Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
File:                     _06CSYXcD-nm1S0VaP27Fw73EEs.mft (raw, json)
Hash identifier:          Hp9dhKjH7vaGLIBsZMi8ytyTojB/fb/YNB9dFABbMWM=
Subject key identifier:   01:5A:AC:DB:3F:2B:BC:92:FA:BD:E2:35:2B:D4:D1:3A:ED:48:0A:F8
Authority key identifier: FF:4E:82:49:85:DC:0F:E9:E6:D5:2D:15:68:FD:BB:17:0E:F7:10:4B
Certificate issuer:       /CN=F36EF78EAF/serialNumber=FF4E824985DC0FE9E6D52D1568FDBB170EF7104B
Certificate serial:       67
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_06CSYXcD-nm1S0VaP27Fw73EEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
Manifest number:          66
Signing time:             Thu 21 Nov 2024 02:49:45 +0000
Manifest this update:     Thu 21 Nov 2024 02:49:45 +0000
Manifest next update:     Sat 23 Nov 2024 02:49:45 +0000
Files and hashes:         1: _06CSYXcD-nm1S0VaP27Fw73EEs.crl (hash: p9ZfNDWDkMpCKKc7pFjlV3+S9kEXqU59QuqETAB+Iac=)
                          2: 67C1E6C25BC211EFB69DE054762E951A.roa (hash: YBb6s7P/xe4Rp31Y1/0OCerKUAL44djIVtQBiEpnlME=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_06CSYXcD-nm1S0VaP27Fw73EEs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF78EAF/serialNumber=FF4E824985DC0FE9E6D52D1568FDBB170EF7104B
        Validity
            Not Before: Nov 21 02:49:45 2024 GMT
            Not After : Nov 23 02:49:45 2024 GMT
        Subject: CN=673e9fc9-08d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:00:f1:13:40:76:e7:87:f3:3a:4f:e9:25:e5:
                    ba:4c:60:d9:8d:2e:c0:fa:2b:06:df:67:c5:e6:05:
                    a0:69:b6:86:b6:c5:72:35:76:f4:76:8f:b8:f8:84:
                    44:bb:51:80:89:d8:66:ac:e3:75:79:8c:f9:87:1a:
                    d2:99:a1:b6:43:f2:69:36:dd:70:f5:d3:7b:94:7e:
                    87:94:d5:5d:95:8b:e5:3d:f5:9e:86:3b:96:26:eb:
                    64:b3:8f:4b:57:79:28:7b:d1:31:52:df:6c:7a:a0:
                    c6:09:3f:a2:78:c7:c8:6c:c3:ca:f9:73:1c:2b:7b:
                    f0:31:07:b7:5d:55:ec:38:a8:34:16:5e:d1:d2:f6:
                    7a:55:e0:8a:76:e6:21:7e:73:b3:65:d1:74:70:f1:
                    d6:c7:61:c6:95:b9:29:b7:56:ac:8c:44:cf:44:4d:
                    b3:b2:64:e6:00:83:78:de:d5:d3:d5:f3:cd:6c:90:
                    c3:ad:bd:71:2d:4d:e8:73:b6:07:52:1b:b2:f5:c6:
                    0c:07:c9:75:d7:80:c2:72:28:92:eb:fc:ff:41:f4:
                    0b:b2:cd:96:fa:c9:3c:6e:84:8e:80:47:65:9b:50:
                    9a:8e:c0:70:11:32:2f:77:3e:06:51:ea:50:25:65:
                    e6:3e:b2:e6:10:56:18:e8:29:b8:1f:33:bc:4e:08:
                    74:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5A:AC:DB:3F:2B:BC:92:FA:BD:E2:35:2B:D4:D1:3A:ED:48:0A:F8
            X509v3 Authority Key Identifier:
                keyid:FF:4E:82:49:85:DC:0F:E9:E6:D5:2D:15:68:FD:BB:17:0E:F7:10:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_06CSYXcD-nm1S0VaP27Fw73EEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:69:89:f1:e2:2d:13:de:f0:57:b6:1b:97:e4:00:3a:fb:14:
         ac:a8:45:40:58:f4:3f:3f:e7:21:4a:71:fa:4a:32:71:c8:1c:
         87:a3:35:f7:93:c1:c7:1e:ce:79:c6:f1:96:51:ca:ea:e5:cd:
         15:dd:fe:62:50:9c:62:df:0d:4e:06:1b:08:6d:03:49:20:a1:
         3c:f9:10:bd:24:2f:f9:98:28:97:22:20:0e:1d:22:2b:33:4d:
         7d:66:df:43:91:75:94:67:39:e8:c6:93:bd:9a:ba:a6:2c:da:
         6c:39:e6:52:aa:80:9c:b7:60:f5:5f:b9:b9:59:72:02:49:77:
         4b:5f:6e:ed:88:86:6a:11:f5:22:6d:70:50:6e:c0:29:71:cf:
         bb:a6:9b:22:77:ae:a7:dc:ae:a4:c3:97:da:a5:16:c3:11:d1:
         61:8b:12:d3:13:45:08:88:28:af:96:93:b1:ec:b3:a5:d1:93:
         5b:af:3b:15:a3:a8:0c:9b:09:c8:1d:b3:f3:75:e4:8b:ed:fa:
         da:37:7d:20:12:5f:08:36:23:e7:5b:63:23:6d:2b:ec:ea:5f:
         a0:97:8c:a0:09:6c:46:7c:66:00:bb:8b:50:67:2e:4f:21:fd:
         13:eb:26:56:de:b6:18:f8:3d:5d:9f:ad:58:51:da:54:c0:b1:
         3a:25:ae:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----