Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
File:                     8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft (raw, json)
Hash identifier:          SyTTxRYcW563UWhddE0wpkd077yW8cXH9nfSX/ZUslU=
Subject key identifier:   12:7E:24:98:08:0D:2B:18:FF:12:70:35:CE:15:EF:3C:C6:4A:07:77
Authority key identifier: F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B
Certificate issuer:       /CN=F3692292AF/serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
Certificate serial:       23
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
Manifest number:          22
Signing time:             Fri 22 Nov 2024 02:58:58 +0000
Manifest this update:     Fri 22 Nov 2024 02:58:57 +0000
Manifest next update:     Sun 24 Nov 2024 02:58:57 +0000
Files and hashes:         1: 8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl (hash: tHOrsIdLdDUoL8+Qx1g0cZ4ziew1fPpEHwQLZraNcZY=)
                          2: F56FFE86912911EFAEEF2B78762E951A.roa (hash: CXZk+/Is0OxggDK9eJOwdsU1YQzXuO6D+yTuqbBLE28=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692292AF/serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
        Validity
            Not Before: Nov 22 02:58:57 2024 GMT
            Not After : Nov 24 02:58:57 2024 GMT
        Subject: CN=673ff372-3186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:86:ee:4c:46:ee:0d:12:12:44:3d:20:f9:
                    0c:78:f3:12:94:dc:fb:4f:17:93:20:a7:00:18:45:
                    1d:f2:24:01:d7:fd:7e:44:e7:92:cd:7a:22:0c:98:
                    55:0f:c7:e5:e6:77:ca:a0:92:de:0e:63:99:31:c4:
                    8a:c0:12:70:a3:0e:a2:14:ce:82:ce:da:97:bf:9c:
                    f7:39:ac:e8:a1:f8:3b:f5:4d:04:53:0c:c9:ed:04:
                    9a:27:ca:2f:0a:92:08:41:ec:7c:09:78:2f:50:19:
                    41:9b:41:c2:89:bf:e4:de:b6:d8:f0:0a:5b:6e:ae:
                    ff:dd:66:38:b7:a4:83:66:4e:ea:6f:1e:ce:eb:ec:
                    c1:02:70:ab:5c:c9:be:59:95:1a:a8:1f:c4:3b:50:
                    0f:6f:0d:18:16:e4:b6:9f:91:d6:4d:b6:b6:2c:15:
                    1d:30:bd:d4:7b:00:8d:1a:65:35:28:e9:1b:20:fb:
                    9f:01:af:ed:ed:52:6b:b8:10:69:2a:77:80:65:2c:
                    22:bf:79:5b:a2:1d:86:47:32:aa:19:fe:84:03:09:
                    2a:13:75:1b:4b:53:15:e4:0c:9c:9a:ac:4a:19:d2:
                    94:ad:bd:0d:92:5e:26:0a:06:86:c2:f3:b5:01:36:
                    60:ba:37:15:43:df:00:38:50:c2:cc:49:d2:4f:02:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7E:24:98:08:0D:2B:18:FF:12:70:35:CE:15:EF:3C:C6:4A:07:77
            X509v3 Authority Key Identifier:
                keyid:F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c7:25:b6:17:c8:7e:fc:d7:23:7e:b0:3a:0d:e0:fd:dc:3f:
         02:27:a5:1c:d8:33:ba:56:d6:2b:e9:8a:e3:c8:83:ed:b5:28:
         60:d8:2f:69:3b:2a:bb:07:43:9e:25:b8:bb:0e:f3:68:5e:5e:
         0a:0f:ac:88:7c:a0:06:65:0f:b6:8a:0f:48:b7:0b:24:21:86:
         94:14:d4:5b:1e:b3:2b:a8:f3:19:38:5a:98:ea:45:33:33:b4:
         50:2e:8e:25:ad:27:25:bf:6f:44:df:44:60:83:2d:c5:91:12:
         f7:c5:cd:5b:55:20:00:6f:73:d1:82:b9:e2:b9:e2:26:e8:45:
         64:73:4d:88:06:03:c4:a0:da:84:52:75:c0:02:6e:a9:9d:56:
         d8:e0:d9:a6:0d:c8:94:93:1e:bb:a3:c4:c3:e2:f1:20:16:49:
         ea:c8:9e:50:28:48:8f:b5:d6:aa:1c:a6:23:25:33:4e:5e:43:
         ea:93:0c:4c:cb:09:38:42:62:3f:f0:bb:b2:6d:cd:47:29:48:
         fb:1a:ef:5b:53:56:d8:43:af:aa:fc:c2:96:b2:05:f4:0e:67:
         fd:6a:05:c1:a2:bf:cf:51:12:f7:bd:72:ef:11:e0:6a:6a:53:
         8e:ed:19:bf:e6:85:33:8f:a3:09:e6:44:10:6f:18:9c:2f:01:
         85:17:92:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----