Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
File:                     WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft (raw, json)
Hash identifier:          bhPmfhmF8+2rxZN9B4/5LurzUgQVkpHwiMMKHDuLE0A=
Subject key identifier:   E3:88:32:32:1F:47:01:F8:7A:BD:77:74:EE:A0:A0:3D:2B:21:DA:15
Authority key identifier: 5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA
Certificate issuer:       /CN=F36152D2AF/serialNumber=5A467BB4937EAC6BEFB96B4F4FE35BD7FD2A40FA
Certificate serial:       084D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
Manifest number:          0847
Signing time:             Mon 28 Apr 2025 01:42:24 +0000
Manifest this update:     Mon 28 Apr 2025 01:42:23 +0000
Manifest next update:     Wed 30 Apr 2025 01:42:23 +0000
Files and hashes:         1: WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.crl (hash: 5dNMQ4qc6TTKZfKfQJN4wIcMpRnE095BYEZksXSTr2o=)
                          2: 3D014ACE245611EBBD1D0152F8AEA228.roa (hash: MFrTUFfbbj7vAa2jXdNr9UDEEnV6UTAgpBBSQ+XncRo=)
                          3: 21BD81763EC811EE8B7946734AD9E6FC.roa (hash: VtpPsjIQ6asKfxUhbuH75a5ObTnCjtxuvTF4JyOA/iw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125 (0x84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36152D2AF, serialNumber=5A467BB4937EAC6BEFB96B4F4FE35BD7FD2A40FA
        Validity
            Not Before: Apr 28 01:42:23 2025 GMT
            Not After : Apr 30 01:42:23 2025 GMT
        Subject: CN=680edd00-c0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:ae:e4:f4:f1:23:10:ce:f9:07:ba:a6:38:
                    c5:b8:db:7c:c5:2e:94:bc:47:bf:32:a8:d9:34:b5:
                    d0:2c:1c:a1:c1:13:23:47:a3:88:72:0e:18:bf:ca:
                    74:a9:9d:67:7d:5b:22:a0:0b:ae:10:61:dd:96:e8:
                    c0:67:d9:fd:df:fa:ef:5c:0a:cc:e1:ad:86:d9:69:
                    c7:98:02:d2:f1:c0:9a:da:28:8c:f9:f0:c3:da:69:
                    67:be:a3:dd:19:aa:e2:45:65:fe:de:4f:43:22:df:
                    bf:8e:2a:1a:92:0f:62:29:2f:b1:4b:d4:6b:48:a2:
                    d2:0e:dd:71:0d:4f:af:20:9d:0a:f1:37:7f:ca:da:
                    6f:18:5b:03:e9:5f:a3:5b:ec:9f:07:ea:52:e0:33:
                    80:08:da:ef:2c:3c:a3:10:7a:1e:6e:06:0a:f2:99:
                    72:63:01:89:20:cd:1f:66:f0:86:52:bc:3e:da:fc:
                    3b:a9:7e:75:c2:c4:96:53:84:90:ca:c9:7f:9a:d3:
                    2b:fc:6e:2c:2b:2b:8e:cd:82:f2:ea:84:56:2f:22:
                    14:43:3b:aa:a2:e9:0a:5a:9b:3a:e0:04:c5:18:f4:
                    65:c1:57:97:50:b5:c1:42:2a:bd:3e:24:a3:4e:fc:
                    9e:79:be:81:e7:63:a3:7b:8e:88:d6:46:45:65:6f:
                    d7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:88:32:32:1F:47:01:F8:7A:BD:77:74:EE:A0:A0:3D:2B:21:DA:15
            X509v3 Authority Key Identifier:
                keyid:5A:46:7B:B4:93:7E:AC:6B:EF:B9:6B:4F:4F:E3:5B:D7:FD:2A:40:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36152D2/5CF1A0AED56A11E99775464BF8AEA228/WkZ7tJN-rGvvuWtPT-Nb1_0qQPo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d7:32:11:4a:a3:9b:9a:1c:5a:dd:f6:ba:95:eb:e5:9c:74:
         fb:52:4c:cb:78:26:44:c0:59:99:ec:20:f9:d1:62:8c:eb:94:
         b5:dc:01:88:68:9a:13:58:8c:be:b3:f3:8d:cd:2c:d7:02:33:
         9b:81:8c:88:da:7a:96:46:df:12:87:4f:99:77:1a:c2:03:7a:
         c3:36:f2:8e:19:1b:64:e2:b8:6f:71:20:92:8d:a2:fa:18:c4:
         cd:7a:2c:30:5b:f0:5a:46:c7:20:89:6c:2d:5d:c6:05:91:28:
         f7:d9:ff:1c:59:81:0c:a7:a8:13:20:53:b2:20:70:62:f7:61:
         51:e3:b4:b7:db:97:22:40:57:21:d1:62:0c:30:37:28:82:e8:
         e4:48:3f:a8:8a:c9:a9:ac:af:fc:ed:46:d4:dc:3c:15:52:9c:
         9b:5b:0f:56:2c:4b:62:38:0e:19:82:95:fb:17:c6:61:75:42:
         36:72:79:d7:60:70:81:44:a2:52:d5:f2:f4:39:fb:d0:7f:5e:
         48:db:5d:bc:87:4f:7b:d5:b3:96:87:4d:2d:08:8e:2a:ec:c5:
         a1:9b:14:8f:45:eb:59:6a:d7:f8:c2:31:a6:07:c6:51:f5:a4:
         16:71:eb:a8:03:94:94:e9:1c:fe:2b:d0:dc:bf:21:f4:ad:02:
         92:c5:fb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----