Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File:                     62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier:          g39c9Ktj4/3lbqt0CqDFBtwtx2oCRuXU3QiwotM2Dcs=
Subject key identifier:   32:53:82:47:73:0F:B3:48:2D:3A:4C:97:86:66:85:78:9F:16:ED:86
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer:       /CN=AfriNIC-Root-Certificate
Certificate serial:       4E
Authority info access:    rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access:      rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number:          BB
Signing time:             Mon 23 Sep 2024 13:50:19 +0000
Manifest this update:     Mon 23 Sep 2024 13:50:18 +0000
Manifest next update:     Wed 30 Oct 2024 13:50:18 +0000
Files and hashes:         1: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=)
                          2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=)
                          3: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=)
                          4: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: yaXIJgodJcgijbYDUIGofh1+nc/f8UNWB0Erj+/ftUg=)
                          5: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=)
                          6: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Oct 2024 13:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AfriNIC-Root-Certificate
        Validity
            Not Before: Sep 23 13:50:18 2024 GMT
            Not After : Oct 30 13:50:18 2024 GMT
        Subject: CN=66f1721b-f309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:1f:98:f2:c1:95:3c:ef:1b:31:d0:9f:2a:
                    7e:8b:0e:36:ec:3f:14:6c:55:89:45:ac:22:d5:07:
                    d4:8e:08:4c:94:a9:71:af:87:6d:9b:40:8f:fb:c8:
                    40:63:14:bb:5b:f2:4d:65:04:f4:7c:ca:f0:48:4e:
                    6c:9c:19:40:ab:51:ab:09:82:ad:c7:17:1e:33:fb:
                    87:39:60:89:1e:78:ce:82:19:4a:4b:23:02:b7:fd:
                    3d:eb:18:12:6d:5b:70:aa:87:f8:86:8e:74:26:fb:
                    cd:c8:1d:fa:86:36:e6:6e:a5:1a:c9:4b:29:c0:c3:
                    07:65:ed:13:90:e2:74:db:f6:82:13:75:80:b3:ef:
                    c0:c8:80:3d:9b:3e:cf:d4:03:a9:d5:16:da:80:54:
                    72:73:02:e5:9e:8a:aa:b4:d9:24:a0:53:ae:71:6f:
                    22:d7:63:04:05:cd:d2:75:95:1d:1e:85:c0:bd:ba:
                    be:2e:7e:37:58:44:68:0c:4e:53:3b:da:8d:55:21:
                    ed:9f:66:19:36:0c:81:2b:2a:c2:9e:ac:b6:9d:5a:
                    6c:78:60:f5:cc:3f:0a:d7:c7:94:d3:92:17:97:6a:
                    ac:da:49:cc:c2:7d:5e:86:54:10:3d:97:9f:1a:80:
                    f2:98:3c:cf:7c:23:6d:d1:97:44:06:5f:c3:ce:b9:
                    aa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:53:82:47:73:0F:B3:48:2D:3A:4C:97:86:66:85:78:9F:16:ED:86
            X509v3 Authority Key Identifier:
                keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:68:33:f9:f0:07:b7:4d:cc:a7:20:70:30:1b:6c:e2:94:e8:
         3a:ad:6a:d4:53:91:36:45:63:50:d0:39:7f:62:3d:f7:f3:a2:
         d8:47:f5:b9:5b:72:db:03:83:53:8d:7a:ca:12:19:21:2b:86:
         07:da:60:98:0d:16:58:a0:3e:ba:2b:da:7c:d7:62:a4:32:9c:
         8c:c4:f9:39:49:67:18:67:66:24:56:f2:77:c3:2f:93:50:1d:
         ec:8c:af:e1:96:5a:1d:4c:c9:ec:5f:e0:61:2c:59:0b:20:1b:
         90:3f:d1:29:04:b8:32:de:5e:b6:2f:8e:c6:4d:e9:65:6e:38:
         27:8d:c1:22:60:51:2c:be:94:30:a8:db:7f:a3:83:dd:7e:c2:
         4b:19:38:af:ef:4e:1d:12:03:45:c7:71:df:91:4d:26:bf:c7:
         11:63:9d:9f:83:e5:94:2b:b1:a6:8b:ba:cd:c2:58:91:2e:ec:
         d4:d7:65:cf:0a:0c:f2:cf:6b:f5:13:e5:47:4b:a7:c0:8c:57:
         ec:6f:73:bf:4c:0c:2c:8b:55:fc:3d:c1:37:15:1a:f0:7b:e5:
         db:b5:ba:06:f7:bf:cb:40:4b:da:09:30:47:25:57:3f:64:3a:
         75:84:61:9e:d6:f4:7a:2a:80:34:be:30:41:02:b6:28:48:ac:
         eb:8d:f4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----