Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
File:                     wMDnGZy4QKJJjB47pWdvngwGKGg.mft (raw, json)
Hash identifier:          5HS/L1u8a23pauARmRWLTXwMvcyXJI8cu1iU2DZXY2c=
Subject key identifier:   3F:0E:DB:0A:DE:94:01:F3:C5:10:B7:66:1E:05:E9:91:1A:65:F8:BD
Authority key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Certificate issuer:       /CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Certificate serial:       83
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
Manifest number:          81
Signing time:             Thu 21 Nov 2024 02:47:46 +0000
Manifest this update:     Thu 21 Nov 2024 02:47:45 +0000
Manifest next update:     Sat 23 Nov 2024 02:47:45 +0000
Files and hashes:         1: wMDnGZy4QKJJjB47pWdvngwGKGg.crl (hash: Y9ovfJaou9XKm4Y9+rPqKWupqXwujhyBjZGHC3qYsLo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
        Validity
            Not Before: Nov 21 02:47:45 2024 GMT
            Not After : Nov 23 02:47:45 2024 GMT
        Subject: CN=673e9f52-4285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:fa:16:b9:4c:da:7b:72:2b:b5:51:c5:b7:
                    da:b1:1b:ae:76:bb:0e:e4:43:b7:68:c6:8d:8f:41:
                    82:3c:c1:75:12:34:74:1c:16:1a:ff:af:b6:23:2f:
                    d4:5e:1d:13:93:0e:c7:2a:e1:f3:bb:a8:27:b4:4c:
                    e3:b2:48:49:57:0b:cc:6e:f0:df:92:7b:af:6b:7e:
                    54:98:cc:c7:7c:7b:e3:c5:1b:f4:75:a2:ba:09:c3:
                    92:1c:45:7f:c4:1f:5c:6c:48:d5:6f:51:5c:0f:ec:
                    ee:2c:93:0f:7a:c5:82:be:47:0b:45:e2:dc:55:b9:
                    e1:23:92:4a:97:36:03:9e:6e:9f:cd:f6:b5:cd:b5:
                    d9:f3:af:db:ec:a6:ff:b7:18:66:62:ec:b7:7c:ed:
                    76:c8:41:b5:70:70:36:2e:58:15:7a:54:d3:d6:f8:
                    38:1b:c4:ad:53:32:e9:32:0f:7e:da:31:9d:18:97:
                    e2:f1:dc:69:7d:f8:ed:7a:2d:da:c6:fa:2a:bd:fe:
                    77:3e:9d:d0:59:37:9f:f9:5c:7d:fb:0f:fa:e8:30:
                    b9:b2:a6:c2:d1:21:c8:7b:89:a2:1d:41:76:72:e7:
                    c8:56:c2:94:00:c2:86:34:3e:fa:09:26:b4:80:5a:
                    12:38:ce:43:a9:1d:95:f3:24:c2:a1:5e:e8:d9:12:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0E:DB:0A:DE:94:01:F3:C5:10:B7:66:1E:05:E9:91:1A:65:F8:BD
            X509v3 Authority Key Identifier:
                keyid:C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:8e:d9:03:9c:6b:75:10:11:e8:08:c0:bc:29:0a:be:46:4c:
         24:e4:07:e4:e2:3c:c7:e8:d0:72:54:da:fe:4f:f9:5f:0e:95:
         f4:fc:d9:87:bc:55:be:8c:54:05:a6:1d:08:a6:95:cc:b7:17:
         e0:fc:69:cf:b0:ca:4b:49:f4:48:83:16:b0:6b:45:ce:ac:ca:
         a1:cc:49:4a:91:7a:59:95:e4:01:d5:38:4e:d0:eb:db:59:ca:
         f9:92:51:c8:16:63:f2:03:c6:92:67:9e:fb:89:c7:03:65:83:
         7e:43:bc:e2:0e:cb:bb:12:90:2e:c9:2a:44:15:e7:0f:49:ba:
         21:cd:c7:98:49:32:4c:a8:6e:3d:64:c2:7e:5e:b9:da:32:67:
         ff:13:f3:1b:9c:4e:24:0d:b7:c0:57:5a:e2:a1:85:04:19:ae:
         d8:85:9d:4a:31:09:dd:4f:52:db:ba:5b:c4:e3:b9:34:63:f4:
         9e:83:16:7b:46:90:8c:03:ae:3f:d3:68:08:fb:e3:01:bb:ee:
         e2:c9:74:33:8c:d3:9a:13:21:a7:12:a5:87:37:e1:cb:82:09:
         04:75:5a:c7:60:16:d1:94:84:f4:d1:76:f7:23:a9:e3:69:ce:
         74:03:d3:2d:f5:b9:e9:fc:c5:21:11:37:14:4c:66:18:b1:a9:
         5a:38:79:6b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTBGNjVBRjExMC8GA1UEBRMoQzBDMEU3MTk5Q0I4NDBBMjQ5OEMxRTNCQTU2NzZG
OUUwQzA2Mjg2ODAeFw0yNDExMjEwMjQ3NDVaFw0yNDExMjMwMjQ3NDVaMBgxFjAU
BgNVBAMTDTY3M2U5ZjUyLTQyODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6cPoWuUzae3IrtVHFt9qxG652uw7kQ7doxo2PQYI8wXUSNHQcFhr/r7Yj
L9ReHROTDscq4fO7qCe0TOOySElXC8xu8N+Se69rflSYzMd8e+PFG/R1oroJw5Ic
RX/EH1xsSNVvUVwP7O4skw96xYK+RwtF4txVueEjkkqXNgOebp/N9rXNtdnzr9vs
pv+3GGZi7Ld87XbIQbVwcDYuWBV6VNPW+DgbxK1TMukyD37aMZ0Yl+Lx3Gl9+O16
LdrG+iq9/nc+ndBZN5/5XH37D/roMLmypsLRIch7iaIdQXZy58hWwpQAwoY0PvoJ
JrSAWhI4zkOpHZXzJMKhXujZEi5/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPw7b
Ct6UAfPFELdmHgXpkRpl+L0wHwYDVR0jBBgwFoAUwMDnGZy4QKJJjB47pWdvngwG
KGgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwRjY1L0Y0M0M4NjNBNDk4MzExRUZBMkY0NUZCNDc2MkU5NTFBL3dNRG5H
Wnk0UUtKSmpCNDdwV2R2bmd3R0tHZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dNRG5HWnk0UUtKSmpCNDdwV2R2bmd3R0tHZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTBGNjUvRjQzQzg2M0E0OTgzMTFFRkEyRjQ1RkI0NzYy
RTk1MUEvd01EbkdaeTRRS0pKakI0N3BXZHZuZ3dHS0dnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWjtkDnGt1EBHoCMC8KQq+Rkwk5Afk
4jzH6NByVNr+T/lfDpX0/NmHvFW+jFQFph0IppXMtxfg/GnPsMpLSfRIgxawa0XO
rMqhzElKkXpZleQB1ThO0OvbWcr5klHIFmPyA8aSZ577iccDZYN+Q7ziDsu7EpAu
ySpEFecPSbohzceYSTJMqG49ZMJ+XrnaMmf/E/MbnE4kDbfAV1rioYUEGa7YhZ1K
MQndT1LbulvE47k0Y/SegxZ7RpCMA64/02gI++MBu+7iyXQzjNOaEyGnEqWHN+HL
ggkEdVrHYBbRlIT00Xb3I6njac50A9Mt9bnp/MUhETcUTGYYsalaOHlr
-----END CERTIFICATE-----