Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
File:                     0YHpHtFz9k17-C2OC--ZTVmG31I.mft (raw, json)
Hash identifier:          DInb9yYaDg8RVKCB9UoU0+k0FSGmrQWG2zXykCd6Q+M=
Subject key identifier:   80:95:C8:E2:BA:C8:C9:89:92:16:DB:47:B5:0A:81:8D:10:47:3D:EB
Authority key identifier: D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52
Certificate issuer:       /CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
Certificate serial:       04A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
Manifest number:          04A4
Signing time:             Thu 21 Nov 2024 01:39:49 +0000
Manifest this update:     Thu 21 Nov 2024 01:39:49 +0000
Manifest next update:     Sat 23 Nov 2024 01:39:49 +0000
Files and hashes:         1: 0YHpHtFz9k17-C2OC--ZTVmG31I.crl (hash: fcToddXGJk3O4I+vpjMSFuVt/Ps8oDGyTxJ04kfSm4E=)
                          2: 9AECDB08EE3411ED9B086D5C4AD9E6FC.roa (hash: 7TbXwTAAA29/ssAknCIxCJNoExHtrE/m255Mx4kSiPE=)
                          3: 2CA2D93A038811EF9019CA30017001B1.roa (hash: Be78PaUHhsuszKdQPF/EsSUZ0AmEaz6Xf0Gf8dw0Abs=)
                          4: FE6EB5FE1A4311ED966281A5F1222468.roa (hash: lfZWe5DsRVIlTxGTn/2XYFuZb+ctw8ovU8wMMSRVTV8=)
                          5: 7F3D996AEE3411ED84E7435C4AD9E6FC.roa (hash: HFYeFndb2JxxOdKSqCujEOpY8n28a0y4vmxd4LvSXs4=)
                          6: 35E0C666207711ECA71BBD26D8A014CE.roa (hash: +cVurkAhF+yeR1OYxL2MVt7cz6AGWHeKwMma50XfssM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193 (0x4a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693944AF/serialNumber=D181E91ED173F64D7BF82D8E0BEF994D5986DF52
        Validity
            Not Before: Nov 21 01:39:49 2024 GMT
            Not After : Nov 23 01:39:49 2024 GMT
        Subject: CN=673e8f65-b8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fd:22:1a:8f:6e:59:2b:c7:13:a4:b5:9a:ff:
                    f6:c7:02:bc:a2:5b:fa:84:06:28:bc:d0:e2:de:72:
                    c6:97:9d:73:f8:e8:a3:c8:29:70:c3:dd:5e:c5:aa:
                    8d:c3:db:24:82:70:61:b2:78:9a:f3:64:2d:80:32:
                    7b:de:ea:af:1b:1f:69:aa:71:d0:69:f0:a8:48:72:
                    32:a9:2e:97:26:0d:d0:cc:26:1f:74:98:8c:30:d3:
                    8f:f5:50:b2:8d:8c:43:f3:31:ff:d7:bd:7c:0b:b0:
                    7d:6d:7c:2e:12:e7:81:76:07:9f:e1:e6:2b:91:a5:
                    25:2c:96:c4:50:15:3a:46:f9:5d:a3:6b:66:6b:bf:
                    28:e5:28:51:eb:2d:48:03:99:60:1b:e5:64:cf:b6:
                    8b:04:7e:3c:30:70:50:2b:eb:b8:f4:cd:4a:98:b1:
                    b0:32:8e:5b:cc:0e:65:ac:e7:1c:79:fa:72:5b:b4:
                    29:b2:81:52:7f:cc:9d:2a:d7:be:be:cb:cf:f0:c7:
                    99:51:a2:42:ec:c8:7b:64:88:89:57:3c:03:d4:8a:
                    c0:a7:2a:a0:7d:ba:db:57:5e:89:ad:3f:4d:74:b4:
                    e3:9c:c0:5c:dc:0f:ae:bd:d9:04:2c:06:5c:24:97:
                    15:27:04:c1:12:d3:71:72:1f:d0:ff:dd:8a:68:61:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:95:C8:E2:BA:C8:C9:89:92:16:DB:47:B5:0A:81:8D:10:47:3D:EB
            X509v3 Authority Key Identifier:
                keyid:D1:81:E9:1E:D1:73:F6:4D:7B:F8:2D:8E:0B:EF:99:4D:59:86:DF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0YHpHtFz9k17-C2OC--ZTVmG31I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693944/16AA8A44207611ECB3060925D8A014CE/0YHpHtFz9k17-C2OC--ZTVmG31I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:53:4f:de:f6:b2:3c:23:02:e3:55:9d:4c:4e:27:44:8b:8a:
         d6:38:d9:39:bc:fa:bd:79:73:df:09:c6:99:b6:86:4a:19:c8:
         6a:36:4e:64:c1:59:a2:c1:a5:22:45:58:92:c5:18:7d:04:ed:
         ca:a4:47:6c:ce:61:55:fe:9a:9e:d8:9a:5e:ea:a5:cd:44:a7:
         84:b2:7a:c1:0c:ad:a0:2f:79:41:a8:40:5f:de:ba:c0:8d:a4:
         25:23:c7:0a:88:0f:e1:dc:c5:d0:14:86:af:4d:18:b5:ab:e2:
         28:b9:97:5e:db:0a:28:01:64:fb:32:d0:a6:c8:22:cb:22:e0:
         85:ea:c5:81:e9:f3:13:c7:b0:25:1d:21:e2:e1:e5:7f:14:fd:
         f7:1e:f1:ae:3c:65:28:1e:f4:71:45:e2:bf:14:03:0a:42:7a:
         4b:dd:08:54:ea:17:35:6e:dc:52:1e:6f:09:b2:f2:86:69:55:
         12:17:b1:a9:7b:df:4a:8a:aa:ac:42:df:d2:1b:b8:46:73:33:
         6b:70:2c:3f:6a:d4:2d:ba:af:b0:44:ac:c4:76:38:9f:4a:f9:
         b4:cf:ec:33:21:dc:de:ca:fd:33:4c:dd:4a:d1:e6:8b:a8:40:
         de:b7:8b:a0:42:51:fb:de:cf:b5:7e:61:91:41:42:83:9a:70:
         0a:00:c4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----