Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
File:                     1wfkSz_UKAnv_gwP4_VABn04PVY.mft (raw, json)
Hash identifier:          T87SBtULfkSUUYFjrrVCC/7nI0mqPX8DfChtnMji0h4=
Subject key identifier:   BA:9D:49:F7:37:E7:CA:D5:0E:2A:4E:64:C6:27:7A:03:DA:FC:DB:21
Authority key identifier: D7:07:E4:4B:3F:D4:28:09:EF:FE:0C:0F:E3:F5:40:06:7D:38:3D:56
Certificate issuer:       /CN=F3690C75AF/serialNumber=D707E44B3FD42809EFFE0C0FE3F540067D383D56
Certificate serial:       6E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1wfkSz_UKAnv_gwP4_VABn04PVY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
Manifest number:          6E
Signing time:             Fri 22 Nov 2024 02:51:30 +0000
Manifest this update:     Fri 22 Nov 2024 02:51:30 +0000
Manifest next update:     Sun 24 Nov 2024 02:51:30 +0000
Files and hashes:         1: 1wfkSz_UKAnv_gwP4_VABn04PVY.crl (hash: p0mu6jkY0FWXw71CKDvyY6CraLm18vnDqiwok0/1EHA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1wfkSz_UKAnv_gwP4_VABn04PVY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690C75AF/serialNumber=D707E44B3FD42809EFFE0C0FE3F540067D383D56
        Validity
            Not Before: Nov 22 02:51:30 2024 GMT
            Not After : Nov 24 02:51:30 2024 GMT
        Subject: CN=673ff1b2-aafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:a1:cf:73:4e:94:d1:33:8d:c4:d7:bb:be:
                    49:54:cb:4b:7c:d5:a7:91:4a:f1:8a:a6:ab:75:ea:
                    c7:8c:2d:e4:22:81:cd:c7:42:28:41:e9:a3:b0:17:
                    89:29:cc:9d:9c:42:13:3c:47:eb:df:5c:0b:e2:11:
                    f8:e0:d4:2a:3d:f4:03:1d:5c:f8:6c:c7:9a:80:45:
                    ab:e7:5e:30:0d:99:ae:55:56:37:2e:4e:2e:28:cb:
                    dc:89:6f:99:27:c9:1e:77:74:78:15:e5:d9:1e:a2:
                    0a:d9:29:d7:c1:f5:42:4f:d5:9c:3a:d9:96:7c:e4:
                    45:73:d6:a6:c7:32:8e:75:4a:c5:fc:e7:58:95:74:
                    81:41:ae:72:54:a5:bd:85:54:54:a1:78:f1:c8:8a:
                    02:da:fd:1e:47:14:23:56:96:61:12:87:8c:65:14:
                    42:fb:ba:9b:dd:d3:cd:d2:5c:17:2b:d4:a2:45:9f:
                    b0:11:51:d3:90:db:01:40:b9:f3:ff:27:fa:81:4c:
                    a7:ad:77:54:c0:9a:0a:76:98:7b:67:ce:ad:66:2f:
                    d1:33:93:8a:e2:39:0e:2b:32:96:b5:ed:3f:5a:b0:
                    05:14:d0:f5:9a:aa:85:4c:e9:6f:8e:8d:39:a3:53:
                    2f:45:76:2b:75:58:9c:a9:dd:a8:d2:19:a7:ee:f3:
                    31:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9D:49:F7:37:E7:CA:D5:0E:2A:4E:64:C6:27:7A:03:DA:FC:DB:21
            X509v3 Authority Key Identifier:
                keyid:D7:07:E4:4B:3F:D4:28:09:EF:FE:0C:0F:E3:F5:40:06:7D:38:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1wfkSz_UKAnv_gwP4_VABn04PVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C75/F3796130558811EF9F0F1786762E951A/1wfkSz_UKAnv_gwP4_VABn04PVY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ca:11:95:02:47:2c:8a:bb:8a:2b:26:cc:ba:af:4b:ad:77:
         0a:4b:dd:85:69:24:91:06:b0:a6:3f:b4:f0:bf:55:7c:f6:66:
         9f:85:4a:fd:50:ba:1c:16:f9:ec:89:3d:5d:93:c8:55:72:7d:
         94:27:1a:74:c1:c8:36:9c:46:30:e7:34:19:03:b9:d6:c3:b2:
         f1:4c:2f:dc:99:8a:8d:22:98:20:5d:19:bc:b9:3d:ea:fd:12:
         1a:e5:5d:b5:1a:17:25:9a:8d:cd:92:3a:82:02:1b:c3:9e:38:
         ae:99:a6:7e:3e:31:06:12:ff:ac:c8:9a:1c:1d:d9:38:4e:a0:
         de:0c:71:41:ae:ef:49:4d:1e:10:cc:d7:53:98:39:71:01:b2:
         b7:99:3e:ec:4f:e7:70:7d:ea:db:f3:77:f2:45:f9:30:1e:b0:
         23:ed:0b:29:ad:90:d9:8f:e5:6e:8e:70:a0:4b:b8:aa:73:0e:
         47:c9:55:db:cd:4b:20:de:a1:fc:86:7f:3d:98:6e:19:9a:5d:
         76:e5:50:26:24:0c:6c:ee:97:9c:3b:08:f8:db:36:05:0d:cf:
         fe:58:a3:72:1b:00:07:2f:17:f0:a2:48:a2:8c:78:ec:13:95:
         14:34:8b:76:e5:ad:1f:93:56:83:b4:7d:d3:13:a3:9c:39:7d:
         00:ec:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----