Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
File:                     _wMoIAB4rDbwLXEB0DS3vll-oVg.mft (raw, json)
Hash identifier:          0hlOnBjazKMcnpYaQWBYwDXX8GLhA6y+Obmu7rEedUc=
Subject key identifier:   70:2C:21:B5:2D:9F:69:2F:F2:75:BB:0B:79:04:55:04:2F:40:DD:2C
Authority key identifier: FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58
Certificate issuer:       /CN=F36EC712AF/serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
Certificate serial:       01EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
Manifest number:          01E8
Signing time:             Thu 20 Jun 2024 02:07:17 +0000
Manifest this update:     Thu 20 Jun 2024 02:07:17 +0000
Manifest next update:     Sat 22 Jun 2024 02:07:17 +0000
Files and hashes:         1: _wMoIAB4rDbwLXEB0DS3vll-oVg.crl (hash: jDzs4BDCc/VZLh/FxhtgUnJGnaogriFgC4BKrtyq8XM=)
                          2: A1A5CE94563C11EE88D6F1324AD9E6FC.roa (hash: saKiwJ8KKnppgVVbmjEBrSXoNu9lhnFM5zhR+5yMxKU=)
                          3: 70135CE8563C11EE84A463324AD9E6FC.roa (hash: FAzApSbefpRaVqlqwSbC+qhl5egdnzLXqnPgFd8tD84=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 22 Jun 2024 00:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC712AF/serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
        Validity
            Not Before: Jun 20 02:07:17 2024 GMT
            Not After : Jun 22 02:07:17 2024 GMT
        Subject: CN=66738ed5-6fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:48:96:ad:67:11:d2:9d:e9:49:91:51:07:
                    95:06:9c:f0:d6:bb:2f:d3:e4:fd:8d:34:13:e8:a7:
                    c8:95:ec:ef:47:7e:f9:f1:92:b9:16:c2:16:9a:eb:
                    6a:07:21:61:70:5c:96:5d:a2:e1:7a:8c:49:ba:34:
                    d4:35:f6:53:2a:88:6a:df:34:6c:db:f1:f2:9b:cb:
                    d3:ab:8d:e5:a9:31:9b:f4:08:b3:80:00:31:e4:83:
                    d4:1e:9b:ad:aa:02:5a:27:bd:3b:4c:94:b9:39:15:
                    68:05:e7:db:c7:24:00:b9:ee:d5:c8:78:d1:9a:4c:
                    11:73:a5:6f:fe:7f:e5:05:ba:6c:b2:da:82:30:b7:
                    2d:17:7e:3e:e1:af:d0:49:d3:04:44:a2:5f:5c:67:
                    11:4b:cb:40:80:fa:bd:30:34:0a:3f:57:b6:b5:c1:
                    30:3d:e1:e3:c9:c6:21:36:46:04:1f:70:03:dc:1f:
                    c7:ea:f9:c7:c5:40:1e:52:41:15:8e:73:ab:b2:4a:
                    d3:34:2b:da:1a:18:fd:25:c4:24:3e:9d:73:08:b9:
                    d0:2f:71:22:2f:fc:93:86:98:a6:3a:4d:98:c3:70:
                    99:5b:a0:f7:e6:f3:34:59:b6:cc:6e:12:60:53:64:
                    9f:5e:4b:85:56:0c:59:68:9c:bf:88:b3:95:17:8c:
                    c5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2C:21:B5:2D:9F:69:2F:F2:75:BB:0B:79:04:55:04:2F:40:DD:2C
            X509v3 Authority Key Identifier:
                keyid:FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:20:9b:0b:f7:0f:c9:80:38:cf:33:93:b8:77:fd:c9:45:b0:
         10:e5:99:fe:cd:f2:8e:e5:db:b0:e4:b6:c9:e2:51:ca:09:36:
         20:bb:7e:56:2e:97:fc:72:2b:1a:79:52:5e:3d:04:b4:ad:1d:
         85:cf:fc:c8:34:90:4c:d7:ae:53:40:4f:12:4c:e6:76:d3:95:
         d8:b6:ec:25:a6:4a:35:7a:f3:a3:1b:a5:a6:df:13:cf:00:f8:
         0f:c8:17:f5:4b:eb:36:ed:fc:d7:97:b7:92:64:a0:97:6e:30:
         d3:34:d7:dc:9c:5c:f8:70:a4:9e:09:29:f9:49:b4:2b:58:38:
         00:83:e1:3e:b8:bd:b0:17:1b:bc:f4:b8:a5:74:b4:f9:d2:ec:
         ed:b2:88:3f:27:47:b8:a0:62:e6:69:e8:8e:7e:92:87:48:f2:
         d1:20:1f:84:7f:26:4d:5d:81:9c:02:ee:8d:10:e5:46:a9:7f:
         66:aa:8a:67:a3:13:3e:b1:a3:cb:4f:fd:8e:bf:ab:c4:0b:5b:
         19:12:ca:28:77:81:d5:db:d7:ee:8c:9f:61:fa:81:82:ff:a8:
         56:f6:8d:43:81:2a:70:94:0d:f9:76:06:46:c1:52:8a:3a:e0:
         02:e0:25:4a:f3:cb:92:88:e9:c3:bb:b9:9a:dc:ff:e5:31:20:
         88:b9:79:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----