Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft
File:                     qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft (raw, json)
Hash identifier:          42O0eO0z483RFBgWnOLcgkjwB0Lse3ttEPf9vGUckRc=
Subject key identifier:   06:CE:9D:5F:7A:09:D0:CB:91:76:7C:CB:6C:23:34:C5:18:BC:46:07
Authority key identifier: AA:C5:5D:12:34:D3:B7:F6:EA:76:38:18:40:92:11:72:39:91:72:62
Certificate issuer:       /CN=F367E4D9AF/serialNumber=AAC55D1234D3B7F6EA7638184092117239917262
Certificate serial:       012B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qsVdEjTTt_bqdjgYQJIRcjmRcmI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft
Manifest number:          012A
Signing time:             Thu 21 Nov 2024 02:35:46 +0000
Manifest this update:     Thu 21 Nov 2024 02:35:45 +0000
Manifest next update:     Sat 23 Nov 2024 02:35:45 +0000
Files and hashes:         1: qsVdEjTTt_bqdjgYQJIRcjmRcmI.crl (hash: BHr6zdt05fQp+wuAbFHqRc8OH0HNR42qQs8i+R8oQ/8=)
                          2: B8E765D0C4D311EEBA5AF067775412E6.roa (hash: b0IzaXHkBIGfBIdqoNnOyRPJUQsYRBOGUhp6wp/+Nvw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qsVdEjTTt_bqdjgYQJIRcjmRcmI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367E4D9AF/serialNumber=AAC55D1234D3B7F6EA7638184092117239917262
        Validity
            Not Before: Nov 21 02:35:45 2024 GMT
            Not After : Nov 23 02:35:45 2024 GMT
        Subject: CN=673e9c81-f6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:6c:23:88:a0:e6:49:71:f9:c7:12:c4:e3:
                    7f:69:fa:08:1c:73:0e:35:c0:81:26:7e:dc:c9:20:
                    88:ae:d9:e3:25:43:5a:78:2a:ec:cb:e0:5a:8f:5f:
                    14:0f:b2:85:53:8e:90:d9:b9:6a:a9:a0:54:f0:45:
                    5c:00:87:88:d7:11:80:66:b4:b0:d0:13:f3:e7:a8:
                    38:c8:d5:d3:00:dd:35:53:9f:22:fe:22:49:e1:d3:
                    bb:18:8f:b8:f3:0c:21:6d:de:25:9b:3f:d8:00:d5:
                    2e:8f:68:c3:f8:4a:f9:d6:21:9e:d9:5b:c3:7e:16:
                    28:87:b0:89:5f:d0:2f:3b:81:c0:5a:72:67:10:f8:
                    81:6f:43:3e:4d:ff:da:15:2b:e1:be:4f:5d:e5:3e:
                    44:d8:9f:75:c2:81:5b:56:aa:2d:6c:4c:15:47:4c:
                    ef:31:d4:5e:17:9a:d5:18:e8:d3:a8:0a:35:e2:c7:
                    f6:58:a8:de:68:01:30:0d:af:38:af:4f:be:5e:4e:
                    f1:3f:df:13:c5:c9:4d:64:9b:15:8f:26:3b:f8:1c:
                    21:ae:ef:02:7a:84:df:d8:f2:7e:29:ed:cf:0a:87:
                    93:d4:66:e6:c9:c6:df:f9:6b:80:ab:05:a5:62:39:
                    e0:4b:09:93:c3:93:86:28:6e:05:f1:43:6e:05:d6:
                    b0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CE:9D:5F:7A:09:D0:CB:91:76:7C:CB:6C:23:34:C5:18:BC:46:07
            X509v3 Authority Key Identifier:
                keyid:AA:C5:5D:12:34:D3:B7:F6:EA:76:38:18:40:92:11:72:39:91:72:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qsVdEjTTt_bqdjgYQJIRcjmRcmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367E4D9/B9860BFCC4D011EE85F73263775412E6/qsVdEjTTt_bqdjgYQJIRcjmRcmI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ce:a1:67:d4:88:b8:de:0c:8a:3e:27:22:b8:90:34:08:47:
         ce:e1:78:d1:79:5a:92:c6:9c:f0:d1:c0:77:60:de:04:09:c8:
         60:3b:97:f3:04:dc:05:11:e1:bc:43:cb:30:3a:b6:34:33:66:
         aa:02:eb:53:7f:e7:c4:8b:c0:ec:f4:41:cc:63:82:0d:20:76:
         bb:f0:e0:73:59:df:95:58:46:13:77:00:cd:cb:c2:94:c9:81:
         3c:dc:07:82:b1:be:d1:7f:42:b0:72:cf:82:c1:2b:23:61:82:
         7f:ad:06:e2:cf:1e:39:d4:65:29:4f:c1:0b:a9:b0:11:06:0f:
         02:53:74:f5:77:9c:d4:ab:0d:af:4a:cb:ba:8c:d4:bc:5f:8d:
         5b:ad:14:fa:70:a3:47:f6:a3:04:f7:22:62:60:67:61:65:f1:
         1b:61:40:bf:65:02:73:90:ef:1f:bc:01:3f:22:0c:f6:a2:c1:
         81:5d:c3:dd:5c:b6:3f:31:02:b5:f0:47:a6:a3:fa:91:9c:c7:
         c1:23:94:bf:22:76:91:db:9e:51:11:1a:7b:81:68:e2:95:b8:
         99:de:df:53:f0:55:ab:eb:55:3c:d8:30:73:13:af:cf:f8:4a:
         4b:ef:23:71:a9:fd:7e:82:a2:5d:a8:4d:7c:eb:01:09:e4:51:
         b1:84:19:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----