Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
File:                     UJrkB4CHuVMUvanvade7dIgcL94.mft (raw, json)
Hash identifier:          mlw8rZhuFas7p4ogW4CGsfIOON4sx2vcnTz9uUjkDiY=
Subject key identifier:   48:A9:AA:B0:73:C3:29:F7:25:49:B9:7B:C6:F3:39:2B:38:76:02:80
Authority key identifier: 50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE
Certificate issuer:       /CN=F3630501AF/serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
Certificate serial:       22
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
Manifest number:          20
Signing time:             Wed 23 Oct 2024 03:05:26 +0000
Manifest this update:     Wed 23 Oct 2024 03:05:26 +0000
Manifest next update:     Fri 25 Oct 2024 03:05:26 +0000
Files and hashes:         1: UJrkB4CHuVMUvanvade7dIgcL94.crl (hash: UEkHIgTuKCk9m380ym3uEDZWbPivNaUKz23XgPwGTFs=)
                          2: FCFCC1C67A7111EF9AF36551762E951A.roa (hash: qrAboZUTqac+Q2mxl59aHmWOevvURvqrYd1DnspbsRc=)
                          3: 8CB5168E7A7111EFA28C7C4D762E951A.roa (hash: wxbx8f56MZI34oPvLMhsBGgkuRggcFGrbjCG/8PfNq8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630501AF/serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
        Validity
            Not Before: Oct 23 03:05:26 2024 GMT
            Not After : Oct 25 03:05:26 2024 GMT
        Subject: CN=671867f6-0b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a7:ba:0f:bd:af:07:de:8f:ad:7e:82:5e:70:
                    c3:45:2f:92:de:51:17:68:f3:f2:63:00:b2:14:aa:
                    dd:f1:0e:f8:a2:56:6a:79:03:9f:75:9e:2f:d6:1d:
                    01:42:7b:40:18:64:f1:ca:3c:57:97:9f:21:a2:f7:
                    13:0c:b7:b8:00:01:7a:92:cd:00:ad:a2:ba:e8:d5:
                    24:e0:11:d0:10:70:48:d6:4d:7b:e1:dc:6e:b9:4a:
                    c3:02:d3:c3:97:15:17:0b:c7:e5:cd:00:a9:42:c2:
                    a2:5b:7e:23:38:81:73:c8:50:dc:e8:1e:bb:cd:e5:
                    9d:57:66:0c:83:d1:af:31:f6:f5:9e:29:7e:cd:6b:
                    4c:72:2b:c6:45:7e:28:59:dd:12:6e:22:10:36:4a:
                    03:8a:4e:7b:39:da:87:0b:5a:bb:f4:05:59:f9:b3:
                    02:b1:43:61:e5:ef:ed:da:27:ea:1d:7c:29:71:7b:
                    4d:7c:71:44:c5:db:c5:31:1e:f6:0a:4d:26:26:9a:
                    43:ca:1c:ef:48:16:01:4f:cb:63:32:75:ed:0b:4c:
                    14:ee:70:8a:4a:6a:75:7e:68:2b:ad:f7:bd:ad:50:
                    92:0d:0a:27:33:2d:eb:0e:91:08:bf:7c:98:20:52:
                    57:fe:d2:c2:66:79:38:92:45:8d:45:35:d9:e2:b2:
                    c4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A9:AA:B0:73:C3:29:F7:25:49:B9:7B:C6:F3:39:2B:38:76:02:80
            X509v3 Authority Key Identifier:
                keyid:50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6d:5c:fa:f6:cd:c2:c5:8b:5c:e7:25:20:e0:b9:0a:37:f7:
         b5:25:77:8e:ed:c4:a1:32:8e:bd:bd:b1:3e:19:f3:d1:5d:5e:
         3a:e5:ef:6f:8a:55:49:b5:ef:76:e7:65:25:e0:0f:8e:1c:b2:
         88:89:c7:5a:14:b8:87:0e:a5:3f:b3:f3:be:fc:84:1d:d8:19:
         7b:9e:10:12:99:df:10:e8:ac:40:c2:86:7c:c1:09:93:99:91:
         5f:70:68:92:ee:8c:c9:df:1b:e9:bc:4b:b9:98:44:fd:e7:78:
         67:6a:3f:8e:30:16:42:68:10:41:53:7d:e4:37:5f:f4:33:17:
         c6:88:5f:b7:57:c6:1b:d9:17:16:47:97:87:ef:cd:3b:4d:49:
         18:af:57:10:38:23:3b:e3:ef:68:fe:a3:85:dc:66:8f:3d:b5:
         b0:42:d1:f2:aa:d7:2d:1b:dc:6b:1c:4e:17:8b:6e:0a:bc:e8:
         bd:bc:cf:b4:16:b0:3d:c3:1b:9f:44:30:a7:32:b5:4e:82:38:
         92:e5:93:9b:e7:04:f4:ee:dc:d5:af:8c:a2:7f:20:d6:1a:72:
         12:22:22:87:61:31:77:50:87:8a:7b:9f:c7:8a:49:24:fc:88:
         cf:68:c9:46:99:4c:9c:12:7f:3b:17:6f:c6:9e:08:2e:87:07:
         e4:0a:1d:99
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBIjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
MDUwMUFGMTEwLwYDVQQFEyg1MDlBRTQwNzgwODdCOTUzMTRCREE5RUY2OUQ3QkI3
NDg4MUMyRkRFMB4XDTI0MTAyMzAzMDUyNloXDTI0MTAyNTAzMDUyNlowGDEWMBQG
A1UEAxMNNjcxODY3ZjYtMGIxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJinug+9rwfej61+gl5ww0Uvkt5RF2jz8mMAshSq3fEO+KJWankDn3WeL9Yd
AUJ7QBhk8co8V5efIaL3Ewy3uAABepLNAK2iuujVJOAR0BBwSNZNe+HcbrlKwwLT
w5cVFwvH5c0AqULColt+IziBc8hQ3Ogeu83lnVdmDIPRrzH29Z4pfs1rTHIrxkV+
KFndEm4iEDZKA4pOeznahwtau/QFWfmzArFDYeXv7don6h18KXF7TXxxRMXbxTEe
9gpNJiaaQ8oc70gWAU/LYzJ17QtMFO5wikpqdX5oK633va1Qkg0KJzMt6w6RCL98
mCBSV/7SwmZ5OJJFjUU12eKyxA0CAwEAAaOCArgwggK0MB0GA1UdDgQWBBRIqaqw
c8Mp9yVJuXvG8zkrOHYCgDAfBgNVHSMEGDAWgBRQmuQHgIe5UxS9qe9p17t0iBwv
3jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MzA1MDEvRDgxNTZEMTA3QTZGMTFFRkFCNjM3QjQ0NzYyRTk1MUEvVUpya0I0
Q0h1Vk1VdmFudmFkZTdkSWdjTDk0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVUpya0I0Q0h1Vk1VdmFudmFkZTdkSWdjTDk0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYzMDUwMS9EODE1NkQxMDdBNkYxMUVGQUI2MzdCNDQ3NjJF
OTUxQS9VSnJrQjRDSHVWTVV2YW52YWRlN2RJZ2NMOTQubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBABhtXPr2zcLFi1znJSDguQo397Uld47t
xKEyjr29sT4Z89FdXjrl72+KVUm173bnZSXgD44csoiJx1oUuIcOpT+z8778hB3Y
GXueEBKZ3xDorEDChnzBCZOZkV9waJLujMnfG+m8S7mYRP3neGdqP44wFkJoEEFT
feQ3X/QzF8aIX7dXxhvZFxZHl4fvzTtNSRivVxA4Izvj72j+o4XcZo89tbBC0fKq
1y0b3GscTheLbgq86L28z7QWsD3DG59EMKcytU6COJLlk5vnBPTu3NWvjKJ/INYa
chIiIodhMXdQh4p7n8eKSST8iM9oyUaZTJwSfzsXb8aeCC6HB+QKHZk=
-----END CERTIFICATE-----