Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
File:                     qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft (raw, json)
Hash identifier:          dZHhm5hf6TpNpwql6cQUipLan5rnjt3Pz39HInuDJh8=
Subject key identifier:   76:5D:19:08:DB:1C:B6:79:37:A2:06:70:5D:4B:E2:48:AE:B1:93:7B
Authority key identifier: AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65
Certificate issuer:       /CN=F36C684FRI/serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
Certificate serial:       0799
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
Manifest number:          0799
Signing time:             Fri 22 Nov 2024 01:07:37 +0000
Manifest this update:     Fri 22 Nov 2024 01:07:37 +0000
Manifest next update:     Sun 24 Nov 2024 01:07:37 +0000
Files and hashes:         1: qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl (hash: NuF04tZtvunI6sTBYblLpeet7/bXlGme4vjtXAKgq4s=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                          rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1945 (0x799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C684FRI/serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
        Validity
            Not Before: Nov 22 01:07:37 2024 GMT
            Not After : Nov 24 01:07:37 2024 GMT
        Subject: CN=673fd959-e208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:58:ea:29:de:bb:be:bf:7e:f9:ed:72:2e:4e:
                    e3:b3:a4:14:83:0d:d9:71:d6:79:2c:5c:c2:6a:ec:
                    19:49:fc:2a:2f:fc:82:1e:36:a3:b4:f1:43:7a:4f:
                    c9:ed:07:69:9d:7f:6a:d7:c4:8b:be:13:f8:7c:97:
                    c8:c0:5b:1a:65:59:c6:9a:c1:0f:95:ea:f9:d5:4a:
                    e2:9c:d7:1a:ae:5f:e1:26:40:3e:55:8e:b8:c1:31:
                    da:87:d2:df:1c:1d:c9:7e:de:69:d7:89:12:de:33:
                    66:8c:20:f7:79:5a:c1:ba:f6:e0:f2:03:43:f1:ff:
                    5f:b6:8f:95:58:ad:6c:18:ca:f1:84:ec:5a:b2:4e:
                    0e:dc:c4:7a:58:31:96:fe:4b:b9:42:34:22:a1:82:
                    24:3c:31:29:59:43:90:5b:81:9b:13:16:56:63:0e:
                    4c:17:a7:15:e2:d1:33:b8:78:75:cd:f4:31:a9:a9:
                    2a:28:d5:df:d8:5e:05:f3:6e:83:af:03:68:d7:f5:
                    43:e7:74:ef:9a:78:1d:27:19:ec:7d:c6:84:b9:ad:
                    a5:c2:5b:59:b6:0c:63:e1:cc:bd:0c:0a:3a:b6:c4:
                    ed:a4:3a:ed:69:d4:b4:8f:a7:c2:ed:c2:46:19:cf:
                    80:f7:56:c2:b2:2f:db:ac:93:b7:86:44:10:c5:67:
                    11:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5D:19:08:DB:1C:B6:79:37:A2:06:70:5D:4B:E2:48:AE:B1:93:7B
            X509v3 Authority Key Identifier:
                keyid:AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:d8:6b:08:53:c8:99:a1:4b:e4:1d:7c:86:31:17:58:d2:
         7e:3f:f8:85:b6:41:6a:89:67:f0:7a:75:c7:c1:a8:f8:8f:2f:
         8c:53:a4:45:f0:8e:b3:1c:c1:8d:3c:15:82:cc:56:7a:ac:63:
         a8:b2:49:3f:18:96:c4:fb:24:64:0b:39:58:19:bb:e6:6a:3e:
         4d:11:e6:9c:89:1e:25:24:c6:ea:2c:8a:5b:4a:3b:46:96:17:
         b0:df:81:ef:70:c0:93:b2:90:9f:ae:70:89:24:17:0d:e9:2e:
         31:d6:1e:35:9e:87:f0:f1:4e:2d:eb:f4:b5:d0:e4:6d:f4:d8:
         61:af:5b:60:19:43:f9:1a:6d:83:7b:53:6a:36:27:f2:b8:af:
         b4:37:b2:63:c1:9d:0c:4e:95:fa:df:7a:9c:ca:30:6b:df:7d:
         4a:82:ac:49:16:98:4c:e2:b9:e7:b1:f4:2a:e2:da:f5:65:ad:
         47:77:69:72:2c:18:07:dc:38:4d:de:0e:bc:35:df:4a:33:f5:
         13:34:15:7d:34:cb:95:a0:1d:11:7e:38:7e:78:20:b5:e3:98:
         91:b6:b4:28:ca:30:4c:d5:22:4b:4e:fd:81:75:91:78:24:e6:
         45:63:f7:21:67:fe:de:ef:95:de:2e:17:70:53:00:26:7b:a9:
         a6:3b:b3:0c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzY4NEZSSTExMC8GA1UEBRMoQUFBREIzNzk0MzUwODdBMDk0RjI3RDc2MDlERkI4
NjJGQzVDQzQ2NTAeFw0yNDExMjIwMTA3MzdaFw0yNDExMjQwMTA3MzdaMBgxFjAU
BgNVBAMTDTY3M2ZkOTU5LWUyMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPWOop3ru+v3757XIuTuOzpBSDDdlx1nksXMJq7BlJ/Cov/IIeNqO08UN6
T8ntB2mdf2rXxIu+E/h8l8jAWxplWcaawQ+V6vnVSuKc1xquX+EmQD5VjrjBMdqH
0t8cHcl+3mnXiRLeM2aMIPd5WsG69uDyA0Px/1+2j5VYrWwYyvGE7FqyTg7cxHpY
MZb+S7lCNCKhgiQ8MSlZQ5BbgZsTFlZjDkwXpxXi0TO4eHXN9DGpqSoo1d/YXgXz
boOvA2jX9UPndO+aeB0nGex9xoS5raXCW1m2DGPhzL0MCjq2xO2kOu1p1LSPp8Lt
wkYZz4D3VsKyL9usk7eGRBDFZxF7AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUdl0Z
CNsctnk3ogZwXUviSK6xk3swHwYDVR0jBBgwFoAUqq2zeUNQh6CU8n12Cd+4Yvxc
xGUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2ODRGL0M0MDExMzNFRDQ4MzExRTk4QTkyOTkxQ0Y4QUVBMjI4L3FxMnpl
VU5RaDZDVThuMTJDZC00WXZ4Y3hHVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L3FxMnplVU5RaDZDVThuMTJDZC00WXZ4Y3hHVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzY4NEYvQzQwMTEzM0VENDgzMTFFOThBOTI5OTFDRjhBRUEy
MjgvcXEyemVVTlFoNkNVOG4xMkNkLTRZdnhjeEdVLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIH9hrCFPImaFL5B18hjEXWNJ+P/iFtkFq
iWfwenXHwaj4jy+MU6RF8I6zHMGNPBWCzFZ6rGOoskk/GJbE+yRkCzlYGbvmaj5N
EeaciR4lJMbqLIpbSjtGlhew34HvcMCTspCfrnCJJBcN6S4x1h41nofw8U4t6/S1
0ORt9Nhhr1tgGUP5Gm2De1NqNifyuK+0N7JjwZ0MTpX633qcyjBr331KgqxJFphM
4rnnsfQq4tr1Za1Hd2lyLBgH3DhN3g68Nd9KM/UTNBV9NMuVoB0Rfjh+eCC145iR
trQoyjBM1SJLTv2BdZF4JOZFY/chZ/7e75XeLhdwUwAme6mmO7MM
-----END CERTIFICATE-----