Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          xWBw6AKMrs/1Y1hOV0z73gQgeDqJo6aAhFBkVlT22qg=
Subject key identifier:   2F:F5:97:B8:05:6A:CA:F2:7D:8A:07:93:DB:95:64:D2:49:B6:FA:53
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       0104
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          0103
Signing time:             Thu 21 Nov 2024 02:38:34 +0000
Manifest this update:     Thu 21 Nov 2024 02:38:34 +0000
Manifest next update:     Sat 23 Nov 2024 02:38:34 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: PyNYe5snR8Ho+D5bP/gARJ9vIokibwsXPL50lBZPxv4=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: Nov 21 02:38:34 2024 GMT
            Not After : Nov 23 02:38:34 2024 GMT
        Subject: CN=673e9d2a-19f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9e:95:22:c2:bd:8c:da:cb:bb:0f:15:90:f4:
                    d0:26:28:c4:0c:a6:23:bd:19:0e:40:29:c0:9f:26:
                    3a:c4:30:98:de:cc:a0:37:2a:93:d4:8a:25:26:ef:
                    da:c6:db:f1:9a:c7:9c:b0:5c:8b:6e:14:ce:da:10:
                    01:99:31:a2:c2:c8:99:83:e1:26:83:24:a1:38:b1:
                    71:2a:14:5b:1a:bd:7b:33:49:d3:05:55:83:7d:70:
                    46:76:75:25:ab:c4:1b:82:d9:f0:0f:21:a1:78:63:
                    03:dc:f2:91:dd:33:ff:15:08:6e:b6:8d:a6:4d:fe:
                    5b:d0:12:7a:4d:b6:1b:2b:59:44:e4:d9:bf:0d:e2:
                    6d:07:0d:c7:a9:f2:63:7d:20:a2:55:ac:84:f8:7f:
                    c6:98:b0:15:b8:c0:29:78:9e:a3:5f:dd:fd:ba:d4:
                    63:9e:b5:fa:1c:9b:e5:49:ea:1b:90:74:2d:6d:37:
                    a9:9b:c1:8d:95:ed:27:88:13:0a:0b:1a:a5:e4:ec:
                    4d:f6:ef:bc:eb:45:61:c7:74:14:7c:be:3e:86:1c:
                    1a:63:18:3f:97:56:66:38:2d:2e:ce:70:15:60:aa:
                    09:17:89:70:c5:9e:72:b3:cf:b1:b9:a0:d9:5f:2c:
                    ba:0b:ac:28:3f:1d:ce:50:f6:6a:8d:a5:20:58:f7:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F5:97:B8:05:6A:CA:F2:7D:8A:07:93:DB:95:64:D2:49:B6:FA:53
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:0d:46:c2:6b:6c:c7:9a:01:55:95:fe:cd:63:84:f6:e6:9a:
         4d:df:e6:2c:98:e5:c7:e7:e9:26:6f:94:4a:dd:23:df:fd:4a:
         b3:f0:8f:c5:f6:7d:a4:18:30:6e:46:86:f7:c9:1a:19:6f:55:
         89:86:6c:33:b2:1e:b1:8f:a2:ca:a3:97:86:51:e5:f9:f5:f3:
         58:d0:45:7d:3d:f6:10:ba:58:e8:66:04:cc:87:04:c0:4b:c7:
         d2:ef:b8:f8:eb:f1:22:d7:f2:17:ed:05:b1:e1:3b:cf:7c:d8:
         cc:eb:d3:5e:75:8a:4b:ee:a2:bb:73:a7:92:21:62:f3:e3:f9:
         9a:28:f1:26:6a:7b:95:21:58:e9:b6:f8:df:c6:56:f1:aa:78:
         aa:12:2f:c9:ba:15:df:1d:fe:20:19:69:d9:57:4b:e0:85:a5:
         f6:75:d0:d2:9b:b9:6b:43:8f:79:13:23:6f:c6:61:c8:4f:59:
         0b:f8:9a:06:ee:f3:05:6e:de:28:16:eb:c9:6a:c8:3d:70:19:
         b5:f9:40:b2:c3:eb:46:65:7f:fb:12:6b:a8:a7:7c:72:bd:a3:
         bd:17:1c:58:c4:37:b1:87:ea:14:71:56:08:6b:c8:1a:87:bb:
         57:5b:42:23:cc:d6:fc:f4:49:15:e6:0d:74:e1:45:54:e1:38:
         ac:c3:52:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----