Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
File:                     2WACNlD1TrS44dw0q9RZ9QJw140.mft (raw, json)
Hash identifier:          UmwvtTjS98NUSLXjMPlWtXz6m/srJ/VBYKsC/JdD62A=
Subject key identifier:   44:48:C4:97:3C:E1:59:68:26:8A:12:6E:5C:9C:E1:D0:04:81:A6:A2
Authority key identifier: D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D
Certificate issuer:       /CN=F36B9A81AF/serialNumber=D960023650F54EB4B8E1DC34ABD459F50270D78D
Certificate serial:       F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
Manifest number:          EF
Signing time:             Thu 21 Nov 2024 02:39:25 +0000
Manifest this update:     Thu 21 Nov 2024 02:39:24 +0000
Manifest next update:     Sat 23 Nov 2024 02:39:24 +0000
Files and hashes:         1: 2WACNlD1TrS44dw0q9RZ9QJw140.crl (hash: QBXCPcESFULqWhIjVzEd717imuw94PCHvkYG2k3FYwY=)
                          2: 31539876F1A311EEAC1F355D775412E6.roa (hash: j6M+6W88movOdd6zMZWbEb9mu+RhA+HSxS5xxIDt/qU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9A81AF/serialNumber=D960023650F54EB4B8E1DC34ABD459F50270D78D
        Validity
            Not Before: Nov 21 02:39:24 2024 GMT
            Not After : Nov 23 02:39:24 2024 GMT
        Subject: CN=673e9d5c-f5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e5:2a:df:24:7d:27:a7:6b:3f:19:41:39:9d:
                    d1:17:c0:89:61:cc:23:59:3e:0e:83:e6:ad:e6:ac:
                    c6:fa:04:32:5c:fa:4d:fd:21:b5:76:12:d7:63:10:
                    0e:60:f5:8d:e0:29:05:fd:76:5a:f3:e2:db:1b:20:
                    cb:8e:4c:cf:c9:23:a6:62:0c:c6:d2:87:1c:3b:f5:
                    c9:b9:2f:7d:e1:0e:ae:1d:29:63:7f:88:a4:2a:35:
                    d4:2c:e5:15:c9:9e:e1:33:d9:63:07:98:85:a1:b0:
                    3f:b4:27:2a:73:dd:77:e7:8c:f5:59:5d:ee:10:ec:
                    5d:5d:d3:63:a1:45:9a:cd:5b:1c:28:0d:2d:c5:94:
                    3a:1a:b1:35:47:28:15:84:bc:de:56:00:3e:d1:c8:
                    37:3b:b7:c0:05:c6:e3:1e:d1:0e:12:05:c2:6a:64:
                    fc:a3:87:26:f9:ca:0b:08:af:00:2c:14:16:62:8f:
                    d2:aa:dd:3e:ce:d9:3b:6a:cd:d2:37:21:ed:bd:be:
                    4d:10:e9:4e:0c:b0:ab:d2:79:0e:57:e1:31:ae:d1:
                    57:5a:fd:79:b7:e0:b3:d0:76:f9:f8:58:72:a5:49:
                    6c:f2:dc:98:48:0a:8f:a9:b2:fa:08:99:ee:70:f1:
                    fb:3a:4b:97:7e:74:fb:c8:75:3c:fc:54:2a:75:60:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:48:C4:97:3C:E1:59:68:26:8A:12:6E:5C:9C:E1:D0:04:81:A6:A2
            X509v3 Authority Key Identifier:
                keyid:D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b3:15:b2:2a:9c:e4:b4:88:30:a0:ba:a6:11:c9:f9:a4:80:
         60:e9:07:d5:7e:69:31:27:ea:1d:15:d6:f6:92:6d:40:6a:16:
         33:bf:15:a3:20:32:b6:d1:60:fa:32:8f:b0:28:6a:58:61:c0:
         a8:e6:46:47:8b:e9:5e:a9:9b:b3:29:d4:1d:d1:24:87:a1:9c:
         9f:c0:53:56:13:85:16:b5:17:13:e6:f7:aa:b2:48:6b:e4:53:
         38:68:00:7b:03:e7:f0:a9:d5:03:98:b7:06:8f:f7:64:6f:8f:
         ca:50:01:ed:80:2d:5b:90:12:b2:cc:09:bb:af:96:85:a0:85:
         af:5b:e5:d6:67:5b:e0:d6:00:39:20:f7:84:75:88:c6:4d:59:
         17:bf:cb:d9:0c:65:cc:99:6b:1a:9f:fb:c3:b6:89:f3:5a:0d:
         0d:d5:2b:ec:8a:2c:ec:df:bd:e1:25:0a:d5:66:61:83:c1:82:
         4c:95:b5:01:30:9d:18:e7:cb:48:de:d8:01:ad:5e:f2:b7:cf:
         03:e3:b6:49:f6:0c:7b:0c:d1:bb:67:f1:ff:14:3c:dc:da:7c:
         f5:12:41:66:0e:d2:a5:b2:0f:4b:24:ee:e5:a3:a1:38:37:9e:
         bc:78:20:5f:de:d7:7a:bf:05:e7:68:ec:d3:94:c8:7c:35:15:
         f5:b2:79:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----