Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
File:                     AjFjgfORycHBtlB5K7N-_nj13ZM.mft (raw, json)
Hash identifier:          lAwNOP1jf0IOFgSX0+jrZRV/8ACF/ID/PHxWLuMZMdI=
Subject key identifier:   A4:76:3A:DD:5D:20:4C:B0:28:63:14:12:8A:6F:48:89:69:D4:42:C2
Authority key identifier: 02:31:63:81:F3:91:C9:C1:C1:B6:50:79:2B:B3:7E:FE:78:F5:DD:93
Certificate issuer:       /CN=F36C684FAF/serialNumber=02316381F391C9C1C1B650792BB37EFE78F5DD93
Certificate serial:       0799
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
Manifest number:          0799
Signing time:             Fri 22 Nov 2024 01:07:30 +0000
Manifest this update:     Fri 22 Nov 2024 01:07:29 +0000
Manifest next update:     Sun 24 Nov 2024 01:07:29 +0000
Files and hashes:         1: AjFjgfORycHBtlB5K7N-_nj13ZM.crl (hash: vacSRpMq0tDki2lvH51oWJlcmYCtYileMXYdBGAyXeE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1945 (0x799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C684FAF/serialNumber=02316381F391C9C1C1B650792BB37EFE78F5DD93
        Validity
            Not Before: Nov 22 01:07:29 2024 GMT
            Not After : Nov 24 01:07:29 2024 GMT
        Subject: CN=673fd952-6c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:9c:09:81:91:6d:e5:2b:f8:a2:9c:08:ac:
                    9c:cb:2c:a7:9f:e6:e2:de:12:a2:8d:9f:08:d6:77:
                    21:61:2c:2e:35:4a:e3:bd:67:0e:5d:0c:b9:d6:d6:
                    d4:0f:4f:6a:25:f5:12:73:77:59:98:83:76:56:10:
                    56:74:7f:2e:b7:8d:9e:3b:e1:9e:61:af:8c:01:c2:
                    8f:6d:00:cd:18:5e:48:f0:b4:bf:bf:c1:3c:17:3f:
                    71:47:a6:0e:b7:6c:46:2b:8b:11:e0:e6:95:ee:d5:
                    ae:62:eb:97:fa:c3:9d:21:b8:00:95:8d:f5:6b:ae:
                    83:2b:73:60:32:04:f9:df:a3:68:01:54:83:ea:34:
                    3b:04:db:a4:ba:eb:4d:07:69:59:d3:49:df:a2:c0:
                    53:e0:73:77:1c:9a:31:e8:e4:5a:0e:33:6a:fc:d8:
                    ab:e9:83:47:2a:d3:ff:91:7a:9d:5a:01:64:b9:89:
                    71:1a:7e:f0:ae:72:bd:41:4f:9e:4d:2d:49:0a:78:
                    ee:d0:f4:b5:13:3b:22:2a:97:0b:4b:e4:1e:32:f2:
                    ec:37:23:b5:11:55:87:3c:11:a8:13:25:16:7b:c7:
                    47:90:a5:bf:68:0e:3d:a6:92:a6:0c:3a:75:60:38:
                    80:da:d8:a0:65:97:de:2e:15:2d:99:6e:f0:1e:af:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:76:3A:DD:5D:20:4C:B0:28:63:14:12:8A:6F:48:89:69:D4:42:C2
            X509v3 Authority Key Identifier:
                keyid:02:31:63:81:F3:91:C9:C1:C1:B6:50:79:2B:B3:7E:FE:78:F5:DD:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:22:de:75:c7:89:8d:1b:c9:bc:0f:39:25:f6:79:52:b0:ce:
         23:d6:cb:f1:2e:67:ac:e2:25:76:5e:4e:40:40:db:75:53:d4:
         81:e6:b8:6d:cf:a2:e3:d2:bd:f4:ba:1a:de:59:1e:ec:58:31:
         f5:90:28:ca:95:f6:7e:40:f5:45:be:c4:72:9e:b9:7a:96:2d:
         24:44:8d:7e:33:4d:09:cf:53:19:17:7b:70:ab:9f:92:ea:8f:
         bf:88:d2:e0:21:e6:de:1c:13:65:03:d2:bf:42:b3:cd:1a:ce:
         29:be:5f:93:6e:82:54:87:5c:86:37:7b:3f:7a:3b:dc:89:78:
         d3:5a:83:d9:9e:dd:79:61:07:f2:8d:3e:65:ac:2e:55:a8:9c:
         ec:0a:e3:2e:30:5b:1d:b2:db:ea:0d:0b:85:98:7e:9b:dc:66:
         03:81:4b:d5:cf:2e:0e:57:4a:6e:6c:9e:57:03:58:88:c2:e7:
         cc:5c:5d:db:b7:48:ce:6b:bd:3e:e1:15:e0:b8:4c:c1:2a:c7:
         60:c1:ff:ae:9c:f8:1a:58:41:c9:81:27:f4:86:f9:dd:77:e0:
         bf:74:97:03:c7:e3:5c:31:f9:5f:40:8b:74:6a:27:70:c1:9b:
         31:31:13:15:cf:57:95:40:9f:fa:4c:74:49:d7:ca:6d:17:8c:
         ee:6f:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----