Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File:                     nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier:          DDXoE71hB+p91tQ15r85pd6zrZdjof6gkEJeHtl36m4=
Subject key identifier:   56:5B:88:EC:63:E0:DE:E3:6B:C9:46:1B:39:9E:16:45:0B:03:DE:54
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer:       /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial:       01D9
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number:          01D8
Signing time:             Fri 22 Nov 2024 02:25:39 +0000
Manifest this update:     Fri 22 Nov 2024 02:25:38 +0000
Manifest next update:     Sun 24 Nov 2024 02:25:38 +0000
Files and hashes:         1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: VHhKX8j6GegbishpebBKAGW7V2UyRfrjPB1m2UkV2dM=)
                          2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
        Validity
            Not Before: Nov 22 02:25:38 2024 GMT
            Not After : Nov 24 02:25:38 2024 GMT
        Subject: CN=673feba3-14db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:d8:27:3a:ab:ca:31:04:18:da:d9:e3:c0:
                    ba:2d:0c:e4:b6:1f:58:f0:a8:c4:01:b3:ca:cf:92:
                    61:b7:30:55:da:2d:23:16:f5:63:db:7e:4b:65:c2:
                    68:9b:a7:1b:ed:78:49:ab:b1:80:a1:87:b6:9b:6f:
                    23:37:82:28:71:59:57:ff:e4:38:3f:eb:d0:f7:5c:
                    b4:70:9f:79:29:97:b7:4d:fc:00:75:c6:06:da:97:
                    b3:74:dc:61:50:52:96:46:c8:bf:d8:e7:65:6a:2f:
                    79:1e:3f:b2:92:37:a6:49:db:37:e1:c4:5f:bf:36:
                    c7:9b:1f:d5:21:1d:33:94:a8:a9:c4:ef:43:c6:d5:
                    c7:50:74:2a:95:54:ae:6d:7b:a1:a9:d9:1f:4e:9b:
                    c8:33:b8:af:78:1d:08:f9:10:1c:15:fe:97:80:4a:
                    0b:51:e1:79:13:1c:79:65:cf:ff:2f:7d:52:b2:9e:
                    ca:e6:5e:40:62:d3:f5:b4:48:f5:c5:a4:bc:30:f6:
                    62:59:9d:d1:71:df:85:3a:bf:71:10:10:ed:04:16:
                    16:73:5d:69:47:0c:17:39:b7:ec:58:77:9d:0b:08:
                    87:50:63:d8:b0:6f:a3:18:a1:87:d0:6b:79:e3:06:
                    76:d5:0a:38:8a:c7:cd:69:71:1f:16:ed:53:87:14:
                    49:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5B:88:EC:63:E0:DE:E3:6B:C9:46:1B:39:9E:16:45:0B:03:DE:54
            X509v3 Authority Key Identifier:
                keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:08:ea:ac:c0:46:ba:d5:ae:e6:5a:3f:ff:49:79:02:96:5e:
         56:36:9b:9a:b9:43:12:09:03:50:0f:ea:b7:03:c2:2b:b1:bb:
         5d:48:28:14:83:ea:e9:98:e3:2d:14:bf:00:49:be:d8:78:9e:
         f8:5c:aa:06:a3:80:4c:2b:bf:42:49:55:a0:07:cd:ac:46:27:
         86:02:13:73:6c:bd:d3:72:3c:9b:25:7f:da:8e:23:69:89:e8:
         4a:5e:8e:22:82:cb:d8:dc:bb:01:f7:73:a1:79:06:3e:82:2d:
         3b:75:31:eb:2b:41:b8:ea:f8:bc:8a:c8:34:78:3a:ae:85:e8:
         0c:d7:7f:97:0b:c5:a3:ab:94:ed:dc:52:c9:3c:9d:d5:8e:e1:
         ac:42:8c:e5:6d:a7:65:00:e0:94:d9:ea:a4:7b:91:67:78:0b:
         6a:f5:e6:2e:14:ef:51:20:fe:af:5f:ba:1e:41:d8:fe:e8:08:
         54:10:ae:e0:b1:ca:32:73:20:35:52:bb:66:b7:9d:eb:d0:d0:
         c9:17:dc:d4:49:9c:2d:29:1b:8d:2a:47:71:d9:32:15:77:64:
         f6:d5:5b:a2:13:64:cf:f4:20:e6:16:0d:41:eb:71:34:ac:16:
         fc:29:f5:73:4d:df:ff:fa:5d:40:31:97:29:57:25:fe:18:6c:
         3d:1e:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----