Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
File:                     b60oLUjzGQY2QqK5qAO2puATULQ.mft (raw, json)
Hash identifier:          cf6b6v2SwbWjonMxdJm/PYJlze8RMcOxrnuJyvrrFOE=
Subject key identifier:   B2:16:50:19:A8:94:33:57:8B:E5:A8:08:B7:BA:54:7A:2A:7E:36:44
Authority key identifier: 6F:AD:28:2D:48:F3:19:06:36:42:A2:B9:A8:03:B6:A6:E0:13:50:B4
Certificate issuer:       /CN=F36FDBB4AF/serialNumber=6FAD282D48F319063642A2B9A803B6A6E01350B4
Certificate serial:       9A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b60oLUjzGQY2QqK5qAO2puATULQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
Manifest number:          99
Signing time:             Wed 23 Oct 2024 02:48:59 +0000
Manifest this update:     Wed 23 Oct 2024 02:48:58 +0000
Manifest next update:     Fri 25 Oct 2024 02:48:58 +0000
Files and hashes:         1: b60oLUjzGQY2QqK5qAO2puATULQ.crl (hash: NHBa+GMna4dxFv6OmMW7VonR5AD7sGeBHsYq9yP1XAE=)
                          2: 5AE15E321D8E11EFB150AF207DDC24C2.roa (hash: 02fS43r1eNuS1EPFvyivvFwrFFekmWd3UmleeUTRe0g=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b60oLUjzGQY2QqK5qAO2puATULQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDBB4AF/serialNumber=6FAD282D48F319063642A2B9A803B6A6E01350B4
        Validity
            Not Before: Oct 23 02:48:58 2024 GMT
            Not After : Oct 25 02:48:58 2024 GMT
        Subject: CN=6718641a-9df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:a9:73:f9:20:00:be:e8:e1:8e:c2:fa:a8:
                    ce:eb:e1:24:3c:18:d6:a6:36:10:02:a5:ab:73:d3:
                    2c:19:2c:de:13:34:1a:44:f3:60:27:e0:03:83:cb:
                    ba:25:3e:49:ce:4b:54:f0:95:7b:b3:93:cc:0b:5b:
                    f4:92:02:9c:e1:2c:e1:2a:20:59:c2:21:c3:f9:6b:
                    56:4a:ee:5b:81:1b:c1:86:54:9b:d2:b0:4e:d1:37:
                    4a:62:32:92:73:0e:a5:62:61:ed:09:5c:f9:7c:00:
                    5b:cb:3b:f0:14:23:aa:9f:90:d1:35:8a:1b:c0:61:
                    e8:6a:01:6f:42:f3:da:ec:e1:56:47:bf:99:03:53:
                    07:18:42:33:a4:74:97:ab:e3:98:48:91:8c:f1:7a:
                    94:b5:c6:25:64:28:34:de:62:85:83:c2:cb:ee:16:
                    30:a9:ce:cd:76:1c:fd:c3:07:cf:50:ac:99:90:8b:
                    46:1f:02:81:d1:fb:77:ac:4c:7a:d6:7f:6e:f1:08:
                    0f:64:da:cf:55:4e:62:83:74:e7:f8:5a:49:62:ac:
                    c5:21:47:cc:aa:1c:ef:00:54:2a:be:39:8d:8c:5f:
                    bd:3a:69:43:9c:d5:72:5f:bd:fa:a5:6b:af:7b:dd:
                    43:e1:9b:42:c3:4a:f3:5e:46:3b:f8:b1:d4:0d:76:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:16:50:19:A8:94:33:57:8B:E5:A8:08:B7:BA:54:7A:2A:7E:36:44
            X509v3 Authority Key Identifier:
                keyid:6F:AD:28:2D:48:F3:19:06:36:42:A2:B9:A8:03:B6:A6:E0:13:50:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b60oLUjzGQY2QqK5qAO2puATULQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:94:84:1c:3f:94:46:8c:f6:5e:e2:ce:c6:c1:52:e6:ad:
         cd:c1:88:b8:94:09:53:1e:35:22:28:46:5e:72:c6:32:73:a2:
         9e:a9:da:ae:1a:99:4d:7d:16:f1:c1:84:77:03:c3:82:53:96:
         8d:6e:63:65:b1:5f:d2:0d:80:3e:7a:f7:59:50:57:64:70:df:
         8f:44:21:91:bf:aa:c6:53:ae:8f:b4:57:9b:df:ee:6b:29:7e:
         2b:13:ae:f9:0c:09:a7:b7:b9:39:05:7c:f6:91:eb:9d:76:03:
         f2:5b:49:43:16:45:68:5d:40:95:7e:1a:da:82:6e:01:e4:b2:
         91:e2:25:d2:1b:d5:8c:8b:e4:57:ce:af:e8:1e:fc:6c:fd:08:
         d3:87:5c:46:91:ac:52:3e:0c:04:59:1c:2a:7b:9d:f5:76:ce:
         84:9d:42:09:9e:e2:4a:16:7e:94:a4:bf:a4:41:05:04:7c:f0:
         5d:3b:10:32:63:ec:dc:fb:40:be:62:63:be:3f:0c:e5:a2:9e:
         ed:f7:2e:ce:34:b8:e3:5e:ed:53:69:c7:18:59:f5:0b:90:70:
         11:f6:bc:c9:da:73:c9:0b:16:df:e0:36:3a:08:d5:1c:73:1e:
         f3:f9:71:b0:e3:d9:d4:e7:ef:1e:b4:85:ee:c6:ea:f1:c4:1d:
         c8:df:0a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----