Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
File:                     8WD77pBHtMM9L6HZ04IBrg0Yw58.mft (raw, json)
Hash identifier:          +nv0SAP1ikEbRnDES8Vd6ksS6q4PsljXLX/iklHzrSs=
Subject key identifier:   74:1A:20:3F:E6:10:A5:FC:25:E6:89:32:E6:EA:5A:D5:A1:E4:44:9E
Authority key identifier: F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F
Certificate issuer:       /CN=F361C63DAF/serialNumber=F160FBEE9047B4C33D2FA1D9D38201AE0D18C39F
Certificate serial:       28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
Manifest number:          27
Signing time:             Wed 23 Oct 2024 03:03:21 +0000
Manifest this update:     Wed 23 Oct 2024 03:03:20 +0000
Manifest next update:     Fri 25 Oct 2024 03:03:20 +0000
Files and hashes:         1: 8WD77pBHtMM9L6HZ04IBrg0Yw58.crl (hash: 2bwAVKK8k2+1eLjTKWKKh6ymNJl42WjgIuKy8dZ5RW4=)
                          2: C7ECF7DE74D211EFA2250567762E951A.roa (hash: 2JN5T3Dym/uP+aQB4QDNBNpdJtMGonjqC1jPbmHacMk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C63DAF/serialNumber=F160FBEE9047B4C33D2FA1D9D38201AE0D18C39F
        Validity
            Not Before: Oct 23 03:03:20 2024 GMT
            Not After : Oct 25 03:03:20 2024 GMT
        Subject: CN=67186779-7215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:65:67:83:25:9d:3f:06:17:18:09:7f:86:2e:
                    89:78:00:73:3d:82:72:cc:0c:07:f3:5e:5b:f5:07:
                    ca:38:50:aa:b9:1c:9d:60:7c:43:d1:5a:45:20:93:
                    8b:28:0b:11:02:49:b0:45:48:49:d0:00:75:5b:39:
                    18:12:71:94:3e:39:82:fe:fb:ef:1e:40:82:88:e3:
                    1e:62:7f:15:e9:0d:8b:f8:b6:40:22:e0:d7:89:6b:
                    4c:43:4f:b1:e4:5d:6b:ae:f9:9a:4a:44:0d:c6:9d:
                    c4:2d:1a:38:63:68:51:15:4b:85:58:67:11:be:d6:
                    98:ea:30:f2:46:04:ac:2f:8d:a1:02:2e:33:15:b0:
                    56:87:f5:cb:20:52:cf:b3:de:02:8f:69:07:1b:57:
                    15:64:cd:04:75:66:bf:26:9c:59:37:81:fb:d3:fa:
                    fa:d7:6f:18:16:96:94:d4:89:05:9a:96:c0:2d:ef:
                    88:57:3b:f9:13:54:8a:14:31:dd:da:00:3c:98:51:
                    82:bd:35:e5:e5:93:45:a1:0a:30:b7:43:fc:a2:d4:
                    33:fa:a3:f8:b8:b1:37:84:59:7b:4a:98:28:21:50:
                    19:f2:63:3a:6d:dc:d9:75:98:7a:2c:50:fc:bb:23:
                    df:b9:88:c4:a8:39:7e:bd:ff:84:d6:a3:37:0c:3c:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1A:20:3F:E6:10:A5:FC:25:E6:89:32:E6:EA:5A:D5:A1:E4:44:9E
            X509v3 Authority Key Identifier:
                keyid:F1:60:FB:EE:90:47:B4:C3:3D:2F:A1:D9:D3:82:01:AE:0D:18:C3:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8WD77pBHtMM9L6HZ04IBrg0Yw58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C63D/5342378C74D211EFA0CA8366762E951A/8WD77pBHtMM9L6HZ04IBrg0Yw58.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1a:ec:41:da:ca:c4:71:07:a8:79:f8:80:a3:f1:36:0f:cf:
         62:b1:07:26:7b:18:fb:10:95:de:42:cc:c8:58:8d:ce:9f:bb:
         b6:72:35:d6:25:aa:9d:f0:00:2a:2c:bf:74:b4:8e:1b:a9:35:
         73:18:8f:94:7a:10:01:ed:31:6e:8a:08:b5:b2:85:83:b2:ea:
         df:0e:07:f1:39:4c:7d:e0:81:10:5e:5c:00:6b:a6:0c:37:2e:
         d4:30:14:c7:9b:4e:a0:3e:40:70:5e:b7:9e:4e:c7:c2:94:ab:
         fe:53:84:0c:e9:4c:6a:fe:e5:aa:10:d9:93:15:9d:f0:df:1a:
         42:2a:fe:e8:0a:16:53:b6:53:fc:89:6b:6f:e3:ea:b5:ed:7f:
         05:d7:9a:25:57:0f:ee:ed:12:fb:6f:64:6a:83:43:11:7b:b2:
         77:73:d8:a9:68:e8:b0:50:19:44:b7:cb:be:09:30:06:7a:e3:
         dc:d5:82:ee:0c:1a:72:8b:6b:69:eb:70:bb:58:8e:63:12:0a:
         52:b2:f4:b9:70:ac:be:3d:59:ef:d6:6f:a8:36:fe:ef:2f:11:
         62:7b:eb:39:a2:20:99:25:27:a8:3c:d1:ce:18:e3:a2:d1:5d:
         2e:df:4a:39:23:0d:99:75:a7:32:20:72:6a:57:10:5e:ef:82:
         d3:1f:3b:d8
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBKDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
QzYzREFGMTEwLwYDVQQFEyhGMTYwRkJFRTkwNDdCNEMzM0QyRkExRDlEMzgyMDFB
RTBEMThDMzlGMB4XDTI0MTAyMzAzMDMyMFoXDTI0MTAyNTAzMDMyMFowGDEWMBQG
A1UEAxMNNjcxODY3NzktNzIxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANRlZ4MlnT8GFxgJf4YuiXgAcz2CcswMB/NeW/UHyjhQqrkcnWB8Q9FaRSCT
iygLEQJJsEVISdAAdVs5GBJxlD45gv777x5AgojjHmJ/FekNi/i2QCLg14lrTENP
seRda675mkpEDcadxC0aOGNoURVLhVhnEb7WmOow8kYErC+NoQIuMxWwVof1yyBS
z7PeAo9pBxtXFWTNBHVmvyacWTeB+9P6+tdvGBaWlNSJBZqWwC3viFc7+RNUihQx
3doAPJhRgr015eWTRaEKMLdD/KLUM/qj+LixN4RZe0qYKCFQGfJjOm3c2XWYeixQ
/Lsj37mIxKg5fr3/hNajNww85psCAwEAAaOCArgwggK0MB0GA1UdDgQWBBR0GiA/
5hCl/CXmiTLm6lrVoeREnjAfBgNVHSMEGDAWgBTxYPvukEe0wz0vodnTggGuDRjD
nzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MUM2M0QvNTM0MjM3OEM3NEQyMTFFRkEwQ0E4MzY2NzYyRTk1MUEvOFdENzdw
Qkh0TU05TDZIWjA0SUJyZzBZdzU4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvOFdENzdwQkh0TU05TDZIWjA0SUJyZzBZdzU4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYxQzYzRC81MzQyMzc4Qzc0RDIxMUVGQTBDQTgzNjY3NjJF
OTUxQS84V0Q3N3BCSHRNTTlMNkhaMDRJQnJnMFl3NTgubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIwa7EHaysRxB6h5+ICj8TYPz2KxByZ7
GPsQld5CzMhYjc6fu7ZyNdYlqp3wACosv3S0jhupNXMYj5R6EAHtMW6KCLWyhYOy
6t8OB/E5TH3ggRBeXABrpgw3LtQwFMebTqA+QHBet55Ox8KUq/5ThAzpTGr+5aoQ
2ZMVnfDfGkIq/ugKFlO2U/yJa2/j6rXtfwXXmiVXD+7tEvtvZGqDQxF7sndz2Klo
6LBQGUS3y74JMAZ649zVgu4MGnKLa2nrcLtYjmMSClKy9LlwrL49We/Wb6g2/u8v
EWJ76zmiIJklJ6g80c4Y46LRXS7fSjkjDZl1pzIgcmpXEF7vgtMfO9g=
-----END CERTIFICATE-----