Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft
File:                     8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft (raw, json)
Hash identifier:          a+tfpCwIbV4DS1vNtJGX6PpkzuN278MhRQGnov24Gfc=
Subject key identifier:   38:99:D6:2F:0F:96:77:43:15:C3:28:4A:FE:F5:BE:23:F8:24:21:96
Authority key identifier: F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88
Certificate issuer:       /CN=F36952BDAF/serialNumber=F3E24E5A9B76FE4D25D3175C3A5F7C29C6FB0488
Certificate serial:       027A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft
Manifest number:          0279
Signing time:             Fri 22 Nov 2024 02:12:47 +0000
Manifest this update:     Fri 22 Nov 2024 02:12:47 +0000
Manifest next update:     Sun 24 Nov 2024 02:12:47 +0000
Files and hashes:         1: 8-JOWpt2_k0l0xdcOl98Kcb7BIg.crl (hash: MkGbEIaTVitiOsPsold6lJSnnuWtIiIsqTRhzu/JzHo=)
                          2: 093B0E90C8FB11ED98CB97FAF1222468.roa (hash: vpXXt/ow+0lo+USnVnwFlT861El/Od59M/k7eEJfBuw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36952BDAF/serialNumber=F3E24E5A9B76FE4D25D3175C3A5F7C29C6FB0488
        Validity
            Not Before: Nov 22 02:12:47 2024 GMT
            Not After : Nov 24 02:12:47 2024 GMT
        Subject: CN=673fe89f-ef22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:e8:5d:73:e0:ba:17:a1:87:0b:b2:ff:5a:
                    d7:52:13:d4:f2:9b:b7:5c:5e:75:93:c3:eb:7a:10:
                    f8:aa:8a:9b:7e:1a:6d:4f:96:b8:21:74:bf:3f:37:
                    f1:ed:56:41:6d:53:38:0d:ad:f4:31:af:c7:ae:24:
                    3e:f5:19:86:59:68:e3:33:04:3d:e4:b8:19:e3:ce:
                    59:07:5f:f8:57:49:89:e3:5f:a8:4c:74:37:a5:43:
                    5b:3e:00:31:b0:8d:df:65:35:e9:2e:d6:0e:2f:1c:
                    e4:5f:a5:ba:35:19:75:a6:2b:fa:5f:4d:1b:fa:4c:
                    5d:c6:a1:9a:58:dc:68:fd:19:e4:2c:2f:71:99:38:
                    b8:31:3b:6a:4e:dc:35:ef:06:64:e7:9e:3f:8c:3a:
                    f6:dc:ff:2f:25:fb:0e:81:58:9f:e7:f1:59:29:60:
                    f9:bd:67:10:cf:2a:05:ac:1b:6c:83:39:cb:3c:bd:
                    93:f8:57:7a:db:0a:a9:c3:35:f1:bf:37:86:71:f3:
                    f6:d1:70:c0:12:f5:d6:a7:0a:3d:c3:8e:2a:87:15:
                    8d:b5:d5:33:7d:37:94:43:72:73:59:3f:59:fe:7a:
                    1e:c6:2e:30:09:0a:50:35:c4:4c:0e:9a:1d:35:09:
                    02:34:cf:ea:1c:7b:72:8f:dd:5a:ea:27:ec:7b:3c:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:99:D6:2F:0F:96:77:43:15:C3:28:4A:FE:F5:BE:23:F8:24:21:96
            X509v3 Authority Key Identifier:
                keyid:F3:E2:4E:5A:9B:76:FE:4D:25:D3:17:5C:3A:5F:7C:29:C6:FB:04:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8-JOWpt2_k0l0xdcOl98Kcb7BIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36952BD/BEBBAF78C8FA11EDA63284F9F1222468/8-JOWpt2_k0l0xdcOl98Kcb7BIg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:88:57:74:cf:a0:1b:1e:23:d6:ea:40:60:92:6a:38:a6:
         1f:86:05:b7:df:f2:5f:07:74:1d:30:27:09:3e:1d:8a:68:64:
         11:65:15:98:77:95:70:f6:ba:68:73:8e:cd:c8:00:e4:dd:95:
         d4:6e:ba:15:a1:ad:91:31:5d:4e:34:c8:c1:d0:f9:96:36:90:
         ea:94:c1:c9:d6:ef:a7:b3:9d:f8:70:39:96:3e:b5:5c:65:39:
         ea:52:b5:6f:fd:13:2d:01:45:4f:87:e3:fe:f7:13:84:c4:64:
         33:6d:64:48:0e:a9:72:18:b9:d2:6b:56:6d:2a:ed:41:82:e8:
         79:82:02:fc:e5:b3:11:20:3e:47:c3:0c:6b:70:5f:7d:9d:93:
         3b:86:9d:97:ec:13:65:e6:60:54:8c:6d:5b:95:a6:de:75:df:
         1d:80:42:09:94:08:dd:d2:11:df:07:3c:34:8e:04:18:a3:ad:
         43:41:0e:f1:4f:35:ef:bc:e2:84:a6:b5:21:93:05:b3:f3:db:
         3f:e8:49:54:a7:87:20:8c:45:66:0d:24:d3:88:9d:b5:26:03:
         07:3a:04:b2:2f:9f:60:4a:f6:f7:77:82:d5:43:bb:1b:4d:bb:
         1d:04:5f:da:7f:df:8f:8f:de:1d:b6:dd:66:18:2f:08:89:22:
         51:57:9b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----