Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
File:                     btXWd58RVP-e4YoO_T3bdQZOoeU.mft (raw, json)
Hash identifier:          eO8qMscISLFOPDfGWcYuYjWeBFoqBZpjr5XRj0QWBsQ=
Subject key identifier:   D5:C4:5C:6F:99:CA:65:A2:C4:6A:3C:BD:34:AE:DF:3F:45:8E:B3:CE
Authority key identifier: 6E:D5:D6:77:9F:11:54:FF:9E:E1:8A:0E:FD:3D:DB:75:06:4E:A1:E5
Certificate issuer:       /CN=F368F4A1RI/serialNumber=6ED5D6779F1154FF9EE18A0EFD3DDB75064EA1E5
Certificate serial:       8E
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
Manifest number:          8C
Signing time:             Fri 22 Nov 2024 02:48:48 +0000
Manifest this update:     Fri 22 Nov 2024 02:48:48 +0000
Manifest next update:     Sun 24 Nov 2024 02:48:48 +0000
Files and hashes:         1: btXWd58RVP-e4YoO_T3bdQZOoeU.crl (hash: Ovon5Q8koGeCBLkLdxEdVd9IOft0jzHjyZYdYBvc0DM=)
                          2: 75003F36428711EFA3917E69762E951A.roa (hash: YrqehZ9aTTD1SJptceMXxXj5BazN802PieW8aLLUgFI=)
                          3: B08DAB06428711EF998F6D6D762E951A.roa (hash: wgn3fcAb9qeYaD4t6OvWITLhpGB5UIMeJ/S+H9QW0zg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
                          rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1RI/serialNumber=6ED5D6779F1154FF9EE18A0EFD3DDB75064EA1E5
        Validity
            Not Before: Nov 22 02:48:48 2024 GMT
            Not After : Nov 24 02:48:48 2024 GMT
        Subject: CN=673ff110-808e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:ea:9a:07:e5:ce:c0:f0:6b:38:fd:cb:f9:
                    38:8c:c4:24:3b:9b:ce:0d:8b:ee:94:d1:65:21:e6:
                    f7:2d:92:b5:e6:8d:0e:b0:f2:82:f9:49:c3:bc:79:
                    43:d4:0c:83:58:54:d6:78:e4:ab:36:37:bf:7d:96:
                    d6:9b:98:5b:ce:d1:2b:4b:ab:c1:ce:b8:55:b7:7d:
                    86:77:30:10:6c:bc:c6:2a:6f:5e:c9:32:95:99:90:
                    68:5e:2b:a5:49:d3:7c:0c:21:1b:51:a3:92:49:1c:
                    8f:50:03:fa:4f:9a:b8:c1:7e:e2:5d:1d:ea:ed:df:
                    52:74:d0:2d:10:9c:83:3b:16:a7:9e:68:a3:6c:5c:
                    da:84:87:2c:c4:e0:c7:3e:fe:ad:93:d5:84:d2:0d:
                    11:11:01:c3:2e:e1:7d:97:1f:ea:14:fb:87:96:93:
                    3d:57:9b:74:af:42:a9:69:3b:e2:6f:c4:33:54:5b:
                    18:b8:f6:f4:02:c1:18:4b:44:d9:21:3b:44:46:bb:
                    13:4a:18:c6:1d:43:1f:84:4e:b7:c6:1d:98:33:89:
                    3e:2d:7f:bf:09:d4:2d:12:6e:e9:4a:ca:d6:b0:67:
                    bd:f4:c9:27:65:35:cf:cc:cb:61:d0:0d:b8:23:33:
                    13:b8:c2:6f:77:86:d1:95:9d:85:12:62:97:cb:05:
                    66:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C4:5C:6F:99:CA:65:A2:C4:6A:3C:BD:34:AE:DF:3F:45:8E:B3:CE
            X509v3 Authority Key Identifier:
                keyid:6E:D5:D6:77:9F:11:54:FF:9E:E1:8A:0E:FD:3D:DB:75:06:4E:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:38:f3:aa:39:56:f0:9f:a9:b7:0f:83:d9:57:34:44:b3:a9:
         fe:7c:bf:fe:11:0f:65:9f:c6:a4:c8:d8:05:67:83:de:01:82:
         08:91:2a:26:40:1f:c8:7b:99:ab:4d:79:ca:c5:8e:dc:95:f7:
         66:b2:35:76:9e:0b:42:5f:4f:ce:03:92:c7:75:c7:4c:3c:6b:
         37:76:2f:56:67:ea:16:20:ac:ea:c0:9c:7f:db:69:a6:e4:76:
         20:84:c0:2d:56:44:d1:bd:24:5f:fd:c7:15:20:2d:ee:fe:e6:
         8e:ec:41:6d:87:4a:c1:0a:bc:11:89:fd:bf:cb:1f:20:11:8b:
         15:a6:be:94:2e:74:fc:a4:15:be:30:04:de:b7:8f:15:fb:54:
         1b:1e:3e:51:bb:fc:21:01:11:fb:91:a2:cf:cc:01:7a:a3:c1:
         bd:6f:a4:06:a0:c4:c7:24:21:27:c0:24:c6:f3:8b:55:39:b9:
         d2:4a:76:88:e8:db:df:b9:92:9f:15:70:56:28:92:e5:e3:c9:
         4b:37:8d:e4:e6:71:69:19:67:41:a2:f6:0d:a9:8d:a2:bc:56:
         f1:cd:da:7c:4e:89:db:a0:98:fd:eb:2a:a1:2b:a7:6b:80:c7:
         43:11:d7:1c:02:fb:38:32:38:e2:58:9d:8e:a8:dd:f5:40:10:
         41:23:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----