Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
File:                     XyKMRr7ytMupTLKfEMNoDuKIPbM.mft (raw, json)
Hash identifier:          cwSJ+EXD0vPRuLsjLkpPKvMdybHUMFwRANeewslgHls=
Subject key identifier:   B8:B5:DA:6A:79:E7:B4:A1:69:CA:AA:04:CF:49:19:58:E3:05:8A:3C
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Certificate issuer:       /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial:       017E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
Manifest number:          0174
Signing time:             Mon 27 May 2024 02:12:22 +0000
Manifest this update:     Mon 27 May 2024 02:12:21 +0000
Manifest next update:     Wed 29 May 2024 02:12:21 +0000
Files and hashes:         1: XyKMRr7ytMupTLKfEMNoDuKIPbM.crl (hash: dCBBsW/HGZgxBXhI251FoRlFYcWIks1y8CDQqYtnji0=)
                          2: C1CD793ADCA911EEA16851C1775412E6.roa (hash: kXp9RVNOYWnHm1NxTwD8L+mI7pYc0hf1M6fRaN+SwGo=)
                          3: 6ACEB450DCA911EEAA5099C0775412E6.roa (hash: lQoHfDG4SwKGUz+fTylurLuEm8PMYSt5yFZEEzPq1uU=)
                          4: 0F65DA2A0A9B11EEA43F1A2C4AD9E6FC.roa (hash: WEsrXgrlYSInyHUdkI4NyLWseRlSMuHME2qE3oN331w=)
                          5: 0AB9DB940A9A11EE95683E294AD9E6FC.roa (hash: giu3rl1YOAslNeO0QZNR5PkBbP5a28OrTUSpolD0nXw=)
                          6: 3EDE4EDCDCA911EE8D2A60C0775412E6.roa (hash: Ya8PIBHzrdD8mhWsEVPNP139XPPa9x52b97glOFNBCU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 May 2024 00:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
        Validity
            Not Before: May 27 02:12:21 2024 GMT
            Not After : May 29 02:12:21 2024 GMT
        Subject: CN=6653ec06-3031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:c5:73:db:3e:27:10:1d:17:5e:2c:da:97:
                    b6:8f:fe:d6:4c:d4:48:21:a1:8e:21:cc:15:c1:3f:
                    0d:3e:94:91:88:80:03:3d:ad:cd:ab:e6:0f:78:65:
                    3a:58:a0:56:14:db:d6:f7:63:f1:0a:91:6b:15:31:
                    5c:97:a0:d3:d1:e2:b0:28:b8:6b:7d:29:3e:f3:5e:
                    d7:27:4c:2c:02:aa:ca:ed:d6:88:0e:33:43:07:91:
                    f0:53:ad:68:d0:c2:e9:8b:14:00:ef:30:07:02:9f:
                    4a:dc:d2:a7:63:de:8a:1b:a0:df:6c:2f:29:20:8e:
                    85:7e:ac:32:d7:d8:78:03:2e:ad:d3:c2:c8:d0:90:
                    29:6c:6c:1e:2e:1b:28:40:06:20:2a:cd:db:f4:6e:
                    6b:f4:78:89:fc:c0:20:26:af:19:d0:19:39:18:c2:
                    27:73:af:11:f6:10:04:80:83:ca:dc:78:32:85:89:
                    2f:4c:82:18:88:f7:19:57:0c:52:3c:91:12:5e:21:
                    fc:ce:cb:bd:1a:05:b6:13:40:cd:b1:79:f9:70:b5:
                    21:18:23:69:96:73:1c:9e:a0:ff:6a:eb:3a:18:35:
                    34:42:57:4d:94:a2:c7:f8:d3:bc:5d:c1:5f:5e:bf:
                    fc:e4:08:d1:4e:b2:a8:03:ef:d4:13:a5:39:a4:7d:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B5:DA:6A:79:E7:B4:A1:69:CA:AA:04:CF:49:19:58:E3:05:8A:3C
            X509v3 Authority Key Identifier:
                keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f2:cf:ec:47:14:6f:e8:45:0b:09:36:6a:5a:09:d7:f6:ac:
         af:ae:e7:a9:43:16:5c:1c:11:7b:5a:8f:2c:ea:c4:96:b5:f3:
         02:dd:b8:af:0d:83:19:e0:b1:52:ba:ad:bb:b7:0c:0c:a3:d0:
         76:e8:1c:70:13:26:5f:5e:a9:5f:a9:ae:8b:be:b5:13:60:56:
         4f:2b:10:7a:31:51:95:cb:97:60:69:77:b1:8f:39:8c:0a:ca:
         cb:3b:f9:59:fb:2b:8b:84:e4:32:f8:5a:64:96:21:24:09:9c:
         3e:2f:b2:b8:9d:28:27:05:f0:97:5d:6f:d9:12:d9:d6:34:a8:
         16:30:2a:26:5e:d7:d2:2f:db:2b:1c:69:b3:a8:26:3b:bd:9f:
         15:5a:a9:93:d3:59:99:2d:07:d3:79:42:31:c9:48:33:26:6f:
         5f:e4:9b:7d:41:5a:5e:19:1e:79:5d:d6:2e:82:b9:a1:bc:fb:
         fe:83:2f:b6:d1:f2:03:a1:22:9b:f4:5c:d7:8f:30:e9:0b:b7:
         85:e4:8b:a5:3a:cc:07:e6:f8:55:c9:62:95:1c:60:78:44:f9:
         b7:7f:d9:1c:c0:8b:ec:58:ad:39:cb:68:68:94:7c:37:6c:b8:
         57:09:91:51:0e:ee:50:c8:ff:c6:44:ed:e6:3e:f7:32:6d:51:
         dd:4e:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----