Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          SIt22y5+VEPo8z78o9Yzaz7b6O38AOoaKw8sV1WUlqI=
Subject key identifier:   35:C9:0C:81:F9:C8:69:70:81:CD:D4:66:7D:91:81:C9:35:C3:D6:D4
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       BB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          BA
Signing time:             Thu 21 Nov 2024 02:42:45 +0000
Manifest this update:     Thu 21 Nov 2024 02:42:44 +0000
Manifest next update:     Sat 23 Nov 2024 02:42:44 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: ySbE1nAZ0fyHEz+xvaFg3awyk9eARCOks0r4RccuQfY=)
                          2: 5E52EDD81C4911EFA98F9E317DDC24C2.roa (hash: Zixh/aFPuo2zs0C1hGvWJdvczTuAhUvvaA1FyHi6zv8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Nov 21 02:42:44 2024 GMT
            Not After : Nov 23 02:42:44 2024 GMT
        Subject: CN=673e9e24-330d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:49:06:7a:42:0e:e3:dd:01:a9:a0:ed:b7:
                    6b:0d:1d:30:ae:07:d5:92:c9:7f:15:f1:a6:fe:02:
                    e9:b2:6f:06:05:2d:01:ba:9c:2d:94:d1:96:5d:c2:
                    8e:09:aa:d4:b1:39:4c:6a:0d:55:89:30:71:da:65:
                    5d:5f:93:c3:37:24:02:07:2e:03:7d:ce:72:ae:48:
                    bc:97:31:93:24:9f:b1:b2:b9:b3:72:49:43:5d:94:
                    dc:cf:59:54:0a:3d:dc:ee:fc:b3:1e:f3:b2:6e:72:
                    54:7f:2b:99:16:4b:db:85:b6:0e:4e:d4:cd:e3:4d:
                    22:f8:d2:fa:73:7e:c7:93:0a:8b:47:7e:49:0c:f4:
                    fc:73:79:8a:1c:b9:82:32:18:f7:b4:96:5a:fa:68:
                    25:7c:aa:e9:18:c3:00:aa:41:dd:b8:82:ce:a9:1f:
                    47:49:79:0c:31:3e:bc:16:d0:39:2c:37:ff:1b:cf:
                    dd:b1:93:e1:55:35:81:40:3a:72:ea:06:32:90:73:
                    86:51:0d:4f:17:11:44:a4:9d:d2:99:2a:bb:e7:6a:
                    12:18:44:35:bc:3c:14:92:90:25:c0:9a:a1:52:13:
                    7e:88:9e:41:30:39:ac:e9:5f:b8:1d:bf:9e:91:01:
                    30:ad:19:49:a6:60:1e:9f:4a:12:4a:ea:1e:0f:53:
                    e5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C9:0C:81:F9:C8:69:70:81:CD:D4:66:7D:91:81:C9:35:C3:D6:D4
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:87:43:da:85:8d:02:12:d5:f9:bd:8b:7c:13:0d:61:fc:59:
         32:69:54:88:23:c2:78:67:53:f2:a0:e1:d4:01:ca:7c:f0:2c:
         33:4b:8c:77:e2:6d:35:80:25:d5:40:41:c5:f7:90:ba:3c:4f:
         bd:23:1c:6a:09:44:89:55:a1:48:40:e2:e4:75:e4:77:03:aa:
         aa:81:54:a5:c2:db:83:94:31:f2:f5:b3:2b:25:d8:8e:57:14:
         89:4f:5e:3d:71:3b:58:4d:c7:f5:35:2b:df:84:12:70:d5:8d:
         eb:b3:80:04:7a:0b:a8:c5:1a:6c:be:b1:cc:bc:d4:02:61:a9:
         1c:a5:2a:2f:04:38:50:9f:2a:10:d2:d8:f5:0a:01:d4:52:c3:
         fe:e5:89:17:9e:a8:75:d7:93:ed:fe:35:df:bf:17:a1:2e:c0:
         d9:de:e6:d1:19:81:e2:37:3b:cb:3b:85:38:80:29:38:a2:1f:
         f6:1e:08:76:82:5e:dd:98:a5:72:8f:56:07:8a:52:1c:94:ad:
         5b:c8:45:ef:a6:cb:52:5d:d6:c5:2b:cb:ee:4f:75:bd:be:79:
         60:e9:b2:0b:c9:e3:15:3f:7b:39:90:9f:61:54:86:28:71:0d:
         c4:c0:fc:29:9f:73:18:fb:b1:38:82:0a:b5:04:94:aa:96:86:
         ac:49:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----