Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
File:                     iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft (raw, json)
Hash identifier:          krROS2spN4nngeWD1smdJuO/GclyTRZIQ9/5QSxpMN0=
Subject key identifier:   7F:3C:B7:5D:E9:6D:9F:A5:F8:3E:CD:3A:10:CC:4D:D8:8B:45:1E:01
Authority key identifier: 88:9F:94:1A:22:0A:4E:4F:B0:90:B4:4C:23:18:FB:53:8D:D7:B7:46
Certificate issuer:       /CN=F3622A10AF/serialNumber=889F941A220A4E4FB090B44C2318FB538DD7B746
Certificate serial:       010A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
Manifest number:          010A
Signing time:             Mon 28 Apr 2025 04:51:33 +0000
Manifest this update:     Mon 28 Apr 2025 04:51:32 +0000
Manifest next update:     Wed 30 Apr 2025 04:51:32 +0000
Files and hashes:         1: iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl (hash: pMmdxnlxxOuQH5xlh4wkSrszO9pYetk+aof83+lmq00=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3622A10AF, serialNumber=889F941A220A4E4FB090B44C2318FB538DD7B746
        Validity
            Not Before: Apr 28 04:51:32 2025 GMT
            Not After : Apr 30 04:51:32 2025 GMT
        Subject: CN=680f0955-4611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:b5:c9:25:8c:98:b9:18:b9:55:0b:6d:b4:
                    13:6c:96:3f:5e:92:73:b9:c0:98:e9:43:01:fb:6f:
                    49:70:68:e9:43:b4:3a:c5:7c:8e:81:5e:81:74:45:
                    48:2d:0e:fb:79:5d:18:b6:57:1a:2f:aa:94:eb:3a:
                    5a:26:b9:dd:0f:8d:a4:06:5d:12:e4:84:af:e8:34:
                    7d:18:c7:ad:aa:f9:81:98:af:4f:dc:bd:af:3e:a3:
                    63:a7:b9:95:03:ae:51:60:8c:35:f1:6d:2f:70:7f:
                    50:da:c7:b6:fd:59:c5:0b:48:f4:c2:71:2a:d0:26:
                    fa:8a:d8:a1:0a:c5:43:39:ea:47:cf:7a:f3:a6:a4:
                    cf:c2:c3:41:6e:48:2c:96:76:93:1a:f9:2e:98:90:
                    f7:df:d3:e5:d6:91:50:ad:4d:65:6a:ed:8e:22:47:
                    d5:fb:78:9f:e7:03:01:00:32:da:28:3a:1a:ab:57:
                    25:e4:8e:44:58:28:a8:21:f9:c4:70:2c:fd:ff:5a:
                    de:8a:e9:a3:1a:a2:4e:ad:38:5f:b4:88:92:00:97:
                    5b:a3:f4:fa:c7:77:1e:29:d6:8b:be:1a:f1:29:f7:
                    3e:ad:2f:1a:f5:c9:e6:f6:ee:13:ab:2b:36:aa:20:
                    3b:69:08:3d:47:71:cf:c9:50:58:22:ca:0c:ed:f6:
                    a3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3C:B7:5D:E9:6D:9F:A5:F8:3E:CD:3A:10:CC:4D:D8:8B:45:1E:01
            X509v3 Authority Key Identifier:
                keyid:88:9F:94:1A:22:0A:4E:4F:B0:90:B4:4C:23:18:FB:53:8D:D7:B7:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d0:2b:bd:e3:22:70:49:7d:7f:d1:9d:ff:24:ae:31:ad:35:
         71:72:06:61:07:f0:09:ec:ac:f5:fd:4d:05:ca:69:e3:93:22:
         d5:8d:af:43:27:8a:ae:23:a5:82:f4:fa:e2:fa:89:20:bb:59:
         23:dc:1d:62:0b:4e:1e:73:42:7b:98:57:57:d0:73:40:c6:81:
         fb:23:d3:e9:e6:bc:70:f6:1c:2a:26:e7:21:63:88:a1:8d:14:
         95:84:cc:36:03:70:73:45:e7:4b:11:0d:93:85:6d:6a:19:fd:
         fb:77:af:ac:75:0d:4f:c2:ff:92:47:93:92:8e:a8:9a:60:0a:
         b6:aa:9a:e7:08:1a:50:b0:71:44:6f:9a:e5:f9:67:6d:dd:97:
         8e:ea:d3:80:d5:cf:dd:22:28:dc:05:35:f6:fb:30:11:b2:8f:
         e9:3b:f6:cb:f3:88:6d:02:80:e1:99:e5:23:8e:7e:de:07:23:
         ab:ce:47:15:cf:2b:f9:a7:96:23:dc:fa:99:24:76:62:2c:3e:
         71:4f:f1:a2:7a:fc:99:cb:40:80:ba:30:86:5f:f3:81:a0:21:
         8e:70:b3:18:7e:58:8b:4d:73:02:6b:ac:ab:e9:ae:00:78:fc:
         b9:c4:84:01:bd:cd:1f:76:51:37:e5:fe:b9:32:15:18:68:19:
         15:98:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----