Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft
File:                     J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft (raw, json)
Hash identifier:          RVsvlClOy51/TiWP/PMhf8Y0dPsCsSNcT1fsMjm5eE8=
Subject key identifier:   23:E2:53:87:A9:EB:77:0D:60:E5:D1:B9:B7:D1:A1:09:CB:64:D7:67
Authority key identifier: 27:D3:56:42:EC:54:30:E9:53:76:A5:7D:53:1C:20:CA:BA:38:4C:CC
Certificate issuer:       /CN=F364E2C5AF/serialNumber=27D35642EC5430E95376A57D531C20CABA384CCC
Certificate serial:       03CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft
Manifest number:          03CA
Signing time:             Thu 21 Nov 2024 01:49:04 +0000
Manifest this update:     Thu 21 Nov 2024 01:49:04 +0000
Manifest next update:     Sat 23 Nov 2024 01:49:04 +0000
Files and hashes:         1: J9NWQuxUMOlTdqV9Uxwgyro4TMw.crl (hash: atxDAsRVMlZIht/cfFpz1/gs20CLDXPxzHvuc+OUYEg=)
                          2: CBD4BB4EC7A411EC8C7F26F9F1222468.roa (hash: lyiXm98/99h1BTS8mv1keKXy/3hq5R//wYwELeO8tdI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E2C5AF/serialNumber=27D35642EC5430E95376A57D531C20CABA384CCC
        Validity
            Not Before: Nov 21 01:49:04 2024 GMT
            Not After : Nov 23 01:49:04 2024 GMT
        Subject: CN=673e9190-3009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:c5:2a:1a:7c:0c:dc:8a:e4:bc:5c:a1:48:
                    95:35:fe:bb:29:e3:47:fa:48:19:ba:38:5d:b1:94:
                    ff:7c:94:a4:24:6b:35:8c:b6:86:6b:2b:23:10:f7:
                    c0:63:44:bb:80:69:26:f2:9e:1d:4e:80:9e:6e:ef:
                    d5:83:58:d8:41:66:12:fb:d3:26:40:b9:39:54:51:
                    74:c8:33:43:a1:91:bc:4c:13:a6:da:6d:74:f1:b4:
                    e6:41:99:11:52:5f:d5:6a:33:ae:21:21:46:dd:c3:
                    a2:ac:53:49:d3:88:fd:a0:2f:20:18:7a:17:62:8e:
                    78:8e:fa:26:19:e4:b5:ee:a1:35:df:74:69:40:49:
                    a6:59:d1:a5:1e:05:1d:c5:e1:83:81:81:16:02:ff:
                    4e:b6:35:79:9d:b4:3e:73:dc:63:5f:15:ba:42:1a:
                    38:84:25:3c:74:e3:38:79:76:2e:52:84:77:8c:75:
                    13:18:07:15:3e:37:f2:3f:e5:d7:5c:84:24:7c:11:
                    8b:62:64:9c:5e:38:7c:6e:fd:d3:79:d0:dc:7b:a8:
                    08:d1:82:63:9b:3f:b1:95:66:66:c9:f9:b9:1e:38:
                    4f:61:de:37:9e:b6:f0:27:5c:a7:67:ac:62:21:e3:
                    36:43:60:a9:ac:f3:58:0c:03:b1:7f:c9:66:fd:ba:
                    5b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E2:53:87:A9:EB:77:0D:60:E5:D1:B9:B7:D1:A1:09:CB:64:D7:67
            X509v3 Authority Key Identifier:
                keyid:27:D3:56:42:EC:54:30:E9:53:76:A5:7D:53:1C:20:CA:BA:38:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J9NWQuxUMOlTdqV9Uxwgyro4TMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E2C5/FBF23E7EC78011EC9829D38BF1222468/J9NWQuxUMOlTdqV9Uxwgyro4TMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d5:f3:29:c7:84:b6:2f:0d:c2:fb:bb:29:15:d6:0b:6e:24:
         4a:5d:ca:ea:0d:5b:ce:8e:5f:16:39:74:87:0a:76:c8:76:28:
         18:8b:04:d7:db:16:b2:a3:c8:22:63:08:ed:84:c9:f3:9e:4f:
         1d:59:42:59:12:ca:cf:73:30:83:73:ab:24:6e:fa:c3:4e:44:
         69:ef:49:a5:99:a0:7a:bd:29:9c:ac:48:e6:39:89:8f:d3:f9:
         4d:1a:5b:e0:08:ca:7f:87:de:1a:89:4c:46:3a:ac:44:5a:0e:
         c8:58:e5:64:45:1b:44:26:7b:38:3a:65:92:05:c9:6a:51:a1:
         a3:55:88:6a:0f:d5:68:5b:35:f0:a3:d8:ff:86:d2:94:1c:91:
         57:01:25:c2:85:11:b1:af:b3:a8:98:77:bb:7e:3f:3d:20:19:
         b5:eb:74:42:64:dc:03:96:c9:8d:a5:a4:14:11:f9:9d:34:19:
         9e:d1:89:fc:b3:ec:d9:f5:ba:e6:54:81:e4:c0:d2:64:b7:a1:
         35:60:78:74:b3:40:a9:e0:fb:18:34:e2:10:22:01:00:e4:d5:
         1e:cc:8d:cf:73:33:18:be:ec:7e:9b:a1:fa:5f:d3:d6:8f:96:
         4d:41:9a:9e:f9:52:52:cb:39:34:e1:ad:a8:99:d4:8f:d3:5d:
         f4:4a:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----