Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          Y1Lnq3Xck8gMvcnEcphQ+jilSVdb/icL3e3mKuw5cR0=
Subject key identifier:   0D:D8:50:CE:BA:85:3C:74:53:1C:A7:75:AF:17:9C:CE:39:C3:5E:F8
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       055F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          055C
Signing time:             Fri 22 Nov 2024 01:25:49 +0000
Manifest this update:     Fri 22 Nov 2024 01:25:49 +0000
Manifest next update:     Sun 24 Nov 2024 01:25:49 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: Fy1HYddZrzmkovaMB+k1/Nn3GxKBtOgXMO3ZvX53igg=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375 (0x55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Nov 22 01:25:49 2024 GMT
            Not After : Nov 24 01:25:49 2024 GMT
        Subject: CN=673fdd9d-44a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:1e:33:a8:b8:ae:b6:d0:95:a7:42:cd:99:
                    e3:78:c4:52:46:1a:f9:4b:dd:39:ec:2d:74:d8:2f:
                    b9:cd:d5:61:5a:5b:62:2f:dc:13:25:93:79:b2:e1:
                    c5:6c:b8:51:5f:50:77:33:ba:7f:1c:0f:11:53:b9:
                    76:72:21:79:6b:66:d3:71:6b:cc:da:9e:af:1c:70:
                    73:64:7d:e3:b2:1a:9c:4e:8a:ac:5e:af:c2:80:67:
                    d5:52:d1:2e:88:b1:b5:b2:28:f7:73:9f:85:20:57:
                    e1:9a:fd:b4:43:f4:0c:0b:48:c1:09:33:0f:f2:24:
                    95:55:d7:ca:b6:09:c1:aa:e6:f6:86:c7:0a:b7:43:
                    ad:f7:d7:a5:26:b0:00:9f:64:ce:d0:d7:5d:d1:e5:
                    c5:31:ca:6a:7d:02:19:02:21:54:88:c2:68:da:96:
                    ad:3a:6d:4b:09:6d:ef:7d:82:d8:e4:85:65:d7:9a:
                    f0:5f:02:5d:90:f0:e6:77:58:59:ff:7b:ac:40:f1:
                    01:26:ed:27:61:7d:96:ae:27:fa:bf:8a:f4:bc:3c:
                    81:a9:e2:45:15:38:4e:df:5a:af:6d:5c:c7:16:d9:
                    03:74:fd:5e:ce:a2:db:3f:4e:fa:59:a3:97:b1:ce:
                    be:1a:bd:6d:f7:eb:9a:c8:11:1a:1c:a1:04:96:42:
                    2b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D8:50:CE:BA:85:3C:74:53:1C:A7:75:AF:17:9C:CE:39:C3:5E:F8
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:fa:59:0e:67:fd:6f:68:9d:27:72:1b:b1:1a:c2:12:fa:ed:
         25:9b:23:9d:0e:27:14:5d:d1:f6:e4:31:ae:d7:6f:64:19:2b:
         12:fa:b4:a5:cd:88:63:a5:ce:00:b2:6d:b4:26:00:56:4c:b7:
         62:ac:49:5c:f1:f5:37:c4:05:d0:c4:5d:fe:a8:ab:0b:8c:7d:
         00:24:92:48:70:39:8f:7a:db:4a:cd:94:63:37:ff:b0:be:7b:
         d4:b8:78:dc:cd:20:a9:e9:fb:52:06:35:df:74:70:7e:81:53:
         eb:2b:e6:37:90:0f:4e:99:0d:32:9c:93:00:a0:3e:98:c1:8f:
         f0:85:85:dc:c5:60:25:5b:c9:08:89:76:6b:28:4a:3b:20:37:
         78:be:a5:35:01:c6:0f:5d:ff:d0:fd:5c:a7:35:7f:dc:12:5f:
         9e:f8:98:13:ae:5d:0b:55:b1:ef:2d:a2:65:57:7d:0d:06:4d:
         c6:51:ba:af:02:58:96:6d:ad:ad:09:a6:6b:7e:d0:60:b6:8e:
         3e:b1:be:de:83:0b:bc:11:de:aa:15:6a:ec:ec:16:82:44:24:
         8e:ba:28:9a:00:78:29:53:bf:cf:56:d1:25:81:71:7a:55:a1:
         81:14:7c:5c:21:e1:dc:9c:9b:f6:9b:88:21:51:89:0e:0b:cf:
         d8:b7:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----