Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
File:                     kGRTy4rcpLXHpuU7LsUREsTH_iw.mft (raw, json)
Hash identifier:          1bUS9xy7l8IZnG9CUbx80+1PoJVfY1zuEtDT/zrmE0A=
Subject key identifier:   A2:17:B5:93:B7:CE:19:53:EE:06:C8:66:91:90:59:71:7D:25:7D:E8
Authority key identifier: 90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C
Certificate issuer:       /CN=F36F9BF2AF/serialNumber=906453CB8ADCA4B5C7A6E53B2EC51112C4C7FE2C
Certificate serial:       043E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
Manifest number:          043B
Signing time:             Fri 22 Nov 2024 01:44:31 +0000
Manifest this update:     Fri 22 Nov 2024 01:44:30 +0000
Manifest next update:     Sun 24 Nov 2024 01:44:30 +0000
Files and hashes:         1: kGRTy4rcpLXHpuU7LsUREsTH_iw.crl (hash: xyGgiydMN+2o2JyjJV45C2csdT7Qiq1PgmdGQhIifok=)
                          2: 9728765CB35211ED96B1EF87F1222468.roa (hash: TzuMAa1S+XUMBkWN3ANfTjwvxoQZORKA4C1/zSsf48o=)
                          3: 6C2E6480C04811EEA25C9BAE775412E6.roa (hash: mvv+xhyBTyB7fHpGqCe3gsM/SW9QZ+tcmhxVFOTd3TE=)
                          4: 2DA30EFAC04811EE96FD10AE775412E6.roa (hash: 2szsfHUyM0w3jCwUBCdzas3oEmOfR5NidLGf6ZfUpEg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F9BF2AF/serialNumber=906453CB8ADCA4B5C7A6E53B2EC51112C4C7FE2C
        Validity
            Not Before: Nov 22 01:44:30 2024 GMT
            Not After : Nov 24 01:44:30 2024 GMT
        Subject: CN=673fe1ff-d33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:11:76:28:45:bc:6d:b2:c1:11:c5:80:ae:
                    e8:c6:0f:36:10:c9:26:8a:c0:c4:8b:bb:fd:cb:5e:
                    e4:9e:5f:47:84:fc:2b:49:41:8e:e6:98:d5:16:a7:
                    5c:53:19:ae:e9:d7:92:66:fc:b2:38:a3:17:f4:16:
                    50:ed:3c:d4:08:dd:07:95:cc:cb:a8:3c:93:f5:c0:
                    9b:20:05:75:e9:a0:b0:7a:06:35:58:d4:07:c7:85:
                    d8:7d:f6:77:62:66:90:3e:9a:13:14:fb:1a:e3:42:
                    11:19:bc:4f:63:ea:95:0e:7b:a9:2c:31:f1:b0:15:
                    ba:a9:67:d3:b9:d4:b0:2a:5e:f6:4e:47:ab:9b:f7:
                    9b:ff:cc:ac:76:30:a5:b6:ec:4c:a9:bf:48:92:41:
                    75:83:d7:7e:17:d3:eb:56:7f:2e:c0:7e:13:3e:8f:
                    13:57:7f:cd:e6:f3:c5:c5:5b:d0:60:8b:73:ef:6b:
                    38:ee:30:50:25:27:6b:08:14:ff:95:83:43:02:6b:
                    58:7d:74:f8:0f:2b:e5:65:1e:07:43:15:57:70:f9:
                    8e:b7:ce:6b:da:2d:0e:3e:e7:33:da:2b:2a:ed:4f:
                    5c:d5:35:01:18:7d:a9:b9:9e:39:30:e4:6b:f2:26:
                    58:c8:a0:b6:00:e1:d7:03:b0:c5:51:71:50:d0:d9:
                    14:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:17:B5:93:B7:CE:19:53:EE:06:C8:66:91:90:59:71:7D:25:7D:E8
            X509v3 Authority Key Identifier:
                keyid:90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:71:d7:d9:0e:d8:6f:69:e2:7d:21:a3:4b:55:87:50:d9:11:
         0a:09:9d:a0:f6:dc:4e:d4:53:a4:90:e3:40:39:79:f6:cc:f3:
         e5:56:a6:cf:c0:94:9c:2a:3e:80:7a:2f:40:1f:a2:6a:e5:83:
         91:fd:45:25:1b:85:a2:3d:9a:fd:1b:66:06:77:ea:14:9e:28:
         93:b1:b2:b0:6d:18:6d:30:1d:45:9c:f7:49:64:00:98:e1:02:
         cf:bc:c7:84:10:ab:f5:52:9e:46:ff:b6:e3:a1:17:b6:2c:6d:
         3c:f6:8d:12:fa:c1:6a:a6:18:f1:b7:96:a3:29:64:c3:4d:c2:
         b9:2e:8f:42:77:2f:a5:f2:74:b0:36:ce:a3:9e:45:56:95:b3:
         f5:a9:e0:7e:e6:1b:54:1d:65:99:5c:67:70:bb:ad:83:21:1f:
         e3:6c:f9:7e:ad:14:43:64:44:60:a9:b5:a6:80:16:3e:8f:a4:
         c0:4d:67:a0:60:da:c3:f0:23:9e:5e:f7:60:e5:6c:89:e7:86:
         2d:bd:a0:49:a0:a9:c3:55:86:9d:e7:1e:32:4f:51:d3:3d:cf:
         53:53:76:56:c0:84:ed:e0:51:1e:fa:a4:3a:16:9f:ba:23:59:
         2c:aa:e3:75:08:91:bf:59:31:9e:16:fa:9f:fb:5a:e4:ba:98:
         91:93:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----