Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
File:                     FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft (raw, json)
Hash identifier:          UHWjcrEnqECSiD7PezdgIFoHrFYPnyX6RrAa1H1Np7g=
Subject key identifier:   D7:CA:C2:7D:72:5B:2B:2D:8A:B8:FA:99:D1:82:6D:62:E9:95:07:05
Authority key identifier: 15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB
Certificate issuer:       /CN=F36A32F5AF/serialNumber=15BC062B0B70E8F7F20B4A15BE0509005B7310CB
Certificate serial:       4B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
Manifest number:          4A
Signing time:             Thu 21 Nov 2024 02:52:41 +0000
Manifest this update:     Thu 21 Nov 2024 02:52:40 +0000
Manifest next update:     Sat 23 Nov 2024 02:52:40 +0000
Files and hashes:         1: FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl (hash: +e0n3V80ucgu/R1DKdXMqcVgsureIsWaA4L1drhhKnE=)
                          2: B505C262710911EF82F828AE762E951A.roa (hash: xT25C22GG0twXqlKDHqtHM6ZD8MTGkUTk1OnWMySjRQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A32F5AF/serialNumber=15BC062B0B70E8F7F20B4A15BE0509005B7310CB
        Validity
            Not Before: Nov 21 02:52:40 2024 GMT
            Not After : Nov 23 02:52:40 2024 GMT
        Subject: CN=673ea079-e400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:18:cd:ee:93:12:d0:52:e1:30:fb:d2:70:
                    11:41:ba:b7:41:03:70:8e:c1:77:6e:d8:3a:c2:20:
                    66:77:f5:64:13:58:0c:9a:a2:41:ed:b4:69:e5:32:
                    b0:39:3c:71:ec:0b:b2:ba:12:07:d0:8f:20:99:ce:
                    74:78:31:4e:cc:58:26:dc:80:dd:d2:7c:d4:cc:97:
                    1c:1e:2b:c0:26:0f:76:9b:d0:48:8d:c5:a8:b8:83:
                    f1:ac:ce:cf:8f:ba:4d:5f:22:25:55:7e:6e:92:6e:
                    75:40:aa:45:fa:07:60:56:2a:a7:37:21:7a:9a:45:
                    f4:fc:29:11:e6:15:70:10:bd:35:73:78:a9:31:7f:
                    88:90:24:3b:28:ca:c0:69:e7:3f:8f:7b:a5:29:4f:
                    5d:65:f0:06:12:ac:62:47:f8:1b:12:8d:00:f3:79:
                    be:1b:98:62:8e:dd:0d:de:45:6d:48:f7:f8:b6:0f:
                    7b:c4:17:f8:1c:a8:05:7d:8b:f1:a7:db:1b:7c:39:
                    2e:c2:7c:c0:15:64:84:f9:a9:73:74:f0:b6:d9:74:
                    1a:46:58:c4:d5:f9:36:13:4c:15:64:4e:17:9d:4e:
                    f1:c1:0a:9d:03:68:fa:74:a2:fa:94:52:10:28:c3:
                    6f:1f:72:54:87:21:9e:25:e3:03:d4:19:5b:28:85:
                    fe:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CA:C2:7D:72:5B:2B:2D:8A:B8:FA:99:D1:82:6D:62:E9:95:07:05
            X509v3 Authority Key Identifier:
                keyid:15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e5:e2:0e:bb:0f:73:9e:c1:96:75:9b:b9:36:59:58:be:bc:
         0b:be:76:8f:e5:18:2e:ce:c2:3e:f3:ac:9d:a9:ce:63:b8:43:
         4a:af:ce:cf:f1:7a:62:93:bb:d5:06:f8:46:5e:fd:e7:1d:8c:
         0c:6a:bc:ab:2d:53:06:0e:72:bd:85:fc:86:35:70:33:6c:16:
         49:25:95:f3:55:cf:84:26:1f:dc:62:65:5e:34:4d:ec:44:8f:
         06:76:f6:6a:79:15:76:15:22:0f:84:5a:1e:86:c3:71:96:e6:
         b3:bd:33:0a:47:fa:cf:1d:6d:6f:e4:89:30:e4:35:1b:08:96:
         ce:22:44:d2:8a:5b:d5:d8:6c:d5:fb:ba:cb:e7:68:b2:30:a4:
         d9:22:bf:67:1e:4c:a1:c2:3e:89:c2:6e:71:e6:e2:c0:0f:13:
         27:ca:05:df:5d:e5:3e:0c:a5:db:45:8d:84:1e:f2:02:a0:52:
         ac:31:26:1a:84:81:07:73:f5:0b:a5:6c:f5:bc:03:6d:b9:22:
         06:a5:ad:ff:4a:7a:9d:36:7a:98:86:83:d9:36:8f:aa:33:3c:
         c0:81:66:6a:a6:dc:cb:21:ea:e1:61:c1:ef:97:46:22:a7:9f:
         91:0a:a8:96:78:3a:d8:e6:ff:fa:fb:59:a8:97:0f:66:2a:58:
         80:94:5b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----