Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
File:                     qPP_zPK9bxc-V43OhiXgHFOX9zU.mft (raw, json)
Hash identifier:          c9E0wzZMci5jdi7Ta26Xe8uzU2jrSyj49gAyFai4xGQ=
Subject key identifier:   CF:E3:2F:D5:3E:04:15:AE:6C:3F:65:54:10:F3:10:FB:01:BA:AA:B6
Authority key identifier: A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35
Certificate issuer:       /CN=F3684027AF/serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
Certificate serial:       04A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
Manifest number:          04A1
Signing time:             Thu 21 Nov 2024 01:39:56 +0000
Manifest this update:     Thu 21 Nov 2024 01:39:56 +0000
Manifest next update:     Sat 23 Nov 2024 01:39:56 +0000
Files and hashes:         1: qPP_zPK9bxc-V43OhiXgHFOX9zU.crl (hash: VhJkD2SQTU8YvS3P5iEkXXTp3OdDUqhnR7Sijf7vN6E=)
                          2: 7053DDBA207711ECA57B2A27D8A014CE.roa (hash: 8FwYiwQNn3Nk7JGlhTjNINHWw5iUKIWhAuMhk3sKQys=)
                          3: 5EE2F40CED9F11ED90CD53134AD9E6FC.roa (hash: 7NdUaz4rD9qpZUgGvl0CsoD0saUCFYGySX0YWVKqUtI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3684027AF/serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
        Validity
            Not Before: Nov 21 01:39:56 2024 GMT
            Not After : Nov 23 01:39:56 2024 GMT
        Subject: CN=673e8f6c-ea1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:64:ca:10:33:88:a8:44:c2:dd:f9:6e:4e:
                    45:c7:cd:a0:dc:33:ee:ce:d8:a5:c0:b8:fc:e5:37:
                    d8:be:11:a2:2c:f1:bb:c3:44:b7:6b:fb:41:2f:b6:
                    74:f3:7e:d9:ba:0a:49:b8:d7:81:a3:0b:62:ae:55:
                    ae:10:bf:ef:62:0e:6e:3a:b3:8e:6d:dd:d6:0f:8f:
                    62:50:63:33:5e:85:3f:74:64:b2:58:a6:ec:a1:7f:
                    73:fa:23:c3:50:7a:29:4a:c2:19:b6:b2:30:82:64:
                    78:25:3e:16:57:e1:24:de:18:bf:6f:06:4f:88:ec:
                    d9:3e:b6:ef:fa:72:5d:06:ff:cd:ae:eb:f7:8e:d5:
                    c3:5b:9a:7f:df:02:12:6f:7e:f5:b6:c0:6c:f8:fd:
                    30:12:7c:cc:f2:d3:f3:3b:f7:22:ca:f0:ee:09:fa:
                    f1:ae:29:e4:96:f3:fb:d1:a6:c9:f4:6d:4a:aa:71:
                    6a:61:25:84:62:7c:df:66:e6:13:5a:19:50:8c:36:
                    13:1e:ac:40:45:d9:af:43:60:55:39:5b:34:4a:39:
                    05:d7:ff:ab:6d:50:71:16:bb:0c:92:2a:a0:dc:34:
                    c4:ff:36:73:11:ae:9b:a8:d1:66:c6:51:66:59:a6:
                    be:2a:8c:76:b9:45:9b:d8:43:e0:9c:f8:56:2a:ef:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E3:2F:D5:3E:04:15:AE:6C:3F:65:54:10:F3:10:FB:01:BA:AA:B6
            X509v3 Authority Key Identifier:
                keyid:A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6a:05:9b:eb:f4:64:3c:f6:78:dd:dd:5e:07:c5:c6:5d:70:
         2e:5e:3a:90:ef:e1:99:2d:78:6c:64:02:a7:1b:dd:35:93:32:
         a1:92:bd:c3:ce:50:64:79:e9:9d:ef:11:06:10:28:13:1e:5b:
         7c:cd:30:da:cc:5f:25:60:d1:7c:2b:39:f9:98:a1:2b:fc:82:
         d7:92:80:d4:a0:20:c6:12:35:c6:f3:ca:72:e1:6f:8f:03:2c:
         ed:a6:89:ac:13:0e:84:30:a6:0f:53:1d:ac:6a:74:fb:9b:b0:
         f9:86:b7:30:e8:e3:cc:7c:eb:7f:6a:c6:b7:be:32:37:7a:e1:
         36:48:ba:0c:20:46:41:52:e6:a4:37:a5:e2:b9:8f:e5:69:40:
         34:af:89:00:6b:ee:82:bc:0c:50:e7:5e:23:08:dd:8d:a1:73:
         4e:dc:bc:1e:76:a8:eb:b1:0b:88:04:ab:ff:5d:25:a2:5d:a0:
         f0:ce:89:d5:fe:9d:d9:9d:a6:3d:99:c3:fc:5b:01:9a:ad:83:
         a0:7c:7b:d1:bd:78:f9:d1:ed:b7:37:1f:d0:53:7c:33:f6:b4:
         b2:12:35:d7:5f:4d:2d:fc:a2:92:41:a6:c7:c0:d4:bf:1f:b1:
         8e:6d:46:c8:39:2c:86:6b:73:50:cc:15:d5:e5:e5:a5:25:dd:
         8b:cd:39:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----