27:36:41:ae:ed:dc:fd:
                    6d:d1:c3:4b:51:11:15:85:08:25:d8:ff:e9:d7:d7:
                    33:82:f4:8d:63:23:eb:41:e4:76:94:d3:5b:d2:f9:
                    ba:68:7d:9c:89:78:c2:2e:e4:cf:54:f4:ae:a8:5d:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B7:0D:62:5E:E2:76:0F:53:1A:A3:71:DE:F5:D9:9F:EB:D2:7A:60
            X509v3 Authority Key Identifier:
                keyid:69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:22:0f:0b:fc:72:7c:8f:9b:74:73:b7:37:00:48:ad:d4:f3:
         21:7a:53:c2:a8:0a:b2:d8:81:2e:43:d0:e9:90:e9:0f:b1:24:
         a1:47:4b:29:1e:50:d2:5b:9d:34:e6:80:c3:98:7d:51:a4:97:
         e7:c0:9d:58:cd:a9:d0:eb:ef:ee:ab:9c:7b:92:b6:8a:7a:4f:
         e7:5a:22:4f:0c:e8:37:5f:43:a4:db:db:75:a7:74:b4:2d:11:
         51:aa:4b:6a:9f:c5:20:d0:d9:4c:07:16:32:e2:ef:4c:b8:1f:
         e1:ab:f8:b7:4a:75:04:70:40:42:9f:7d:df:5f:cf:92:e1:ce:
         2f:08:5c:73:f5:c3:61:15:ed:c6:e6:9f:3f:f6:0c:40:6f:93:
         99:47:85:5d:ce:1f:a4:9b:fa:fa:07:74:01:36:fa:25:a9:39:
         50:ac:40:fa:a0:8f:97:34:a3:f0:07:b1:3f:45:cd:0e:62:41:
         49:43:20:0a:a7:13:e3:33:9d:6a:10:bd:bc:7f:35:cd:3a:60:
         1a:e2:58:be:e7:6c:7d:27:6a:26:13:09:ac:8a:ac:f9:08:52:
         a8:b2:ff:c0:01:20:7d:22:db:ef:12:57:d6:2d:ee:4a:51:15:
         0b:ac:2a:7c:ce:15:b8:9d:a5:fa:f1:d3:12:d5:0c:8f:d5:d6:
         ea:72:6d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----