Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
File:                     hHYz30sJnBpSITpyTYxq0rIkb1U.mft (raw, json)
Hash identifier:          yCxwTw9v1mWfH5Tbc73UaK2/mQM/TGHN5tS5YYHcYog=
Subject key identifier:   BA:5F:75:C2:0C:CA:D6:C5:20:E2:12:D9:96:27:46:36:14:E7:58:B8
Authority key identifier: 84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55
Certificate issuer:       /CN=F369A086AF/serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
Certificate serial:       026C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
Manifest number:          026B
Signing time:             Thu 21 Nov 2024 02:12:56 +0000
Manifest this update:     Thu 21 Nov 2024 02:12:55 +0000
Manifest next update:     Sat 23 Nov 2024 02:12:55 +0000
Files and hashes:         1: hHYz30sJnBpSITpyTYxq0rIkb1U.crl (hash: TlNLq9Jle+CjV+td9i088plT7D88DD8gzzDpS2nXOdE=)
                          2: C929139AD2D411EDA667F5E7F1222468.roa (hash: Y9jS1YbuXtHVWCKhSi4H7ePiYPS8XtVmXoggJSJ3nwM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A086AF/serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
        Validity
            Not Before: Nov 21 02:12:55 2024 GMT
            Not After : Nov 23 02:12:55 2024 GMT
        Subject: CN=673e9728-490c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:10:26:84:99:5a:ad:3a:ac:10:58:02:89:17:
                    cb:b4:2c:ca:49:00:1f:e7:c4:a0:ed:9f:5f:70:0d:
                    bb:1d:85:7a:7c:93:bd:22:f7:0e:b2:14:fc:f6:f5:
                    23:36:cf:e2:2b:c0:f1:50:aa:b9:75:a7:b9:ff:27:
                    6c:e9:2a:21:31:9a:2f:aa:1b:2f:2b:7c:3b:51:b5:
                    d4:ab:63:3b:ba:14:1f:6d:dd:d6:27:69:30:7d:b5:
                    34:0f:21:a5:35:24:f5:77:6c:2f:57:71:ac:4a:92:
                    07:6e:fd:67:13:b8:76:4c:e6:6c:68:af:4c:0e:05:
                    60:12:83:44:c1:ec:7b:dd:d2:26:b9:01:93:3f:4b:
                    ff:7c:20:30:1c:67:46:9e:a0:b6:6f:9b:a8:eb:ab:
                    18:1c:89:fa:4a:25:8b:25:27:78:ab:bc:49:b1:88:
                    13:c4:ae:f4:51:bd:dc:94:47:e4:13:35:ea:a3:de:
                    e1:ce:08:87:ef:67:f4:5c:67:9d:0c:d2:36:57:4a:
                    31:19:4f:1d:cc:d1:e5:8f:8f:5a:94:c4:df:1f:c0:
                    af:ec:ac:94:e3:a5:38:9a:a5:da:b7:cb:63:a6:21:
                    45:11:f8:ea:76:bf:bc:20:e9:01:05:69:61:49:26:
                    e3:07:1e:b7:46:6e:13:35:e9:b9:ec:dc:5a:c5:82:
                    73:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5F:75:C2:0C:CA:D6:C5:20:E2:12:D9:96:27:46:36:14:E7:58:B8
            X509v3 Authority Key Identifier:
                keyid:84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ac:9e:a9:6e:ee:ac:68:a0:d1:09:77:a3:4b:8e:11:98:0f:
         4e:0d:ba:2a:0c:7d:f2:c2:45:d5:16:a8:b8:7e:13:f2:3c:c8:
         4d:8b:ba:7d:15:39:e2:98:a9:5c:35:8d:ed:f2:20:64:bb:c4:
         d4:22:e0:3d:da:12:56:92:13:ff:59:1b:c0:8f:ed:21:40:19:
         30:b2:75:ca:d0:17:27:1b:53:61:60:d5:25:f2:9f:9a:2e:22:
         ce:86:8a:16:a7:36:c2:b7:58:de:e6:35:c6:fb:83:1a:48:ce:
         cf:0e:7b:5b:23:8a:3c:b8:d9:0a:bf:b7:ef:41:9a:4a:7e:98:
         d0:60:6d:3e:38:b5:0f:58:03:be:db:d4:6d:54:c2:77:9e:30:
         57:fe:9b:34:ef:c8:a6:6f:bd:17:75:21:8a:c6:61:e3:c0:2a:
         be:5d:6c:5b:66:b5:05:b0:c6:8a:d6:44:7d:c8:3b:de:87:9c:
         41:dc:89:c5:c6:2f:ba:3d:42:99:47:c2:e7:3f:0b:34:cc:54:
         89:52:a3:ab:fb:39:b4:ca:b0:c0:12:e9:35:26:50:f7:5a:0a:
         a5:ec:0d:a1:ac:04:f0:5a:09:e1:ee:1b:a1:f0:ca:ff:09:26:
         65:2d:91:52:2e:79:77:a8:e5:cb:98:5a:a7:80:54:2e:85:e3:
         d4:94:a5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----