Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.mft
File:                     FvKYpXAKlUr3VINg7kAxK0QV8ok.mft (raw, json)
Hash identifier:          VSSEqfKcW4UBhXUlfoWYtmGsVHJOnvNxoigO6DNAd20=
Subject key identifier:   21:1A:74:5E:BF:1F:9C:9F:D4:1F:D0:04:36:58:1F:6A:C7:AF:5F:7B
Authority key identifier: 16:F2:98:A5:70:0A:95:4A:F7:54:83:60:EE:40:31:2B:44:15:F2:89
Certificate issuer:       /CN=F3627EC7AF/serialNumber=16F298A5700A954AF7548360EE40312B4415F289
Certificate serial:       0517
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FvKYpXAKlUr3VINg7kAxK0QV8ok.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.mft
Manifest number:          0511
Signing time:             Fri 22 Nov 2024 01:31:52 +0000
Manifest this update:     Fri 22 Nov 2024 01:31:52 +0000
Manifest next update:     Sun 24 Nov 2024 01:31:52 +0000
Files and hashes:         1: FvKYpXAKlUr3VINg7kAxK0QV8ok.crl (hash: URvLqhibs+dIj4mBOhl8F4PcRnZPtZOALNHd9AcDk/k=)
                          2: C4FA7896D03C11EBA8661749F8AEA228.roa (hash: jwtHTncC31IOpjtFvay6E41Imtg2OhsGMmhIT7FmeKQ=)
                          3: 08688A10D03C11EBADCA1848F8AEA228.roa (hash: UULTXrL85+bezl68GtpqLoWAg4A3nsYr6IyfXGM6tP8=)
                          4: 8916514CD03C11EB905CD648F8AEA228.roa (hash: OozlDcr+dXwvsBnSt+q7FP27uCzQ+zfrjTjFPN+PVMo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FvKYpXAKlUr3VINg7kAxK0QV8ok.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627EC7AF/serialNumber=16F298A5700A954AF7548360EE40312B4415F289
        Validity
            Not Before: Nov 22 01:31:52 2024 GMT
            Not After : Nov 24 01:31:52 2024 GMT
        Subject: CN=673fdf08-2be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:87:2a:49:11:d1:69:9e:f9:e1:4d:03:78:
                    7e:05:7c:8f:a3:d8:9c:81:b3:30:69:54:2b:70:59:
                    2d:b5:28:4c:f4:c0:ea:f0:ce:d3:0c:eb:15:35:a3:
                    25:13:ad:a5:6c:5d:80:ca:cf:8f:2e:9d:10:d9:0e:
                    f7:ad:c6:78:59:fe:f6:80:b7:f5:fe:de:bf:59:09:
                    a2:f0:74:8f:d5:20:9d:bb:f3:9e:9c:53:fa:95:2d:
                    55:eb:05:d4:47:5b:c7:24:31:e1:64:47:3d:0c:11:
                    79:e3:3e:b1:b3:c0:81:52:09:12:d4:31:9c:a4:6e:
                    fa:ff:65:94:61:e7:37:cf:0e:f6:6e:c5:8d:c0:00:
                    bb:26:97:e7:17:67:5a:2a:ef:80:e0:76:93:64:2a:
                    32:55:aa:bd:c7:16:be:89:65:68:3e:29:48:f3:e8:
                    99:00:a6:25:b2:ef:5c:c3:c4:7c:f8:ad:7a:e7:77:
                    45:dc:bf:21:d5:d1:03:9c:7b:60:06:86:5b:f1:0c:
                    1d:47:70:80:42:f4:30:b4:89:65:bf:cf:66:0c:3c:
                    37:16:f3:ed:4b:6c:69:2a:b1:e2:08:e7:19:ee:31:
                    f6:9d:88:a9:ec:e7:27:b7:38:bf:75:00:04:6f:e5:
                    7f:40:03:3c:11:36:43:d2:31:87:d5:a1:03:ea:65:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1A:74:5E:BF:1F:9C:9F:D4:1F:D0:04:36:58:1F:6A:C7:AF:5F:7B
            X509v3 Authority Key Identifier:
                keyid:16:F2:98:A5:70:0A:95:4A:F7:54:83:60:EE:40:31:2B:44:15:F2:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FvKYpXAKlUr3VINg7kAxK0QV8ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:51:67:0a:8f:53:96:e1:bf:99:b3:6e:f7:f3:30:5c:39:65:
         e2:7c:27:9d:e7:aa:3d:27:bb:4b:68:5a:de:88:39:e6:57:43:
         67:ef:d3:2f:d1:8b:fe:da:5d:d9:97:1b:e5:00:a3:f6:3b:b6:
         3d:53:bf:6a:f9:94:9b:01:77:59:2f:f1:bd:c2:19:07:01:1d:
         6b:31:00:20:c3:96:1d:5f:2a:47:d5:25:05:6b:a5:7b:ba:28:
         34:de:6d:d4:1f:38:01:75:67:5a:fd:1d:a1:06:bc:fe:55:a0:
         2f:73:06:37:fe:53:e5:37:e0:b8:52:86:25:26:8f:de:25:35:
         bf:07:af:47:52:c7:0c:a4:d2:16:b9:51:03:ae:9a:bd:5b:90:
         ad:01:70:70:4b:58:1a:0a:20:d1:71:04:56:8d:34:04:b7:9e:
         e3:ba:f3:ee:55:87:9f:41:8d:d2:d8:0e:7a:fa:6c:46:64:26:
         4c:4a:25:46:9c:88:7a:dd:b8:5e:2d:79:b0:01:a4:5b:77:68:
         fe:47:d5:72:c4:93:34:a0:ac:10:26:91:4a:53:a5:4d:92:c7:
         f3:2a:c9:20:a6:7c:06:a5:1d:ac:44:94:46:ad:84:6b:8a:9f:
         95:79:bf:7d:b9:97:6c:ed:af:38:a1:17:11:01:0f:ab:db:c7:
         b2:93:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----