Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
File:                     Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft (raw, json)
Hash identifier:          2idiyTGYv4cHQCAKo8Oo464XcmCEszZrhm43zxTElbE=
Subject key identifier:   F9:D3:09:81:D2:01:01:E2:EC:28:3D:2C:EF:BE:18:88:3D:B7:4E:83
Authority key identifier: 1B:2E:71:DA:04:AE:09:10:39:45:11:7F:90:76:C7:F8:E1:99:24:3C
Certificate issuer:       /CN=F36AC9F1AF/serialNumber=1B2E71DA04AE09103945117F9076C7F8E199243C
Certificate serial:       55
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
Manifest number:          54
Signing time:             Thu 21 Nov 2024 02:51:23 +0000
Manifest this update:     Thu 21 Nov 2024 02:51:22 +0000
Manifest next update:     Sat 23 Nov 2024 02:51:22 +0000
Files and hashes:         1: Gy5x2gSuCRA5RRF_kHbH-OGZJDw.crl (hash: hn+3ZF6wTWfusWo1ybxgXujXdGlK7qvrIiCsijtmxS8=)
                          2: A30F3A50697C11EFB366DFAE762E951A.roa (hash: /ilQRqAkN9GV5Cf0rRJQg2G1MMpc0XTxcTekWiarM/c=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC9F1AF/serialNumber=1B2E71DA04AE09103945117F9076C7F8E199243C
        Validity
            Not Before: Nov 21 02:51:22 2024 GMT
            Not After : Nov 23 02:51:22 2024 GMT
        Subject: CN=673ea02b-8fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:2d:e8:be:50:c7:e7:d0:6e:d6:17:e4:3a:
                    21:fc:d3:08:82:09:15:d1:15:35:b7:86:b7:cf:77:
                    a6:9c:fa:86:a3:11:65:2d:63:50:6d:bb:a5:35:75:
                    9d:a5:44:ad:a8:c8:e8:eb:4e:a1:dd:1a:71:57:19:
                    0c:84:9e:a0:12:6f:85:aa:3f:93:90:35:e0:ed:e9:
                    20:43:1e:01:3e:6d:bc:0a:f9:8b:d1:1b:5b:93:4e:
                    fe:68:26:7d:25:87:11:f8:e8:d7:18:05:1e:bf:09:
                    24:26:f0:ef:a0:07:ab:26:ee:ad:d8:5a:88:e3:43:
                    87:ff:8e:51:b1:30:81:13:04:8f:be:01:ea:d4:c9:
                    94:7d:50:50:94:47:aa:00:49:6d:44:6a:d9:bf:f7:
                    50:1b:6e:41:4b:66:a0:f9:e6:77:c2:fb:c3:3e:0a:
                    99:8c:b0:dc:0f:bb:5a:2d:d7:1b:2e:a6:39:4d:b8:
                    00:37:3b:a1:ea:a0:75:16:ee:f8:5f:79:65:d2:5e:
                    08:12:57:43:fa:c5:84:99:47:50:61:88:b8:bc:97:
                    51:00:dd:0c:6a:2b:00:81:a4:75:93:50:5b:1b:52:
                    a7:9d:1b:c1:ff:b1:58:2d:af:0c:94:12:99:0c:15:
                    a0:5e:da:54:f3:26:35:e4:bd:e3:f7:46:27:c9:ec:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D3:09:81:D2:01:01:E2:EC:28:3D:2C:EF:BE:18:88:3D:B7:4E:83
            X509v3 Authority Key Identifier:
                keyid:1B:2E:71:DA:04:AE:09:10:39:45:11:7F:90:76:C7:F8:E1:99:24:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:fb:d6:14:2e:a9:18:1f:63:03:05:d2:d8:ff:91:ca:d6:65:
         dd:08:c7:bb:26:d7:c2:c1:ff:5d:2d:5d:3f:b9:d1:70:ac:05:
         d2:c3:b6:a0:73:37:ef:90:a8:48:0f:e2:5b:d0:36:a0:88:96:
         f3:a8:a4:fc:0b:c8:26:60:e0:e3:56:31:d5:56:c3:50:72:01:
         fb:02:67:c7:5f:b0:c9:c1:51:7b:af:a9:6a:2e:3a:3e:c5:5c:
         8b:65:17:ae:be:74:69:ef:a0:86:89:93:0c:90:70:2a:f3:9e:
         f2:dc:19:84:fd:76:b1:c7:96:ac:c6:7b:10:3f:4d:49:ae:5d:
         df:f6:a5:f6:da:71:8e:57:a9:a1:84:58:7e:a2:bd:f4:a9:40:
         62:3d:a0:a3:e3:0b:73:c2:72:59:66:e3:8a:33:cd:4b:ae:50:
         ee:11:23:e2:02:60:f0:8b:9e:72:f8:5a:78:cd:c2:6e:ff:1d:
         fd:e1:de:7c:b1:ef:3b:f6:f1:5f:8d:02:21:99:29:e2:de:34:
         48:27:1b:70:5e:b3:3b:38:4e:b2:5d:e3:10:cb:c3:3b:07:f4:
         72:5a:68:e4:f6:20:22:87:f5:ee:99:68:13:62:3d:0d:84:fd:
         43:55:a9:69:fd:f0:2e:33:92:12:e0:3c:c7:99:5f:6e:43:82:
         31:a5:d5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----