Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.mft
File:                     v9wvL9xcp90IakuaxSzjvdvFqXc.mft (raw, json)
Hash identifier:          eOPRDC8+B6hfxVDx0fQhPAtNXH4mRy79A9VDGYDrpGU=
Subject key identifier:   BA:A3:77:56:F1:A3:80:97:45:43:0A:B0:5B:21:33:17:23:9E:6D:BC
Authority key identifier: BF:DC:2F:2F:DC:5C:A7:DD:08:6A:4B:9A:C5:2C:E3:BD:DB:C5:A9:77
Certificate issuer:       /CN=F364AE1CAF/serialNumber=BFDC2F2FDC5CA7DD086A4B9AC52CE3BDDBC5A977
Certificate serial:       01A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.mft
Manifest number:          019F
Signing time:             Mon 27 May 2024 02:09:44 +0000
Manifest this update:     Mon 27 May 2024 02:09:43 +0000
Manifest next update:     Wed 29 May 2024 02:09:43 +0000
Files and hashes:         1: v9wvL9xcp90IakuaxSzjvdvFqXc.crl (hash: ff25rZ7LigDvbesO2ivwpebmIWvyWkTcyqu7IXIoXgI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 May 2024 00:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AE1CAF/serialNumber=BFDC2F2FDC5CA7DD086A4B9AC52CE3BDDBC5A977
        Validity
            Not Before: May 27 02:09:43 2024 GMT
            Not After : May 29 02:09:43 2024 GMT
        Subject: CN=6653eb68-9e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6c:10:1e:59:96:45:62:71:f2:f7:ca:4c:a8:
                    03:ce:50:c4:58:a8:f7:fa:09:66:ae:53:53:26:dd:
                    68:d8:01:16:98:5c:1f:25:5b:87:bd:72:c3:69:7c:
                    28:f8:17:df:ea:4f:7a:9c:db:12:a3:f3:6c:e1:bf:
                    62:0e:14:13:12:d4:cd:f3:e0:7a:8d:49:22:be:1a:
                    14:d8:bb:7d:dc:9f:d3:6f:0d:61:d8:6d:b1:9e:ba:
                    76:c8:9f:fd:49:8b:af:c5:ea:b3:72:0a:f0:bf:f1:
                    61:4c:57:7b:bf:23:83:f0:cd:49:98:8f:2b:89:2f:
                    64:2a:f6:e0:c1:df:25:b0:40:dd:8f:14:39:48:83:
                    e4:42:8c:95:22:86:94:ee:2e:38:13:b3:d2:9b:00:
                    57:1f:83:ac:c9:ee:8a:cc:af:06:91:8c:38:55:63:
                    b9:7b:ea:ec:06:8e:20:24:02:3a:78:0f:e4:e7:39:
                    ea:55:03:27:ee:68:ae:be:a2:b2:4c:3b:6d:ca:6c:
                    9e:c6:81:f8:b4:4a:48:c9:d1:e1:4f:2e:6b:80:7a:
                    21:88:3b:80:91:b0:36:b9:1e:b5:17:54:13:21:a0:
                    c1:8b:c7:99:b4:1a:cb:a0:8f:54:2f:cd:15:dd:b5:
                    d5:d4:eb:ab:56:82:9e:f7:cb:33:c8:76:5b:98:a8:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A3:77:56:F1:A3:80:97:45:43:0A:B0:5B:21:33:17:23:9E:6D:BC
            X509v3 Authority Key Identifier:
                keyid:BF:DC:2F:2F:DC:5C:A7:DD:08:6A:4B:9A:C5:2C:E3:BD:DB:C5:A9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ab:c9:b2:5d:01:e5:db:df:2f:7c:b4:e9:1a:d3:79:68:66:
         8e:1c:d3:93:b4:19:d9:78:3c:54:f2:6e:61:8c:37:03:6f:1d:
         ee:b4:fc:10:90:7b:28:35:30:f5:b4:72:ed:1a:7d:80:66:63:
         6a:21:40:d0:10:dd:67:18:31:50:94:a4:6a:6d:09:13:6b:95:
         a4:f8:f6:3d:fc:f1:f3:76:90:73:29:b1:ca:d8:c9:4a:bc:45:
         d2:41:31:52:e5:92:d4:33:c2:f8:1b:84:d8:46:9f:fb:8c:95:
         bd:1e:4e:1e:1e:62:b6:38:29:3f:47:4e:a2:ce:50:2a:af:85:
         b9:45:59:99:6b:f7:26:0b:a7:da:06:2a:6c:0a:ef:fb:a6:52:
         6d:b0:56:01:54:69:71:8a:ee:0f:1a:2a:fe:48:4d:20:b7:bd:
         ed:f4:8c:10:e0:8c:62:b7:72:40:14:29:6d:e5:c4:cb:92:f8:
         4a:6f:bf:91:7a:a2:5c:39:32:d3:74:c4:7f:13:3c:12:ce:15:
         f4:da:45:55:80:9b:87:6a:5a:25:e4:ab:9e:30:43:26:82:c3:
         2f:3d:a3:b1:da:cd:9f:3c:52:42:1d:6c:4f:3b:c8:c1:37:b2:
         05:52:72:3d:a9:99:3c:63:96:c8:e1:ec:6c:18:e3:ef:ce:05:
         cd:a0:c2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----