Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft
File:                     eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft (raw, json)
Hash identifier:          OY51hh8L/3HKzy/Yg0mFcuGgMIBR1l97WkVdM/Kwupc=
Subject key identifier:   74:1E:53:75:C8:6B:87:18:3D:C3:2D:DA:D0:FE:B3:34:86:CD:7B:BD
Authority key identifier: 78:99:B7:58:C4:C9:DD:D5:9A:0D:2F:77:25:61:53:F4:06:36:CB:E1
Certificate issuer:       /CN=F36480E0AF/serialNumber=7899B758C4C9DDD59A0D2F77256153F40636CBE1
Certificate serial:       0D65
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eJm3WMTJ3dWaDS93JWFT9AY2y-E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft
Manifest number:          0D65
Signing time:             Fri 22 Nov 2024 00:43:23 +0000
Manifest this update:     Fri 22 Nov 2024 00:43:23 +0000
Manifest next update:     Sun 24 Nov 2024 00:43:23 +0000
Files and hashes:         1: eJm3WMTJ3dWaDS93JWFT9AY2y-E.crl (hash: pzI9xRP+3EgUuhrFwtWw03E3VqXCU/kLQBp2tUUMWRI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eJm3WMTJ3dWaDS93JWFT9AY2y-E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3429 (0xd65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36480E0AF/serialNumber=7899B758C4C9DDD59A0D2F77256153F40636CBE1
        Validity
            Not Before: Nov 22 00:43:23 2024 GMT
            Not After : Nov 24 00:43:23 2024 GMT
        Subject: CN=673fd3ab-5657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:84:8a:54:32:fa:db:cf:fd:a6:92:da:0c:33:
                    4d:00:da:b8:b8:c7:bb:c1:60:b0:28:e9:2a:19:9c:
                    32:68:24:de:96:da:bb:26:74:31:9b:f4:fe:6d:b7:
                    23:b6:8c:96:43:61:04:8d:93:36:d9:38:73:d4:78:
                    a0:4f:64:6c:7c:52:2d:a7:d0:3f:41:ee:19:bd:c0:
                    68:07:ca:ac:69:c5:0e:44:87:8c:38:45:d4:09:2c:
                    a4:7f:da:e0:3d:6c:cd:1d:b0:f5:75:60:4f:50:91:
                    fd:5b:d3:46:68:c5:61:82:a0:ed:7e:80:11:ae:91:
                    d4:7f:d4:74:3f:5b:5b:fa:98:b2:11:cd:fb:51:41:
                    a6:54:42:1e:aa:d0:86:be:ec:50:78:65:8b:24:95:
                    a5:95:04:ae:68:7c:51:8a:04:a1:03:81:d9:6c:6f:
                    e6:04:dc:07:04:c8:e6:76:98:11:f8:df:4e:ef:c2:
                    fa:3b:6c:dc:f9:c2:fe:0e:be:7e:c1:58:f9:d1:a2:
                    1b:1e:1e:6d:72:e4:ea:bb:26:ba:aa:58:be:8b:a2:
                    7a:07:62:a4:92:3b:f2:e0:3a:94:8d:04:bb:cb:d2:
                    c9:48:96:dd:95:fb:86:2e:65:61:b0:a2:b1:cd:43:
                    74:9d:be:0c:d4:ba:d0:34:98:e8:a9:52:6b:b7:0b:
                    de:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1E:53:75:C8:6B:87:18:3D:C3:2D:DA:D0:FE:B3:34:86:CD:7B:BD
            X509v3 Authority Key Identifier:
                keyid:78:99:B7:58:C4:C9:DD:D5:9A:0D:2F:77:25:61:53:F4:06:36:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eJm3WMTJ3dWaDS93JWFT9AY2y-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2a:1c:4e:f3:ca:d8:19:6a:83:8d:1b:76:4c:44:a9:d6:f3:
         f3:16:63:cb:40:7e:bb:dc:5a:27:53:6a:2c:20:d0:04:14:40:
         7f:40:dd:44:65:34:50:91:c0:ce:2c:7e:d7:7f:2f:1d:a0:16:
         e9:a6:e9:1b:20:63:83:c0:e4:40:d8:00:b8:74:65:69:25:73:
         2b:c6:20:76:e3:d1:f5:82:81:6d:c4:ea:41:02:5a:7a:7e:0b:
         82:1c:16:23:12:03:cc:45:54:25:d7:0f:9e:02:92:72:72:f7:
         f1:3f:45:a6:5c:d7:42:bf:14:15:a0:20:40:0b:7e:02:13:ee:
         67:3e:33:d5:f7:3f:d1:43:0e:7c:3c:22:d4:07:46:ed:e3:74:
         35:28:08:e1:e9:fa:06:07:86:24:af:12:c5:d9:5c:ae:68:e2:
         7f:fa:2b:4f:b0:47:f3:ab:6a:41:27:72:42:a1:91:4e:0c:67:
         82:9f:cc:06:66:7c:d8:a7:65:88:66:db:fc:0e:75:fe:fe:41:
         5e:e0:e0:a4:0d:b3:42:e2:64:08:94:fc:4b:da:ab:63:40:bc:
         4c:11:39:c9:2a:6f:a8:ab:a8:11:4b:42:42:2b:94:11:97:7d:
         2d:89:46:11:b1:50:55:eb:f1:ef:78:36:40:27:ee:d1:46:6d:
         47:86:ff:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----