Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361A501/6D9023EC13FD11EEAB8189244AD9E6FC/e2w_rdEpusV-k9AUh9QxyV1oTeE.mft
File:                     e2w_rdEpusV-k9AUh9QxyV1oTeE.mft (raw, json)
Hash identifier:          zc+jbduwgOD1+2vdRlRrI+JjQGKqxVobNSnVCzsuaO8=
Subject key identifier:   02:69:A0:3D:C8:2E:12:5C:CA:5B:D6:E7:1B:6A:4B:FD:93:4C:63:D8
Authority key identifier: 7B:6C:3F:AD:D1:29:BA:C5:7E:93:D0:14:87:D4:31:C9:5D:68:4D:E1
Certificate issuer:       /CN=F361A501AF/serialNumber=7B6C3FADD129BAC57E93D01487D431C95D684DE1
Certificate serial:       0214
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e2w_rdEpusV-k9AUh9QxyV1oTeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361A501/6D9023EC13FD11EEAB8189244AD9E6FC/e2w_rdEpusV-k9AUh9QxyV1oTeE.mft
Manifest number:          0214
Signing time:             Fri 22 Nov 2024 02:20:44 +0000
Manifest this update:     Fri 22 Nov 2024 02:20:43 +0000
Manifest next update:     Sun 24 Nov 2024 02:20:43 +0000
Files and hashes:         1: e2w_rdEpusV-k9AUh9QxyV1oTeE.crl (hash: gAvB19ITQElwQy/0eqtKJCQrHKGi1DpDFFyuS5SyOaQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361A501/6D9023EC13FD11EEAB8189244AD9E6FC/e2w_rdEpusV-k9AUh9QxyV1oTeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361A501/6D9023EC13FD11EEAB8189244AD9E6FC/e2w_rdEpusV-k9AUh9QxyV1oTeE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e2w_rdEpusV-k9AUh9QxyV1oTeE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532 (0x214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361A501AF/serialNumber=7B6C3FADD129BAC57E93D01487D431C95D684DE1
        Validity
            Not Before: Nov 22 02:20:43 2024 GMT
            Not After : Nov 24 02:20:43 2024 GMT
        Subject: CN=673fea7c-cab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:5f:67:e6:36:dc:e3:e6:c7:b1:b4:69:f7:
                    78:c6:ea:ae:fd:68:c4:0e:96:f8:81:96:1b:bd:6c:
                    69:03:d2:3b:7b:22:d7:d6:aa:a5:0f:43:ec:6a:18:
                    24:7e:7f:75:88:30:71:9e:8d:a8:05:40:b4:26:7a:
                    df:ed:4f:02:81:54:2b:62:62:77:76:95:bf:66:5d:
                    68:5c:d7:85:4e:10:b0:95:a6:60:fa:64:0b:30:92:
                    e2:5d:e4:83:8b:e0:3d:cf:51:d2:46:23:ea:3a:c8:
                    9a:77:6c:4c:9c:36:40:d8:6f:8e:9c:4d:21:07:3e:
                    41:c7:b8:fe:40:99:31:28:4b:69:0e:f6:ed:96:ce:
                    b9:5a:b9:23:87:26:91:fc:ce:64:b6:6c:2d:f5:e2:
                    8e:04:49:80:e0:62:80:be:7a:0f:aa:b8:d6:ec:fd:
                    7f:c4:a0:81:60:54:54:46:3d:92:ff:d9:8a:27:67:
                    26:8c:c6:00:60:42:58:4c:b7:89:d6:86:16:3d:e2:
                    ed:29:1e:a1:c3:3f:0a:9b:af:91:ed:f3:38:39:4f:
                    41:22:30:e9:7f:c5:56:ea:fe:6b:e0:94:92:52:5e:
                    11:2b:5b:7a:3b:23:52:9d:ad:9f:91:c7:46:29:cf:
                    a4:6a:bb:84:38:97:28:f7:e1:8c:0a:e4:ab:28:c7:
                    52:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:69:A0:3D:C8:2E:12:5C:CA:5B:D6:E7:1B:6A:4B:FD:93:4C:63:D8
            X509v3 Authority Key Identifier:
                keyid:7B:6C:3F:AD:D1:29:BA:C5:7E:93:D0:14:87:D4:31:C9:5D:68:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/6D9023EC13FD11EEAB8189244AD9E6FC/e2w_rdEpusV-k9AUh9QxyV1oTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e2w_rdEpusV-k9AUh9QxyV1oTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/6D9023EC13FD11EEAB8189244AD9E6FC/e2w_rdEpusV-k9AUh9QxyV1oTeE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ea:c9:b6:06:d3:59:fe:37:09:9c:dd:4d:8a:59:09:e8:52:
         4f:50:d1:7f:34:21:6f:85:12:28:79:ae:83:73:a7:95:61:af:
         0a:56:df:12:74:5f:50:64:1b:20:26:39:32:db:c0:3e:f5:73:
         65:32:24:72:f4:2f:45:95:cf:9f:5c:e4:30:e4:7b:db:58:b2:
         a6:31:d1:09:05:9c:59:93:84:bf:64:40:13:1d:6b:92:24:0b:
         4b:c6:67:ec:2d:04:f7:77:30:04:01:eb:a9:64:4a:15:36:6a:
         e7:87:1e:ff:ee:fe:d9:e9:a3:33:a7:60:1a:3e:d2:37:48:81:
         32:66:bf:d2:82:f2:40:ac:37:39:a5:a5:e3:7c:35:50:27:dc:
         22:73:2e:de:d3:b5:5f:2b:30:01:7e:2f:60:76:58:cb:f8:4f:
         bd:f7:b9:12:26:91:0d:fe:63:0b:98:06:d4:51:57:ca:35:a1:
         7a:b3:07:52:88:45:db:27:d6:09:12:b7:9d:19:e1:b5:b1:a3:
         bd:00:4e:b8:bb:89:64:2d:b5:71:8c:98:80:02:34:e9:c0:38:
         b4:76:1c:f7:89:9c:88:27:fe:89:a7:1f:8f:a7:b6:45:b9:69:
         f1:d5:4c:69:6c:de:a5:93:ff:a8:60:8d:76:93:32:6f:e5:17:
         cd:2e:50:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----