Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
File:                     mEs08lM_l20v8hGUKFlsTLCoNJQ.mft (raw, json)
Hash identifier:          j+QR6FmY+ufmWYaG1iMDuXcpPTZalj0FGs1XsoSI4gc=
Subject key identifier:   0A:B7:13:70:E9:89:31:0B:89:72:76:B6:57:6D:77:04:77:3F:0A:AF
Authority key identifier: 98:4B:34:F2:53:3F:97:6D:2F:F2:11:94:28:59:6C:4C:B0:A8:34:94
Certificate issuer:       /CN=F363E7DEAF/serialNumber=984B34F2533F976D2FF2119428596C4CB0A83494
Certificate serial:       8F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
Manifest number:          8E
Signing time:             Thu 21 Nov 2024 02:45:36 +0000
Manifest this update:     Thu 21 Nov 2024 02:45:35 +0000
Manifest next update:     Sat 23 Nov 2024 02:45:35 +0000
Files and hashes:         1: mEs08lM_l20v8hGUKFlsTLCoNJQ.crl (hash: KREB6HIzfi1i71zsbfgGvNUIHmMpPT6Lkdq+Ses3qxo=)
                          2: D26968643D1911EF839BE3A0762E951A.roa (hash: J0djfjB+ImP9O4b/Y0DGlGrugUtQ+yVNNLjhpRXf1yA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363E7DEAF/serialNumber=984B34F2533F976D2FF2119428596C4CB0A83494
        Validity
            Not Before: Nov 21 02:45:35 2024 GMT
            Not After : Nov 23 02:45:35 2024 GMT
        Subject: CN=673e9ed0-0ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:72:a7:02:86:b9:de:fc:c9:b1:47:50:a7:
                    0b:04:f9:19:1b:90:0f:c0:ec:4f:a9:7c:7b:de:19:
                    ba:d4:55:f1:63:9a:e0:a1:ba:a4:b3:19:09:e9:92:
                    56:ee:22:25:f9:3e:f1:f6:22:df:cd:ee:4b:c2:f2:
                    6e:24:b2:42:2d:82:3c:93:4c:85:6e:79:fa:1c:c6:
                    4a:b5:12:db:a7:f2:50:70:44:93:dc:b6:21:89:a3:
                    0d:25:c3:b3:c6:e0:82:93:81:ee:8b:27:5b:4c:eb:
                    c6:50:30:c1:fe:de:62:da:79:55:e4:40:58:17:09:
                    e0:56:ba:45:ae:76:48:5a:e8:a9:cb:21:d7:57:03:
                    7e:6e:8d:f9:25:53:e5:73:62:80:9d:de:5a:e3:da:
                    85:82:86:d8:0a:ba:7c:31:8f:7e:d9:2e:fb:ce:e8:
                    d0:e9:25:27:df:59:4c:46:e1:55:50:b4:f6:a1:9f:
                    9d:9b:45:42:f8:a5:93:b3:9c:6a:ea:1d:92:4f:54:
                    a0:db:80:b1:bc:56:c4:92:36:d6:9a:12:74:88:3b:
                    35:66:30:bc:06:fa:86:a3:b6:d7:18:54:28:c8:90:
                    43:db:13:c7:55:53:91:e4:3d:b0:43:cf:4e:c7:5e:
                    29:38:70:da:8b:06:8e:1b:c1:49:8c:62:0a:83:62:
                    a7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B7:13:70:E9:89:31:0B:89:72:76:B6:57:6D:77:04:77:3F:0A:AF
            X509v3 Authority Key Identifier:
                keyid:98:4B:34:F2:53:3F:97:6D:2F:F2:11:94:28:59:6C:4C:B0:A8:34:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mEs08lM_l20v8hGUKFlsTLCoNJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E7DE/0AF6EC623D1811EFADCB7693762E951A/mEs08lM_l20v8hGUKFlsTLCoNJQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8f:d9:15:15:12:96:ad:27:08:81:e4:d0:69:5f:83:04:e6:
         20:f6:de:0f:cc:fb:90:b8:3a:c7:a0:6f:b9:65:fe:9d:99:df:
         44:5d:68:73:43:10:64:bf:b6:80:18:4e:00:d7:69:7f:8e:62:
         aa:91:48:a2:a4:13:56:1b:90:29:2f:a6:40:fc:22:6f:d2:53:
         6e:6c:c3:9a:49:1f:d0:6c:78:b0:fe:aa:8d:f4:78:2e:cd:5f:
         94:cf:cd:34:1b:6e:97:1e:8a:b0:3e:3e:de:20:83:52:b8:a1:
         8b:36:02:25:b5:00:30:a9:0e:06:02:c8:6a:2e:0b:9f:32:e2:
         cc:aa:64:c2:11:0b:41:52:bc:da:23:74:16:b1:57:9f:95:53:
         95:da:be:04:a5:ff:46:a2:61:f7:d8:b2:17:2e:10:ba:e6:75:
         e3:06:88:87:df:4e:60:3d:ea:93:46:69:7f:46:d1:4b:2f:dc:
         bb:58:ab:fb:33:d4:81:49:72:53:48:11:84:23:a7:fa:50:6b:
         3e:79:81:7c:f8:d4:85:ee:54:5c:72:66:6b:94:1f:68:33:1e:
         3a:c8:58:ec:25:35:1b:aa:2a:09:17:00:86:a8:7c:ec:0b:5a:
         55:9f:85:9b:b2:ea:82:50:24:f1:ea:ec:61:e3:0b:8a:70:d2:
         56:c4:01:e0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0U3REVBRjExMC8GA1UEBRMoOTg0QjM0RjI1MzNGOTc2RDJGRjIxMTk0Mjg1OTZD
NENCMEE4MzQ5NDAeFw0yNDExMjEwMjQ1MzVaFw0yNDExMjMwMjQ1MzVaMBgxFjAU
BgNVBAMTDTY3M2U5ZWQwLTBjYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEvHKnAoa53vzJsUdQpwsE+RkbkA/A7E+pfHveGbrUVfFjmuChuqSzGQnp
klbuIiX5PvH2It/N7kvC8m4kskItgjyTTIVuefocxkq1Etun8lBwRJPctiGJow0l
w7PG4IKTge6LJ1tM68ZQMMH+3mLaeVXkQFgXCeBWukWudkha6KnLIddXA35ujfkl
U+VzYoCd3lrj2oWChtgKunwxj37ZLvvO6NDpJSffWUxG4VVQtPahn52bRUL4pZOz
nGrqHZJPVKDbgLG8VsSSNtaaEnSIOzVmMLwG+oajttcYVCjIkEPbE8dVU5HkPbBD
z07HXik4cNqLBo4bwUmMYgqDYqenAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCrcT
cOmJMQuJcna2V213BHc/Cq8wHwYDVR0jBBgwFoAUmEs08lM/l20v8hGUKFlsTLCo
NJQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNFN0RFLzBBRjZFQzYyM0QxODExRUZBRENCNzY5Mzc2MkU5NTFBL21FczA4
bE1fbDIwdjhoR1VLRmxzVExDb05KUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21FczA4bE1fbDIwdjhoR1VLRmxzVExDb05KUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0U3REUvMEFGNkVDNjIzRDE4MTFFRkFEQ0I3NjkzNzYy
RTk1MUEvbUVzMDhsTV9sMjB2OGhHVUtGbHNUTENvTkpRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlj9kVFRKWrScIgeTQaV+DBOYg9t4P
zPuQuDrHoG+5Zf6dmd9EXWhzQxBkv7aAGE4A12l/jmKqkUiipBNWG5ApL6ZA/CJv
0lNubMOaSR/QbHiw/qqN9HguzV+Uz800G26XHoqwPj7eIINSuKGLNgIltQAwqQ4G
AshqLgufMuLMqmTCEQtBUrzaI3QWsVeflVOV2r4Epf9GomH32LIXLhC65nXjBoiH
305gPeqTRml/RtFLL9y7WKv7M9SBSXJTSBGEI6f6UGs+eYF8+NSF7lRccmZrlB9o
Mx46yFjsJTUbqioJFwCGqHzsC1pVn4WbsuqCUCTx6uxh4wuKcNJWxAHg
-----END CERTIFICATE-----