Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
File:                     zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft (raw, json)
Hash identifier:          Hlq4vubmqE1OtN/g8nVWxBegQg7cNA8UdZB4NoKLsds=
Subject key identifier:   F9:D1:D2:79:BF:4A:82:2F:37:42:AC:14:3E:AE:A7:82:EC:AA:80:70
Authority key identifier: CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
Certificate issuer:       /CN=F36D70D9AF/serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Certificate serial:       03C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
Manifest number:          03C8
Signing time:             Thu 21 Nov 2024 01:49:18 +0000
Manifest this update:     Thu 21 Nov 2024 01:49:18 +0000
Manifest next update:     Sat 23 Nov 2024 01:49:18 +0000
Files and hashes:         1: zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl (hash: lq+ahswU0VHqoiFLdO6Dlr2vB1QEnW00gq7eLqsV2v8=)
                          2: 556100D6A66711EFA35CD16B762E951A.roa (hash: qJSjsy2o5hJTJDSiAXFVbbjMVoTEJfrC1/c4KDsNvP0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969 (0x3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D70D9AF/serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
        Validity
            Not Before: Nov 21 01:49:18 2024 GMT
            Not After : Nov 23 01:49:18 2024 GMT
        Subject: CN=673e919e-bc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a5:e8:52:35:cc:4a:c3:71:97:d2:40:5d:58:
                    20:f4:1a:5b:e4:27:88:8b:21:f5:87:bb:e3:ad:9f:
                    ea:ac:09:0e:bd:8f:ef:33:67:5f:c3:d1:e6:55:d6:
                    93:ae:3d:c2:58:17:b3:67:4d:98:95:fe:e6:39:34:
                    23:3e:4d:93:12:d9:3f:c8:9b:8f:46:3a:25:c1:c9:
                    88:3e:9f:75:97:03:df:9c:7c:4b:67:00:ea:2c:9e:
                    ed:4b:1b:48:bc:33:74:c8:50:4f:88:28:6a:b3:da:
                    4a:8f:69:52:af:61:44:77:43:32:b3:0e:c6:42:29:
                    3d:ba:4f:df:ad:83:26:c6:14:58:b7:4c:51:6b:33:
                    be:9f:5a:b0:b5:63:76:30:c8:0d:b0:c4:87:c6:49:
                    d0:cc:ff:5a:9a:3d:ad:b8:d0:46:39:c5:0b:5c:95:
                    cf:d5:66:b7:b7:48:69:bb:fd:18:61:42:61:47:d4:
                    db:be:28:d6:e7:ef:50:26:07:0c:b7:b0:a5:58:f5:
                    f1:fc:6e:90:ac:15:eb:1f:39:86:44:aa:a9:f5:d2:
                    8e:48:54:94:90:a1:52:0a:d4:44:62:8a:f0:fb:d2:
                    6a:c7:5c:3a:be:bf:d1:31:80:9f:c7:77:d3:73:bd:
                    68:ea:69:c8:e3:8d:24:8f:88:ae:8b:17:73:13:cc:
                    fc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D1:D2:79:BF:4A:82:2F:37:42:AC:14:3E:AE:A7:82:EC:AA:80:70
            X509v3 Authority Key Identifier:
                keyid:CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:56:e6:db:db:6d:be:a4:82:d1:1d:77:77:3f:30:75:da:41:
         2a:6e:b4:01:06:e7:10:c5:49:b9:c0:11:d4:ce:61:a6:4b:5a:
         38:d5:a2:e1:96:f4:04:e7:2f:6e:be:5d:b6:3d:93:af:dd:6e:
         83:19:46:19:61:40:36:0d:cd:e0:0e:46:ed:0d:bf:c0:b2:a5:
         85:f4:ac:1d:5e:b1:91:4c:bc:2b:ae:ee:67:33:63:be:06:99:
         d1:97:18:14:57:7b:04:69:62:22:34:67:05:56:09:db:f0:e6:
         80:88:a8:1a:cc:e5:43:8d:8d:3e:70:be:8d:e5:0c:19:b6:6e:
         a3:18:eb:9c:19:bb:41:78:64:bb:1a:b8:06:d8:59:18:a8:b2:
         d4:9d:af:c7:83:4e:c2:a8:62:d2:b9:26:61:d0:7e:ef:2b:7b:
         c3:c7:ee:b1:b5:65:b2:f2:89:ff:e3:a3:de:e2:e2:46:fe:c0:
         f5:43:92:3f:4c:07:fe:fe:a8:09:0a:d5:45:f8:ab:09:98:bc:
         aa:31:4f:7f:33:ae:ad:b8:df:10:34:19:7e:69:97:50:47:45:
         eb:f0:67:3e:e5:21:de:7f:82:37:da:03:81:be:01:b1:c7:cf:
         51:b2:f9:8b:16:b0:51:f7:a1:10:26:4b:71:cf:52:66:a0:bf:
         8d:a0:b3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----