Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.mft
File:                     AfVtzr_vO4iPtcCITF0ZFyWORaM.mft (raw, json)
Hash identifier:          DppsU1gGV/dzByio+b2JpBJyGxATS3ouRaHUnT90tcI=
Subject key identifier:   57:87:0D:40:D5:17:FF:D7:7A:31:5F:A4:44:38:85:12:79:51:3F:82
Authority key identifier: 01:F5:6D:CE:BF:EF:3B:88:8F:B5:C0:88:4C:5D:19:17:25:8E:45:A3
Certificate issuer:       /CN=F362D276AF/serialNumber=01F56DCEBFEF3B888FB5C0884C5D1917258E45A3
Certificate serial:       37
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AfVtzr_vO4iPtcCITF0ZFyWORaM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.mft
Manifest number:          36
Signing time:             Thu 21 Nov 2024 02:54:53 +0000
Manifest this update:     Thu 21 Nov 2024 02:54:53 +0000
Manifest next update:     Sat 23 Nov 2024 02:54:53 +0000
Files and hashes:         1: AfVtzr_vO4iPtcCITF0ZFyWORaM.crl (hash: NX7ukNe5zKqOYkMhmO1HkhFtO/+kY9yJDSr8opnG45s=)
                          2: 44B4293280DA11EF82CAAF8B762E951A.roa (hash: JpEuKkjfhV0QAzt6LDFVNnb+azEcOUEfekHUP5VBwUI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AfVtzr_vO4iPtcCITF0ZFyWORaM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362D276AF/serialNumber=01F56DCEBFEF3B888FB5C0884C5D1917258E45A3
        Validity
            Not Before: Nov 21 02:54:53 2024 GMT
            Not After : Nov 23 02:54:53 2024 GMT
        Subject: CN=673ea0fd-4ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:85:db:4d:bc:1a:c7:58:d7:c0:9f:b5:6d:
                    af:c7:9d:d9:7a:74:9a:6b:4a:85:a9:6d:ad:79:76:
                    f6:da:43:fa:13:c1:ba:21:40:c6:72:49:a3:f7:39:
                    37:7d:c1:4e:6a:ee:b2:80:8f:62:21:32:95:33:53:
                    18:64:2c:08:91:2a:d4:33:f1:f3:f2:5c:8f:dc:1f:
                    e8:83:0c:5f:b2:b6:e2:4f:41:1b:75:2c:af:f6:e3:
                    1f:1d:54:56:ca:54:79:9a:c5:32:9f:e7:71:70:8b:
                    bd:72:bf:3e:26:45:b0:5b:eb:bd:04:29:70:4a:9e:
                    b3:61:53:cd:88:8f:69:89:3f:65:4d:0b:c9:e0:fb:
                    e6:8f:de:f2:9f:05:ce:0e:93:90:88:58:7e:3d:94:
                    2d:9e:a2:68:10:bf:66:00:5e:fb:31:77:63:05:2e:
                    65:64:68:59:40:6c:c6:e4:df:29:49:28:bf:c4:01:
                    45:f6:c6:6d:7e:22:11:86:b6:80:73:3b:cd:75:70:
                    a3:67:e0:04:a2:61:c3:01:f1:55:c8:77:2d:20:f4:
                    1b:57:43:82:45:61:07:4d:25:56:1a:ec:43:ae:5e:
                    2b:4b:92:d3:f2:39:04:31:ea:7e:7a:d6:a7:14:0b:
                    db:5a:7c:48:52:82:ec:f5:97:5e:fb:cf:7a:47:4e:
                    6c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:87:0D:40:D5:17:FF:D7:7A:31:5F:A4:44:38:85:12:79:51:3F:82
            X509v3 Authority Key Identifier:
                keyid:01:F5:6D:CE:BF:EF:3B:88:8F:B5:C0:88:4C:5D:19:17:25:8E:45:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AfVtzr_vO4iPtcCITF0ZFyWORaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:91:44:96:62:75:32:d4:08:1b:9a:d4:48:bc:92:66:9f:14:
         36:08:ca:69:7f:2a:39:84:47:5c:a5:b0:20:a5:e5:98:27:d5:
         5d:3a:b8:e6:ac:1f:55:fb:9e:f5:44:a7:86:6f:b4:d7:b0:88:
         c7:cf:cb:0f:37:07:bc:12:b8:e1:5c:7c:4f:8c:34:49:c2:3d:
         92:49:51:c5:2a:fe:b7:97:c6:be:5d:73:7c:c7:1f:3f:e1:f6:
         e0:a7:38:97:22:ab:48:7f:a5:86:49:4b:26:85:e9:5b:d0:fa:
         cc:c0:3d:4e:dc:22:3e:38:58:27:0d:ed:94:23:e0:85:c8:62:
         9b:85:ff:7f:c8:b8:4d:50:bf:92:a9:71:af:f7:7b:5d:f5:5f:
         2b:11:65:d5:f9:b3:43:e2:c2:24:4e:8d:2a:2a:79:ee:d4:75:
         d3:1d:f5:d5:78:54:81:36:51:db:1a:67:bd:b1:ee:24:e7:52:
         fd:f2:a7:a7:28:0f:86:5a:11:74:33:4e:97:8b:57:77:ef:3d:
         5a:93:22:9c:eb:5d:6f:95:f6:ea:ba:b9:19:b8:3b:11:ff:fe:
         06:a4:62:a9:96:27:81:18:43:c9:05:82:1d:ad:bf:f0:34:f5:
         de:4d:dd:7e:d1:ef:ff:92:97:3a:60:5b:80:b6:d7:5a:98:e3:
         ac:b4:45:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----