Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
File:                     pM4k_g7il2reULOd__0tfkLA8oo.mft (raw, json)
Hash identifier:          7aOqip9rbG1wKp4dGkWev53oo0uZk9KfxzN0jy5sSBI=
Subject key identifier:   F6:BD:E8:B3:CE:01:3D:69:16:9B:55:A2:FC:8E:C0:10:47:10:EA:6B
Authority key identifier: A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A
Certificate issuer:       /CN=F36987B2AF/serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
Certificate serial:       05C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
Manifest number:          05C2
Signing time:             Fri 22 Nov 2024 01:21:40 +0000
Manifest this update:     Fri 22 Nov 2024 01:21:39 +0000
Manifest next update:     Sun 24 Nov 2024 01:21:39 +0000
Files and hashes:         1: pM4k_g7il2reULOd__0tfkLA8oo.crl (hash: OGyrSMt1eBJUrnIL61P6mw81WPuGpgLllujXjNNSYFA=)
                          2: 390A5A34413211EB90B58A09F8AEA228.roa (hash: BLtGDMxqbFhD8bZdR2LWNCdZfA1WGqCQ2lVMd70kTH0=)
                          3: CAB95F3A413111EBAEFE3009F8AEA228.roa (hash: 3J8csPHyGJk8M/namF0fmG+U4+q5VVyeZJygS1yfavI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476 (0x5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36987B2AF/serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
        Validity
            Not Before: Nov 22 01:21:39 2024 GMT
            Not After : Nov 24 01:21:39 2024 GMT
        Subject: CN=673fdca4-1c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:bd:bc:5e:34:2e:e9:ce:b6:60:3f:1d:3d:
                    c2:33:5c:cc:17:5a:26:7c:7f:9e:ec:51:12:17:79:
                    27:33:e5:54:c1:24:3d:0d:e6:44:0e:70:fd:2b:7f:
                    de:b4:27:08:1b:bc:e1:43:9e:e4:6f:21:85:63:5f:
                    42:02:2d:dc:5a:02:ce:61:1e:85:32:25:09:cc:84:
                    38:47:e3:65:ff:ca:c6:c0:4a:0c:22:44:74:b6:8b:
                    cd:1d:cc:d7:e4:15:75:f0:2d:a9:45:79:5b:53:d6:
                    64:a8:c3:8d:29:f9:86:68:8e:2b:f1:dc:1a:c9:69:
                    58:57:31:e2:ca:cc:d3:00:0d:54:0d:16:4d:a2:85:
                    1f:74:b6:fb:a8:39:f8:9a:6f:cf:f5:29:0a:68:52:
                    cb:e9:74:dc:ee:bf:c2:a1:f7:de:d7:94:39:a4:97:
                    dd:0c:b4:22:c6:4d:e3:7c:85:4a:0c:38:72:f1:7c:
                    4a:a2:d4:69:2e:68:4c:0c:f3:c5:8e:42:62:bd:5c:
                    40:e9:c4:c9:66:1c:1e:c5:e2:b6:fc:0e:75:b3:bd:
                    37:16:9c:43:ee:f7:f3:6c:52:7e:5e:56:8b:46:eb:
                    22:6c:30:d9:00:1a:99:66:ef:cb:e1:04:80:29:9e:
                    be:d6:bf:8e:a3:4c:67:59:3b:09:55:b6:c0:6a:78:
                    59:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BD:E8:B3:CE:01:3D:69:16:9B:55:A2:FC:8E:C0:10:47:10:EA:6B
            X509v3 Authority Key Identifier:
                keyid:A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f2:0e:80:61:77:14:84:ab:18:9c:d1:ee:20:c8:e7:3d:cc:
         39:e7:13:1b:d6:44:95:e6:1d:63:b7:62:7f:20:b1:84:ed:a1:
         05:1e:47:aa:39:86:dc:55:fd:0c:b1:9f:5e:60:d5:de:89:00:
         29:41:02:ed:5e:ee:73:de:67:08:f7:a3:02:e1:03:c4:41:00:
         64:64:2a:11:88:e6:63:84:7c:5d:3f:86:6f:0a:7f:5e:38:d1:
         3c:7f:1f:4c:31:5b:4b:45:21:a6:f8:e2:59:48:c1:0b:0d:ab:
         f4:af:f5:f2:29:25:ea:8b:3f:86:37:81:58:77:d0:72:ed:9e:
         78:99:a0:70:51:a6:33:6d:ba:75:8f:89:d3:11:d1:6b:20:f8:
         88:de:24:e6:52:99:b0:9e:73:ce:2c:3b:07:f5:d0:54:c5:f5:
         da:8b:d8:07:cc:06:aa:a8:49:d8:56:4b:82:b4:0f:d0:d7:fd:
         bb:8c:48:99:aa:0b:d0:cd:f9:59:cc:26:3f:7c:9f:55:7c:fc:
         52:9a:ca:de:d3:22:0f:f9:47:85:36:ef:3a:35:77:98:96:14:
         4c:34:a6:68:49:1a:3e:43:99:1b:ec:a8:26:d1:b4:55:7e:1a:
         48:98:b0:5b:fa:43:9b:1c:cb:2d:6a:a5:79:91:0d:10:a8:9f:
         1a:f2:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:13 2024 by rpki-client on console-fra.rpki-client.org