Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
File:                     ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft (raw, json)
Hash identifier:          DaBhiqdlB77jzoOvkpZ0+OpWo5HMGHTdJJcwM4/aETA=
Subject key identifier:   75:B0:58:D9:8C:12:CA:C6:1A:5E:65:00:5D:D3:E2:20:3C:DA:05:05
Authority key identifier: 64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52
Certificate issuer:       /CN=F36185D8AF/serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
Certificate serial:       48
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
Manifest number:          47
Signing time:             Wed 23 Oct 2024 02:57:12 +0000
Manifest this update:     Wed 23 Oct 2024 02:57:12 +0000
Manifest next update:     Fri 25 Oct 2024 02:57:12 +0000
Files and hashes:         1: ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl (hash: Lg2YeDQx+IFNGj/cvIs2tYAnPbk8+HtLMXIcmHWMeBc=)
                          2: 17AC05D05BD811EF91C62F65762E951A.roa (hash: pGO0PAidVvZBgK+RWqWHGbvgRG1IKwi6oTcbF8OQHYY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36185D8AF/serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
        Validity
            Not Before: Oct 23 02:57:12 2024 GMT
            Not After : Oct 25 02:57:12 2024 GMT
        Subject: CN=67186608-760c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a3:f2:0c:44:95:70:07:52:72:5b:e0:59:33:
                    bd:8c:ff:6d:11:7b:68:bb:89:bc:c5:bb:3b:98:a9:
                    eb:c3:82:16:13:b1:3e:99:9d:9e:76:ec:4c:45:29:
                    fb:c1:11:09:0a:be:21:ee:66:02:11:0a:d8:18:cc:
                    d4:4b:12:56:53:15:0a:24:2a:3c:31:56:7b:28:bd:
                    56:16:db:d9:d2:b1:d4:a3:66:8b:f3:78:e2:03:9b:
                    c5:24:6c:6f:d7:d4:aa:5e:e5:e5:5b:5a:e4:03:89:
                    e0:ca:6e:c5:8b:3f:b3:5f:2d:c3:7e:7f:c1:9b:7b:
                    ac:d0:c7:11:11:5f:82:2d:a9:af:f5:d2:20:88:b7:
                    3d:0e:c0:43:c6:0e:18:75:0b:cc:0e:7c:85:8c:9f:
                    11:41:8b:d8:47:22:d9:3e:ed:8e:ff:bb:3e:ff:28:
                    d6:67:32:e2:d3:0d:48:42:62:2b:62:68:ee:f3:8a:
                    db:21:e6:ba:b9:85:9a:d3:11:37:e2:63:2f:73:20:
                    d6:87:4d:2a:05:d1:2a:0a:fe:68:1c:e0:45:4e:7b:
                    4e:0b:24:6b:8a:a1:95:e8:22:2f:66:89:b6:c0:43:
                    4a:05:b2:f9:a1:b0:4c:a7:62:53:28:73:04:a0:e6:
                    63:91:b3:70:31:e9:4f:63:dd:f0:67:62:9d:5c:af:
                    30:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B0:58:D9:8C:12:CA:C6:1A:5E:65:00:5D:D3:E2:20:3C:DA:05:05
            X509v3 Authority Key Identifier:
                keyid:64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:69:58:12:04:e7:a3:8c:30:fb:06:28:e5:82:72:a9:be:26:
         e8:6a:f3:2f:18:5e:01:90:29:ca:6f:25:b3:51:9f:bb:b0:b6:
         68:7b:ff:3f:51:0a:a7:cd:69:80:b2:4a:b6:c0:72:48:ff:cf:
         48:b6:1f:aa:40:f6:fa:10:81:7d:79:cb:85:f7:80:97:76:ca:
         88:63:8d:fc:d2:20:f8:67:df:dc:22:ff:68:ff:61:86:ca:54:
         28:db:3f:8f:f1:71:1c:4e:77:11:2d:d2:3e:da:ab:ef:7b:35:
         8a:f9:d5:62:ff:47:eb:ac:bb:2e:52:fa:ae:e9:88:86:e3:99:
         14:0a:04:79:36:55:ac:27:23:98:6a:19:f0:7b:78:fd:f9:bb:
         c2:ed:4b:97:ac:dc:fb:f8:0a:e8:f4:bb:86:ae:79:06:29:bc:
         a3:1d:c4:d4:d5:6c:4a:9f:5a:74:d5:a4:99:d4:65:06:1c:05:
         41:6c:8b:a4:bd:f2:93:f2:24:ce:42:ba:66:63:3d:01:c8:62:
         1a:7b:e6:7c:f0:fe:bb:82:54:28:c8:52:41:33:7b:38:e3:b6:
         31:39:b6:38:0b:70:ff:de:bb:08:58:5f:44:ef:28:18:52:b1:
         2e:fe:b1:88:b7:00:fb:b9:2b:34:47:0e:5c:eb:51:73:71:1f:
         b2:51:e9:e6
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBSDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
ODVEOEFGMTEwLwYDVQQFEyg2NEQ0QkMzRUFEOTE5QUU4QTQ2NzMyOTUxMEI1MjA0
MTg1MzM1QzUyMB4XDTI0MTAyMzAyNTcxMloXDTI0MTAyNTAyNTcxMlowGDEWMBQG
A1UEAxMNNjcxODY2MDgtNzYwYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJij8gxElXAHUnJb4FkzvYz/bRF7aLuJvMW7O5ip68OCFhOxPpmdnnbsTEUp
+8ERCQq+Ie5mAhEK2BjM1EsSVlMVCiQqPDFWeyi9Vhbb2dKx1KNmi/N44gObxSRs
b9fUql7l5Vta5AOJ4MpuxYs/s18tw35/wZt7rNDHERFfgi2pr/XSIIi3PQ7AQ8YO
GHULzA58hYyfEUGL2Eci2T7tjv+7Pv8o1mcy4tMNSEJiK2Jo7vOK2yHmurmFmtMR
N+JjL3Mg1odNKgXRKgr+aBzgRU57Tgska4qhlegiL2aJtsBDSgWy+aGwTKdiUyhz
BKDmY5GzcDHpT2Pd8GdinVyvMDUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBR1sFjZ
jBLKxhpeZQBd0+IgPNoFBTAfBgNVHSMEGDAWgBRk1Lw+rZGa6KRnMpUQtSBBhTNc
UjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTg1RDgvMUMxMzQ4QjQ1QkQ3MTFFRkFGMkMzRDVFNzYyRTk1MUEvWk5TOFBx
MlJtdWlrWnpLVkVMVWdRWVV6WEZJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWk5TOFBxMlJtdWlrWnpLVkVMVWdRWVV6WEZJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYxODVEOC8xQzEzNDhCNDVCRDcxMUVGQUYyQzNENUU3NjJF
OTUxQS9aTlM4UHEyUm11aWtaektWRUxVZ1FZVXpYRkkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAJxpWBIE56OMMPsGKOWCcqm+Juhq8y8Y
XgGQKcpvJbNRn7uwtmh7/z9RCqfNaYCySrbAckj/z0i2H6pA9voQgX15y4X3gJd2
yohjjfzSIPhn39wi/2j/YYbKVCjbP4/xcRxOdxEt0j7aq+97NYr51WL/R+usuy5S
+q7piIbjmRQKBHk2VawnI5hqGfB7eP35u8LtS5es3Pv4Cuj0u4aueQYpvKMdxNTV
bEqfWnTVpJnUZQYcBUFsi6S98pPyJM5CumZjPQHIYhp75nzw/ruCVCjIUkEzezjj
tjE5tjgLcP/euwhYX0TvKBhSsS7+sYi3APu5KzRHDlzrUXNxH7JR6eY=
-----END CERTIFICATE-----