Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
File:                     Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft (raw, json)
Hash identifier:          EhjuHiW99b5lK8wXeSnfvY1T+f4sbALl1XBoRyNXdwg=
Subject key identifier:   EF:1D:5A:C2:D0:96:29:D8:CD:FC:8D:30:89:69:4A:E3:31:16:D9:B9
Authority key identifier: 2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D
Certificate issuer:       /CN=F369C49AAF/serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
Certificate serial:       DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
Manifest number:          DB
Signing time:             Thu 21 Nov 2024 02:40:58 +0000
Manifest this update:     Thu 21 Nov 2024 02:40:57 +0000
Manifest next update:     Sat 23 Nov 2024 02:40:57 +0000
Files and hashes:         1: Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl (hash: ooYMl2Q5XhrfE0iGZBYxafOcAssUI/6Su7LcNQP/pqI=)
                          2: 3F101946015F11EFB16E3011017001B1.roa (hash: Xh6nt99XUHYlPadPzPRYk3ee0GvJbKhlgYL2g7hGR5Q=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C49AAF/serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
        Validity
            Not Before: Nov 21 02:40:57 2024 GMT
            Not After : Nov 23 02:40:57 2024 GMT
        Subject: CN=673e9dba-6e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:7d:81:1a:7d:be:71:0c:71:36:3f:e1:37:
                    cd:b7:3e:16:66:ee:4d:d0:61:69:83:7a:07:92:9a:
                    9a:6d:4a:1c:3a:5f:76:a4:97:e5:d4:b7:88:5a:d0:
                    28:8e:69:e3:03:a1:5f:28:b9:d1:81:ad:82:b5:19:
                    da:85:63:ef:f6:19:20:93:be:38:fc:2e:1f:cb:d0:
                    1b:50:ac:9f:d0:e5:a1:4f:eb:d0:c7:ce:6c:ab:c1:
                    4c:0f:e7:49:c2:1b:18:39:d4:e8:09:8c:5b:15:7b:
                    97:e3:b5:eb:3d:8c:16:ac:ce:f6:de:cf:ae:32:eb:
                    5e:fa:8b:67:c7:38:84:21:8e:3d:e6:34:d4:3d:bb:
                    ee:95:e4:96:18:39:7d:c7:ea:55:79:4e:8a:c6:28:
                    4f:41:38:32:ba:e8:45:92:19:b3:53:bc:a6:ed:57:
                    be:2b:e4:f0:c2:28:35:cd:7e:3c:59:e6:4b:0b:54:
                    72:e3:70:c7:77:47:e3:44:ed:2b:25:f8:06:03:2f:
                    83:e6:69:da:70:cf:fc:15:f7:83:e7:fb:46:95:f3:
                    8f:17:f7:33:b4:cd:31:65:ba:6c:8c:bb:31:a1:cb:
                    be:c8:5a:41:84:84:1b:80:01:4d:47:eb:ef:66:49:
                    3b:6b:9e:88:b3:5f:c5:4e:6c:aa:0c:5a:bd:5c:77:
                    b1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1D:5A:C2:D0:96:29:D8:CD:FC:8D:30:89:69:4A:E3:31:16:D9:B9
            X509v3 Authority Key Identifier:
                keyid:2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:65:42:55:31:3b:c4:77:d3:24:b8:01:1c:72:17:1a:90:15:
         dc:33:d4:c8:82:60:a4:96:6b:84:9d:5d:e2:0e:af:59:5f:dc:
         c1:9d:af:ca:6a:54:1e:85:f7:1c:1f:eb:70:08:51:90:bb:75:
         b8:fa:d4:2c:f9:3b:c9:e3:2c:82:3b:ae:50:17:07:07:24:04:
         a5:6e:04:d9:3f:6f:09:6a:e6:4b:49:1f:cf:fe:a7:4b:99:bc:
         af:7e:6b:01:be:47:7e:a8:26:e1:54:fa:7f:a5:ea:42:df:ee:
         ff:95:79:fe:36:49:1a:90:d4:05:74:36:f3:30:b4:cb:bc:83:
         16:83:d0:7e:86:cf:a0:e3:d2:6d:3e:4c:d4:a7:24:be:8b:ab:
         93:25:ab:fa:78:d6:a5:85:8d:84:84:52:77:9e:89:91:f9:9d:
         b9:94:48:6e:35:36:54:2a:3c:ad:6e:87:98:b8:fd:8c:22:b8:
         09:0b:cb:e9:7e:cd:ca:a6:b7:41:3a:84:29:9c:fc:74:a9:8f:
         1c:b3:41:25:2e:79:8c:e4:00:a4:b0:e0:9b:51:29:4a:e9:4b:
         19:33:e2:17:60:15:e2:98:ab:78:86:ef:3d:34:ad:2c:aa:f6:
         47:f9:c9:2a:88:23:ba:99:e3:f4:cd:9d:97:ae:5c:80:be:dc:
         b9:9c:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----