Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
File:                     vc-uJWmnA46pcPrPQDA0GPY1H0g.mft (raw, json)
Hash identifier:          KBXZFKvWSOWcgCFqK+s3Bn6VsMLS58/Rbskd2Iv9gok=
Subject key identifier:   2F:00:0C:98:76:EE:92:D8:9C:E1:7D:1C:9F:76:A9:CB:25:11:73:A5
Authority key identifier: BD:CF:AE:25:69:A7:03:8E:A9:70:FA:CF:40:30:34:18:F6:35:1F:48
Certificate issuer:       /CN=F3658A3FAF/serialNumber=BDCFAE2569A7038EA970FACF40303418F6351F48
Certificate serial:       2E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
Manifest number:          2B
Signing time:             Wed 23 Oct 2024 03:02:08 +0000
Manifest this update:     Wed 23 Oct 2024 03:02:07 +0000
Manifest next update:     Fri 25 Oct 2024 03:02:07 +0000
Files and hashes:         1: vc-uJWmnA46pcPrPQDA0GPY1H0g.crl (hash: 68GE8b/Z3WFAaUjDibflcsmrVCRc/B6Ji3rWT+LA1UI=)
                          2: 2FD55E82741E11EFAC1F5677762E951A.roa (hash: yK+GF+mnFJmB3GPr0etfsyb2RoWyRhvCEdCQ6Xl4fOM=)
                          3: B1580E28775211EF8422209B762E951A.roa (hash: 3jNv2hrO32PB5K8c+t8vu6E3ApIkflNjeVX5pzc7APs=)
                          4: FF8E457C741D11EF8D538675762E951A.roa (hash: 6X3NUQA2g5a3P3oPEfsVXoEnHkdqMcSAGwMmrV+SpqU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658A3FAF/serialNumber=BDCFAE2569A7038EA970FACF40303418F6351F48
        Validity
            Not Before: Oct 23 03:02:07 2024 GMT
            Not After : Oct 25 03:02:07 2024 GMT
        Subject: CN=67186730-4299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:63:34:70:82:ed:e5:33:f7:27:ba:89:16:
                    61:b9:b2:2c:cb:f3:54:7f:e3:0d:7b:d7:8c:6c:60:
                    47:93:e1:df:29:d9:b3:75:81:bf:42:b5:42:67:9d:
                    70:ad:be:27:d5:03:ee:c9:45:8c:c3:5d:62:21:34:
                    25:b7:51:74:0d:58:b0:19:2d:66:51:d6:d5:2f:ba:
                    24:81:d8:f0:91:f9:83:4d:e4:e7:e0:a6:bf:58:ab:
                    b0:eb:7e:c4:0f:2d:d0:4f:d1:03:fc:73:fb:48:3f:
                    25:b2:50:85:0a:da:15:37:0b:f3:49:27:31:b7:26:
                    1e:33:76:a1:51:3f:af:bb:b8:89:89:fa:20:df:a1:
                    21:5c:80:d9:f4:d6:83:26:0b:d7:96:7f:b0:08:56:
                    ce:ed:13:04:81:77:b5:00:c9:75:e1:05:c5:e2:40:
                    f7:28:a0:d9:40:99:bb:c3:88:f7:83:1f:14:9f:d6:
                    56:51:27:ef:fc:24:a6:d2:c4:f6:5c:b7:5b:f5:56:
                    de:ba:6a:84:6c:76:ab:00:05:e5:f2:eb:9a:6f:f1:
                    10:d5:58:1d:6d:9c:e5:8e:e5:97:05:6a:a2:bd:33:
                    42:68:ac:c3:1c:6d:63:38:15:90:1d:3e:0c:83:8a:
                    00:e5:a0:5d:33:76:33:e1:f6:21:a9:da:f3:fe:2a:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:00:0C:98:76:EE:92:D8:9C:E1:7D:1C:9F:76:A9:CB:25:11:73:A5
            X509v3 Authority Key Identifier:
                keyid:BD:CF:AE:25:69:A7:03:8E:A9:70:FA:CF:40:30:34:18:F6:35:1F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:72:25:11:c9:0c:2f:0a:69:67:9e:e6:37:37:2c:b8:8e:80:
         c8:e3:e2:35:19:10:6f:80:a4:e6:7f:44:e8:40:f1:8e:c5:92:
         8e:d4:06:af:f8:7e:d0:01:c2:6a:28:6d:5c:9c:26:fe:3d:41:
         4f:61:47:6d:c9:6f:00:e1:53:42:73:0b:e8:9d:77:a1:99:45:
         fe:59:5b:6c:9b:59:43:c6:d6:be:7f:1c:c3:dd:cf:9d:c0:7b:
         9f:41:94:30:18:e5:ba:59:b3:61:66:8a:32:b7:15:c3:26:39:
         8e:64:01:32:45:84:ce:f3:50:8f:9d:c3:3c:7d:9f:b8:3c:ce:
         00:d3:9b:68:e0:c9:84:98:e5:ef:0d:08:fb:43:1d:30:98:4f:
         56:31:e3:b4:6a:92:70:53:17:25:d8:08:94:83:59:9a:b2:2a:
         40:e6:d5:26:b7:e9:1f:89:f3:44:37:80:6d:05:ad:42:b6:a1:
         27:63:e6:13:2b:0d:06:9a:22:db:54:b0:6b:6b:51:f6:0d:ba:
         c4:ea:c6:bc:16:4a:0b:1b:f3:ea:82:63:fa:59:61:a6:a8:bb:
         5d:15:d7:f8:e5:b0:7b:a9:5c:61:0d:48:16:60:04:7f:95:4c:
         1c:01:4e:1a:a8:b2:9a:1e:4b:38:9d:02:56:f7:cb:6a:24:ee:
         44:69:b2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----