Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
File:                     k84fICcYK4EpqwxxOo_1IcE9RI8.mft (raw, json)
Hash identifier:          640zuhlWJSfot7OySTyEroQDD8ADLJX537UjQB2nlsw=
Subject key identifier:   42:2A:A1:0D:40:62:E4:96:56:D1:35:8E:CF:94:6B:49:C3:85:0E:72
Authority key identifier: 93:CE:1F:20:27:18:2B:81:29:AB:0C:71:3A:8F:F5:21:C1:3D:44:8F
Certificate issuer:       /CN=F365FB04AF/serialNumber=93CE1F2027182B8129AB0C713A8FF521C13D448F
Certificate serial:       013E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
Manifest number:          0139
Signing time:             Fri 22 Nov 2024 02:37:08 +0000
Manifest this update:     Fri 22 Nov 2024 02:37:08 +0000
Manifest next update:     Sun 24 Nov 2024 02:37:08 +0000
Files and hashes:         1: k84fICcYK4EpqwxxOo_1IcE9RI8.crl (hash: whwFGG8wnghS/8WnKMd24hh4+2YD0Pm+dWN4+EAOvJE=)
                          2: 84F4D7E4C01E11EE96125668775412E6.roa (hash: foQPn6FWgsOZWx9YjKT409OmY84gXqjIzpo0LoTYpbM=)
                          3: 318B732EC01E11EE8B99BA67775412E6.roa (hash: EvtUtlYSfWZNzMNqGozZFQ05R7pmC383dcyBeyy04bo=)
                          4: B3968148BF7811EEB0ABC6B6775412E6.roa (hash: nQGeEEKitg0zBrxMzLb+bML7Bdg6QLf+TUFkV5DPzoE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365FB04AF/serialNumber=93CE1F2027182B8129AB0C713A8FF521C13D448F
        Validity
            Not Before: Nov 22 02:37:08 2024 GMT
            Not After : Nov 24 02:37:08 2024 GMT
        Subject: CN=673fee54-3725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:f8:52:64:2f:73:48:22:8f:37:64:30:e8:
                    f6:d4:b5:78:f6:06:37:62:ae:69:74:c3:6f:f7:e0:
                    91:bf:0e:15:6b:3c:ab:db:bf:80:a9:4d:15:6b:34:
                    46:18:61:4b:d2:6d:74:99:37:bf:98:58:dd:0f:34:
                    83:0b:77:b0:42:a9:0b:08:06:fc:26:0d:5e:89:d9:
                    a6:da:8f:59:4d:84:0f:bd:89:af:59:40:34:80:c7:
                    b9:6b:b0:d9:bd:5d:15:92:0d:b2:0a:d8:43:ff:a9:
                    67:d0:e9:a2:f5:2c:01:da:74:72:7f:73:fb:76:27:
                    76:7d:8b:29:2a:74:2b:94:ae:e2:51:87:21:6e:1c:
                    26:7f:66:9f:a4:ba:4c:04:44:07:9d:71:62:91:f3:
                    62:86:01:e8:71:f5:37:1a:6d:db:28:12:03:18:8a:
                    00:af:3a:70:4c:8b:98:d1:c9:8d:8c:37:90:64:fe:
                    9e:52:ea:0a:a4:2c:70:6f:bb:59:ed:c0:7a:2a:94:
                    97:fe:2b:42:5f:dd:a8:a3:08:e8:19:43:a2:99:cc:
                    24:bd:68:ba:05:16:28:b9:68:dd:4f:52:83:96:9f:
                    9b:31:1f:2a:93:f1:b4:be:05:f2:da:5a:79:f1:40:
                    2f:4d:e2:27:c3:a7:fb:da:7f:45:4a:d3:8d:e5:33:
                    3b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2A:A1:0D:40:62:E4:96:56:D1:35:8E:CF:94:6B:49:C3:85:0E:72
            X509v3 Authority Key Identifier:
                keyid:93:CE:1F:20:27:18:2B:81:29:AB:0C:71:3A:8F:F5:21:C1:3D:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:d4:56:da:3a:86:33:b6:b9:c8:da:09:28:ff:02:21:3d:
         c7:26:52:a6:b5:3f:96:09:9e:c2:aa:d6:91:6a:21:cc:75:0e:
         34:3c:af:d4:7f:c5:7a:26:bd:a9:80:e7:13:c6:75:4e:86:7d:
         a1:27:e5:69:8f:e3:81:c4:ed:b0:60:53:86:a3:88:6f:f5:3e:
         88:f6:bc:10:2a:6e:0d:bd:22:ca:e1:c1:3d:a8:74:f9:59:ff:
         b6:30:32:70:65:76:84:ad:41:7c:e8:d7:00:59:81:ee:ed:4c:
         d6:80:a7:9f:46:a2:4c:26:19:6e:96:6e:45:78:8d:8c:76:f8:
         c2:01:c6:8a:f2:61:d6:ec:b0:16:38:d1:b6:91:92:d1:1e:c7:
         53:bb:67:49:2d:52:8a:0d:79:24:c2:c8:4e:de:9e:3f:de:17:
         74:95:8a:b7:2b:aa:5e:e3:38:91:d0:bc:1d:d3:13:f6:38:e4:
         ce:e6:a7:85:3a:0b:ab:11:d9:eb:50:48:06:48:da:58:ff:39:
         a9:f2:23:cc:ca:b8:c8:93:d1:f8:4f:77:da:9e:87:3d:0d:ff:
         cb:9a:05:72:b7:c5:3d:f5:8f:d7:ec:ca:26:9d:91:52:ac:c4:
         45:63:96:90:26:2a:f6:4f:e4:05:11:9c:48:dd:0c:e8:d7:47:
         10:34:1a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----