Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
File:                     l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft (raw, json)
Hash identifier:          2IRQB7/iLJ9XOvIjYK0Eq4psxoI251pLsP0G4DQBu5k=
Subject key identifier:   7D:0F:27:A9:BE:DC:DD:F2:A0:C3:BB:4E:63:F5:8D:A6:1B:E8:3B:8E
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Certificate issuer:       /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial:       051D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
Manifest number:          051B
Signing time:             Mon 25 Nov 2024 01:32:17 +0000
Manifest this update:     Mon 25 Nov 2024 01:32:17 +0000
Manifest next update:     Wed 27 Nov 2024 01:32:17 +0000
Files and hashes:         1: l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl (hash: pY3KGZLvg9Hhn0shUxwmSi3TlSVTESEoVleWVSIwgew=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                          rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309 (0x51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
        Validity
            Not Before: Nov 25 01:32:17 2024 GMT
            Not After : Nov 27 01:32:17 2024 GMT
        Subject: CN=6743d3a1-1ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:ca:24:20:e6:d3:9d:a3:a2:a7:3f:f3:2b:
                    56:f9:9d:9d:6f:2f:a7:6d:19:05:2b:64:97:ff:4a:
                    81:93:ab:55:f4:48:f1:9d:cb:91:df:2c:37:e9:5c:
                    e3:bb:30:2b:cc:16:b7:19:e1:52:9d:dc:9b:eb:e6:
                    99:48:11:d0:b0:cc:ea:dc:28:83:5a:6b:3c:05:ca:
                    06:1b:39:3f:7e:40:ae:e2:7a:bb:32:59:45:02:2a:
                    32:55:68:c7:60:9d:a6:a4:ee:2e:7d:b9:a8:6f:19:
                    88:b0:28:33:81:bd:21:f3:2e:7d:a2:6d:bc:da:c7:
                    0f:3f:a9:f5:ef:7e:f3:dc:60:07:92:61:cc:01:5d:
                    cb:ae:bc:8f:46:20:35:e7:4f:cb:1f:c0:bb:cb:70:
                    ae:19:9a:e1:6f:8e:f0:24:e7:cf:59:cf:76:a3:3e:
                    fb:e7:c2:6c:16:e5:5a:e9:d6:3e:d5:3c:27:6e:3b:
                    c4:8f:c8:75:fc:de:cd:14:f8:ad:2a:e5:e4:d6:08:
                    2b:9a:6a:4f:2d:6f:f8:3e:8e:da:ce:c2:fb:b5:53:
                    61:fd:c4:b5:ff:5e:2a:fe:cb:6a:27:95:d7:67:bc:
                    69:8a:5f:4c:3b:a3:18:81:ba:fe:6b:c8:fd:f0:56:
                    7a:f5:20:99:9b:cb:9e:05:5a:bc:49:e5:9e:b2:34:
                    27:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0F:27:A9:BE:DC:DD:F2:A0:C3:BB:4E:63:F5:8D:A6:1B:E8:3B:8E
            X509v3 Authority Key Identifier:
                keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:68:57:66:ab:f2:c8:c8:da:84:91:9e:9b:38:21:aa:62:5d:
         f5:ce:ca:14:27:c4:a3:ec:23:1f:86:4b:84:e4:e6:46:8a:6d:
         c8:f4:13:ee:43:31:00:5e:b0:d4:79:49:32:39:f1:9b:1e:78:
         55:d9:a8:d5:26:9a:a1:f3:50:69:fe:8f:06:d2:82:b2:53:06:
         dd:47:e5:9d:81:e0:3e:8a:3b:1c:06:8c:1a:1e:05:37:fe:c6:
         f9:e1:03:b6:6c:d0:4f:7e:78:00:2c:1b:e2:7b:22:d8:23:88:
         cc:75:ab:e8:6c:38:18:be:f9:ce:34:6d:45:9d:a3:07:18:a9:
         9c:94:f9:f8:20:36:ae:e5:20:cb:58:a8:39:1b:29:44:8d:a2:
         c7:bc:ee:7a:fe:68:51:b1:a4:ea:7c:6a:82:61:85:ab:19:2a:
         62:10:7e:85:de:bf:e8:0b:76:1c:39:bd:47:bf:d1:74:61:95:
         6e:24:b9:5c:32:db:14:91:07:a3:54:81:bf:57:0a:09:e3:b8:
         22:34:9f:9e:9b:37:2c:78:15:2c:46:d4:cd:1d:7b:51:4f:1a:
         88:36:d5:f2:15:b7:82:62:3a:ed:44:0e:44:cc:f4:01:a5:0a:
         68:1f:0f:10:7d:1e:3c:8b:6b:51:7b:0a:82:c7:3d:de:47:07:
         32:a8:6e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----