Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.mft
File:                     J0UHUIUUY7pU58gtxiPY1NA7-_M.mft (raw, json)
Hash identifier:          SDM6ht5ZtmrzJVrKlwP/UHJIFNW/IxzTedrgXwbOj4U=
Subject key identifier:   7A:56:F4:D3:2C:D8:53:4D:8E:6E:CD:D7:4E:3E:BA:F3:C3:98:B6:25
Authority key identifier: 27:45:07:50:85:14:63:BA:54:E7:C8:2D:C6:23:D8:D4:D0:3B:FB:F3
Certificate issuer:       /CN=F362C0A8AF/serialNumber=27450750851463BA54E7C82DC623D8D4D03BFBF3
Certificate serial:       EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J0UHUIUUY7pU58gtxiPY1NA7-_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.mft
Manifest number:          EA
Signing time:             Thu 21 Nov 2024 02:39:46 +0000
Manifest this update:     Thu 21 Nov 2024 02:39:45 +0000
Manifest next update:     Sat 23 Nov 2024 02:39:45 +0000
Files and hashes:         1: J0UHUIUUY7pU58gtxiPY1NA7-_M.crl (hash: Qw4GvUWciDRGw5GtTqBitirusMepmjZABmodi1I7BvA=)
                          2: 551745F4F58711EE98741157775412E6.roa (hash: PKlN6lJiG4I6zfGoS0XUarhAA7/4QhFFrR9iXFInLzw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J0UHUIUUY7pU58gtxiPY1NA7-_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C0A8AF/serialNumber=27450750851463BA54E7C82DC623D8D4D03BFBF3
        Validity
            Not Before: Nov 21 02:39:45 2024 GMT
            Not After : Nov 23 02:39:45 2024 GMT
        Subject: CN=673e9d72-e4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:25:df:a3:27:71:93:05:7f:3d:28:52:d0:
                    62:c9:a3:9f:18:1e:c0:1c:4c:8c:99:11:b4:b1:d1:
                    4e:f2:38:40:e2:bd:ba:9a:b5:45:68:d5:7e:c8:e8:
                    2e:68:6b:31:7d:7d:ab:a5:41:c3:30:d8:2a:89:68:
                    02:48:06:f9:7c:db:a1:15:9b:f5:5b:be:67:6f:38:
                    df:87:55:05:c2:79:6b:1d:45:a8:67:2c:32:2e:ad:
                    c9:04:b9:cc:08:1e:0a:18:1e:c9:e7:a1:29:fe:d0:
                    10:cb:a8:c5:09:de:16:d7:d6:da:36:8b:4b:f7:1b:
                    81:f0:54:b6:77:bf:ca:c6:05:70:2b:73:bb:a3:25:
                    95:bd:de:61:4c:8a:b6:d3:85:32:b3:cf:b3:bd:18:
                    c7:7a:08:a9:e5:87:d1:bf:bb:5a:9a:c6:70:ca:9b:
                    fb:39:72:17:ce:10:d2:fe:90:7b:a9:2c:f7:6f:9c:
                    9a:fc:83:7c:dc:78:d3:12:3c:73:5a:37:d1:44:f6:
                    ac:c7:5d:d5:97:ea:1c:16:83:85:f2:ec:c3:a4:6e:
                    68:cd:90:2e:81:66:ce:07:72:7c:6b:0f:88:da:bb:
                    66:ae:fc:a2:97:e7:08:e0:88:6d:c6:07:5a:f6:07:
                    aa:c2:2b:17:b0:e0:f1:ba:55:f2:04:c0:ee:ed:e1:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:56:F4:D3:2C:D8:53:4D:8E:6E:CD:D7:4E:3E:BA:F3:C3:98:B6:25
            X509v3 Authority Key Identifier:
                keyid:27:45:07:50:85:14:63:BA:54:E7:C8:2D:C6:23:D8:D4:D0:3B:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J0UHUIUUY7pU58gtxiPY1NA7-_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:10:01:f1:03:a0:ca:82:04:67:96:5f:1d:2e:a6:87:14:f1:
         8e:39:05:c6:1d:d0:27:4c:22:63:35:ae:3e:f4:1b:05:38:d0:
         d2:5b:98:74:93:c9:f1:56:d0:a9:09:ad:a4:eb:dc:73:01:ed:
         8c:82:9c:41:98:93:f0:2a:e6:16:9e:74:2b:9f:6c:ca:23:d0:
         02:21:a7:a2:b8:cf:39:3d:4f:48:cd:56:55:d9:44:ba:f2:f0:
         d7:2a:77:65:5c:45:fc:72:36:74:28:70:aa:84:d5:d6:bb:e3:
         fa:e9:4a:d8:be:45:d8:bb:07:9b:3b:e2:d8:a6:ba:8f:93:f8:
         96:08:9a:0f:c9:5d:2e:c7:4a:84:7d:9f:b2:10:74:ce:ab:6b:
         d8:7b:20:9e:8b:84:68:6b:36:97:e3:65:0f:64:7e:fc:a5:71:
         2a:40:0e:d7:c0:7f:5e:3e:f4:21:2a:2a:d4:c6:ae:df:4c:04:
         e5:63:9b:bc:d5:86:c0:e2:70:4e:25:e6:15:8f:a6:2f:9b:74:
         51:1d:c8:c3:2d:be:77:d8:92:0e:e3:6e:99:96:20:e8:ae:cc:
         ba:99:13:74:b6:f7:c8:80:a2:8a:ae:90:d8:27:7e:b6:e1:c9:
         56:14:c8:9f:60:0f:df:b2:e6:2f:4c:43:e2:e1:df:85:33:f9:
         6d:54:cd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----