Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
File:                     lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft (raw, json)
Hash identifier:          O3u8qx60srMufNiavLTO/tnixh/hpN/GdS5AXlyk5h4=
Subject key identifier:   47:6B:FE:41:83:4A:B3:95:B9:4C:9C:4B:D6:1B:CD:32:CE:1B:E0:2B
Authority key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Certificate issuer:       /CN=F3628288AF/serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Certificate serial:       89
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
Manifest number:          88
Signing time:             Mon 28 Apr 2025 05:11:42 +0000
Manifest this update:     Mon 28 Apr 2025 05:11:41 +0000
Manifest next update:     Wed 30 Apr 2025 05:11:41 +0000
Files and hashes:         1: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl (hash: qbYVP+IUDyBYsQRPSRs4tjXz+6yYX52Y5KSuKq/q8aA=)
                          2: 5607C3B0BEE211EFA4CEA589762E951A.roa (hash: OpcRwl+jfvnh8TAOsFlPTty/eZv7mZcg2dDEa8udpEA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628288AF, serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
        Validity
            Not Before: Apr 28 05:11:41 2025 GMT
            Not After : Apr 30 05:11:41 2025 GMT
        Subject: CN=680f0e0e-1fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:c1:78:f1:96:2a:3c:5b:e8:b9:b4:58:c4:
                    db:74:08:e0:c3:a4:17:f2:f0:c1:73:2e:b8:4a:7d:
                    5b:31:16:b5:2a:62:7f:34:14:86:47:74:72:14:8d:
                    bd:4a:b7:b6:08:61:ac:1f:87:ba:c9:45:44:83:15:
                    91:47:d2:b4:03:f7:1c:4c:2c:6d:4b:88:5d:80:f8:
                    a9:c3:2e:a2:c0:f8:22:63:04:f6:71:87:3a:20:7f:
                    95:f5:46:e3:84:2f:62:32:b2:c4:ba:93:46:56:02:
                    5b:df:e9:34:7d:84:53:ae:e5:d2:40:a9:d3:7d:a2:
                    35:d6:1f:9e:6a:c5:25:ee:f4:56:9e:2c:d9:99:26:
                    33:d6:03:2a:52:bb:6f:4d:9d:b8:e1:ab:e1:8c:be:
                    d4:0b:45:0e:52:d9:4b:8b:76:c9:ce:98:7d:eb:21:
                    18:aa:41:af:aa:ed:74:d2:ad:66:25:88:57:c8:87:
                    41:cf:d5:4a:86:fa:46:f9:2e:19:88:0c:f3:0a:c5:
                    35:80:18:7d:fe:b6:60:6a:7b:b0:da:ad:f1:56:cd:
                    72:58:6f:49:51:ea:0d:42:f8:01:72:20:57:92:aa:
                    57:91:b0:e8:b8:96:83:33:3a:9c:bb:4f:1e:a2:af:
                    60:62:1f:9f:f8:c2:1b:6e:a7:51:f1:24:73:bf:d5:
                    01:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6B:FE:41:83:4A:B3:95:B9:4C:9C:4B:D6:1B:CD:32:CE:1B:E0:2B
            X509v3 Authority Key Identifier:
                keyid:94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:24:5a:77:5a:ed:9a:9e:ad:85:83:7c:2c:c3:dc:5d:d4:23:
         b6:74:68:16:ea:29:f0:72:03:51:63:81:b3:4d:10:2b:0a:90:
         eb:c1:12:11:ad:d8:07:96:51:e3:1a:21:a6:54:c3:32:3f:c8:
         75:d9:15:e6:ae:b0:79:92:6d:ea:94:54:ee:0b:7a:c2:bb:1a:
         87:5a:80:c5:1f:29:73:8f:67:d6:cc:a4:91:38:6e:69:b5:a8:
         54:93:39:de:48:2a:88:fe:e4:ec:6d:67:4b:de:82:85:6e:cc:
         09:32:61:14:f1:0d:6d:d1:7b:e7:e2:05:09:60:5f:72:15:a5:
         0d:68:0d:aa:63:5d:b1:56:44:ff:b9:20:f8:86:3f:cb:54:f7:
         05:70:80:b2:d0:bb:02:0f:d2:a0:8e:73:11:b4:44:a7:b9:b2:
         17:75:ba:49:75:da:84:91:80:58:f3:7d:06:2c:57:fc:84:ed:
         af:c4:57:ca:0b:e1:c0:b3:a8:b0:d3:d2:5a:eb:6d:d8:e5:46:
         09:08:3a:6c:c9:d0:29:98:e6:1a:e5:6f:bb:f8:d7:2a:b3:95:
         6c:d2:68:e0:78:a1:62:b5:1e:36:e3:2d:70:64:5a:c2:a0:21:
         b7:01:e4:f7:4c:a2:ea:6c:c9:cf:f6:a9:6b:da:a8:d9:b4:18:
         09:6f:00:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----