Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
File:                     bssXAorVt9tcd32x3OCXh-SVstE.mft (raw, json)
Hash identifier:          AhX1QNVvN3sBMS3JRRnjb2VGdvROBr3wh4AaArhAyj0=
Subject key identifier:   69:5D:B5:1E:65:23:FF:6A:A4:7B:CC:A0:E5:E6:77:FD:29:59:80:66
Authority key identifier: 6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1
Certificate issuer:       /CN=F3630D7EAF/serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
Certificate serial:       076D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
Manifest number:          076A
Signing time:             Mon 28 Apr 2025 01:52:40 +0000
Manifest this update:     Mon 28 Apr 2025 01:52:39 +0000
Manifest next update:     Wed 30 Apr 2025 01:52:39 +0000
Files and hashes:         1: bssXAorVt9tcd32x3OCXh-SVstE.crl (hash: qB/veyR/7xOpVh3hq4uSkRG0JpyLNOpXkrhUGCa8NVM=)
                          2: B816586EA91811ED9C6B08FAF1222468.roa (hash: yQjFDr1J8xnuzgmrjoQrHGlo418HKfpv3BOS6bU+5xA=)
                          3: 35C54EE4C22F11EDBD36E6D7F1222468.roa (hash: Tc882RyXEDdTZYVQUYK1dL5ysAV2yC/kxPggUTUtaTg=)
                          4: D8F96E58797411EA80D16982F8AEA228.roa (hash: 33E3GMGHj16Wtj4wAHbp/YGThkmOG3yqYGmR9ZqsyE0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1901 (0x76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630D7EAF, serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
        Validity
            Not Before: Apr 28 01:52:39 2025 GMT
            Not After : Apr 30 01:52:39 2025 GMT
        Subject: CN=680edf68-1936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:60:59:9e:ca:0c:4d:a2:5c:52:9c:5b:87:4a:
                    76:e7:c6:7a:10:49:83:6d:e8:c0:fa:81:86:43:97:
                    36:01:ed:5b:03:67:54:dc:d2:29:3a:0b:bb:6a:e0:
                    f4:05:45:4b:4e:77:0e:68:30:73:fc:0e:72:6a:60:
                    19:a8:a6:bf:f2:a9:aa:ed:ff:ba:d2:a1:90:8b:d2:
                    8a:d6:31:3f:b8:f0:3a:23:f5:35:b0:4f:e0:41:00:
                    be:40:6a:4e:52:2a:ed:04:df:c4:22:6b:8c:1b:16:
                    c2:1a:45:4d:67:e0:0a:f8:a2:3e:b0:9c:a0:be:fb:
                    23:c4:fc:6b:95:4f:97:c9:a6:1f:b9:0f:35:e4:52:
                    cc:72:73:45:9b:e2:9a:79:35:45:08:1c:65:a6:ac:
                    6d:93:db:fb:0b:d2:89:75:8a:f2:b3:44:38:ef:07:
                    73:f2:ef:b0:be:17:a1:65:c8:3c:db:33:c4:47:54:
                    18:0e:2a:10:2f:4b:4f:af:6e:41:4d:36:ca:b3:86:
                    98:52:50:de:84:94:33:bf:fe:52:71:bb:fb:ce:f6:
                    0d:d2:1e:88:57:5e:b3:5f:d6:9a:be:dc:84:16:8c:
                    56:8c:44:0f:26:ec:d2:12:26:ce:70:48:86:94:82:
                    4c:e8:6a:e3:69:9f:9e:b4:13:b8:a2:54:bf:65:74:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5D:B5:1E:65:23:FF:6A:A4:7B:CC:A0:E5:E6:77:FD:29:59:80:66
            X509v3 Authority Key Identifier:
                keyid:6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:75:a2:74:de:47:59:e7:a6:94:8b:30:7d:43:3a:30:45:10:
         8e:c9:25:0a:d1:60:0c:19:34:cf:be:84:aa:7c:9f:22:2e:0f:
         92:33:60:ae:cd:2c:0d:5d:3d:9a:3c:f0:81:a1:e0:e0:b5:72:
         28:7f:ac:7a:95:ec:1a:d2:c9:e0:0a:e8:32:20:4b:88:a4:49:
         f9:18:35:b8:d3:e5:04:11:eb:24:6d:92:a5:6c:04:be:20:77:
         10:75:51:f4:51:fc:e4:99:db:0c:b0:68:66:07:a4:d8:ca:01:
         a0:21:27:a2:8c:38:60:d9:37:ec:5e:5f:8b:88:95:a4:ff:7e:
         f8:7c:b3:df:ff:42:5f:f5:96:4a:2d:8f:6d:b1:92:09:47:c6:
         22:52:51:b8:aa:af:d3:40:44:29:35:b8:75:19:a4:c0:2b:c4:
         00:1f:1b:e7:0f:8d:52:f1:1d:8f:8c:d7:d9:ea:17:a0:38:b4:
         24:7b:f8:ec:5b:93:3e:5c:ee:f7:f8:6b:2d:4f:43:3d:fd:b2:
         21:db:d8:79:65:7c:21:99:f0:33:65:b4:3b:da:e7:60:0d:30:
         6c:a3:40:fd:49:64:f2:1a:4b:f0:58:59:5a:7b:5f:d5:1e:f5:
         b1:ee:9e:62:db:59:85:8c:74:bf:fa:20:22:b6:c4:66:12:0e:
         08:bd:de:70
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB20wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzBEN0VBRjExMC8GA1UEBRMoNkVDQjE3MDI4QUQ1QjdEQjVDNzc3REIxRENFMDk3
ODdFNDk1QjJEMTAeFw0yNTA0MjgwMTUyMzlaFw0yNTA0MzAwMTUyMzlaMBgxFjAU
BgNVBAMTDTY4MGVkZjY4LTE5MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/YFmeygxNolxSnFuHSnbnxnoQSYNt6MD6gYZDlzYB7VsDZ1Tc0ik6C7tq
4PQFRUtOdw5oMHP8DnJqYBmopr/yqart/7rSoZCL0orWMT+48Doj9TWwT+BBAL5A
ak5SKu0E38Qia4wbFsIaRU1n4Ar4oj6wnKC++yPE/GuVT5fJph+5DzXkUsxyc0Wb
4pp5NUUIHGWmrG2T2/sL0ol1ivKzRDjvB3Py77C+F6FlyDzbM8RHVBgOKhAvS0+v
bkFNNsqzhphSUN6ElDO//lJxu/vO9g3SHohXXrNf1pq+3IQWjFaMRA8m7NISJs5w
SIaUgkzoauNpn560E7iiVL9ldCVVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaV21
HmUj/2qke8yg5eZ3/SlZgGYwHwYDVR0jBBgwFoAUbssXAorVt9tcd32x3OCXh+SV
stEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMwRDdFL0UwNkRBNTEwNzk3MzExRUE4MkU5NzY4MUY4QUVBMjI4L2Jzc1hB
b3JWdDl0Y2QzMngzT0NYaC1TVnN0RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2Jzc1hBb3JWdDl0Y2QzMngzT0NYaC1TVnN0RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzBEN0UvRTA2REE1MTA3OTczMTFFQTgyRTk3NjgxRjhB
RUEyMjgvYnNzWEFvclZ0OXRjZDMyeDNPQ1hoLVNWc3RFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzdaJ03kdZ56aUizB9QzowRRCOySUK
0WAMGTTPvoSqfJ8iLg+SM2CuzSwNXT2aPPCBoeDgtXIof6x6lewa0sngCugyIEuI
pEn5GDW40+UEEeskbZKlbAS+IHcQdVH0UfzkmdsMsGhmB6TYygGgISeijDhg2Tfs
Xl+LiJWk/374fLPf/0Jf9ZZKLY9tsZIJR8YiUlG4qq/TQEQpNbh1GaTAK8QAHxvn
D41S8R2PjNfZ6hegOLQke/jsW5M+XO73+GstT0M9/bIh29h5ZXwhmfAzZbQ72udg
DTBso0D9SWTyGkvwWFlae1/VHvWx7p5i21mFjHS/+iAitsRmEg4Ivd5w
-----END CERTIFICATE-----