Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
File:                     7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft (raw, json)
Hash identifier:          zCor0N8nvozCXYbxmkfayU0QQ9I7+AvghIsQZrWP1EU=
Subject key identifier:   A4:CC:7E:E4:2B:C4:6C:93:1D:F4:2A:7C:C5:55:5B:03:02:B9:3A:48
Authority key identifier: EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
Certificate issuer:       /CN=F36180A1AR/serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Certificate serial:       49
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
Manifest number:          47
Signing time:             Mon 16 Sep 2024 02:49:32 +0000
Manifest this update:     Mon 16 Sep 2024 02:49:31 +0000
Manifest next update:     Wed 18 Sep 2024 02:49:31 +0000
Files and hashes:         1: 7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl (hash: R04b1UAZPjdKOOphvAJeNupgvZ3BeNzVtnspZQoE46w=)
                          2: 125EF2A63F7011EFB90A2881762E951A.roa (hash: CYHaNxXH3G1/sB9APmxu1n3UtTgC5Edc0gfpDVgJNk8=)
                          3: 41A178E4429111EF8883AAAA762E951A.roa (hash: MkpjkL83C02qTlHENSDXSaJZwjQp8E4rGj/mJx7w1Cc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
                          rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Sep 2024 00:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36180A1AR/serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
        Validity
            Not Before: Sep 16 02:49:31 2024 GMT
            Not After : Sep 18 02:49:31 2024 GMT
        Subject: CN=66e79cbb-3f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:eb:a8:14:4c:57:9a:7c:cb:db:67:55:d9:
                    b1:d3:9c:8d:30:e9:c8:ac:2d:1d:04:61:25:1a:ca:
                    f4:c5:4d:41:35:52:13:e8:ab:65:a8:46:37:aa:ad:
                    c3:d3:d6:c9:13:74:e3:78:13:fa:01:f3:37:a3:ed:
                    2f:ee:ac:cd:86:a4:84:8b:7c:6e:28:fb:4f:be:1b:
                    b6:aa:fc:cb:24:79:d9:a8:ac:5b:ac:e5:34:73:d2:
                    67:b1:a5:4c:0f:c5:12:cd:a5:95:0b:20:90:3d:c1:
                    aa:bc:b1:aa:44:18:71:3f:c0:27:65:fe:aa:2b:00:
                    48:92:94:27:ba:7c:ce:14:fd:17:14:df:3e:97:d1:
                    3d:21:94:75:03:ac:53:ae:25:e2:1e:a7:4f:7e:de:
                    86:2e:be:71:77:48:96:fa:72:e2:84:e7:33:8c:b2:
                    93:1b:0c:8b:5e:c5:20:f4:f9:98:af:b0:15:f0:3a:
                    c3:59:1b:f1:5c:78:7f:e8:be:db:b4:76:cb:30:d0:
                    cb:c3:61:37:5a:32:00:87:50:b2:e9:e2:c8:f1:26:
                    4f:e4:d6:59:f2:d0:82:9e:e2:cf:1f:84:05:fe:ee:
                    ce:99:8e:7d:26:a5:03:2b:07:45:bb:fb:63:27:b7:
                    c0:b3:ff:9a:50:fb:a6:ef:ea:aa:4b:09:94:4e:9d:
                    6f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CC:7E:E4:2B:C4:6C:93:1D:F4:2A:7C:C5:55:5B:03:02:B9:3A:48
            X509v3 Authority Key Identifier:
                keyid:EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d2:27:d6:87:95:13:90:b3:e6:66:89:d8:49:a2:e2:fd:1c:
         d4:d8:15:47:00:4b:cf:37:2f:df:7b:41:65:8c:50:ca:43:90:
         f6:f8:dc:c7:bc:7c:c6:3d:2d:4d:9e:fd:93:df:dd:75:eb:04:
         5f:07:0b:89:ef:5d:29:4d:44:d5:0f:96:58:cb:9e:4e:1a:fd:
         3e:83:c9:38:6e:aa:02:bf:9b:b2:d8:44:98:78:a6:03:2d:67:
         b7:f9:aa:d5:31:d5:3c:61:3d:eb:5b:31:d5:82:a0:a7:ed:d6:
         3d:3e:f7:5a:dc:9b:28:9b:4b:70:09:29:17:79:99:83:ed:92:
         53:49:04:b6:76:15:d6:b7:1f:5b:75:55:4f:5d:98:00:00:58:
         99:e6:3b:00:d9:7d:58:15:80:d8:ad:4c:36:0d:c5:fc:bd:8c:
         68:3f:dc:28:49:d4:fb:df:a7:1e:7c:21:7c:9a:9d:ba:ed:d7:
         f1:da:b8:dd:b9:26:fe:62:73:69:9d:58:46:fe:02:b1:ca:d3:
         26:25:b5:c5:76:04:06:0e:ad:9d:83:9b:5d:4a:20:c4:38:77:
         a5:f7:46:50:bd:bd:77:d6:cd:60:3f:55:77:0e:56:a7:e9:86:
         39:3e:91:06:14:fd:09:42:e6:64:ee:01:40:af:3f:90:a2:b2:
         f7:5f:9f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----