Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
File:                     JV9qID5NQpmXaROm9i3oxI7sk70.mft (raw, json)
Hash identifier:          D1uMyBH5jyl+6Hc37+ERko0GWZEt7+TDXdcI/PA91O0=
Subject key identifier:   AB:87:26:22:A7:B8:E2:05:B3:CE:1F:4A:93:7B:29:F0:A3:D1:C1:91
Authority key identifier: 25:5F:6A:20:3E:4D:42:99:97:69:13:A6:F6:2D:E8:C4:8E:EC:93:BD
Certificate issuer:       /CN=F363460FAF/serialNumber=255F6A203E4D4299976913A6F62DE8C48EEC93BD
Certificate serial:       BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
Manifest number:          BC
Signing time:             Mon 28 Apr 2025 05:05:49 +0000
Manifest this update:     Mon 28 Apr 2025 05:05:49 +0000
Manifest next update:     Wed 30 Apr 2025 05:05:49 +0000
Files and hashes:         1: JV9qID5NQpmXaROm9i3oxI7sk70.crl (hash: ydlPJH/ssoeLC0kXybUxZSZXhpiE2+ILz1QAf3UPFmY=)
                          2: 81D2A93E986211EF8DC64A77762E951A.roa (hash: XCH2tO5kEYMyiAwzUo8LnwXXodXNXur00bVM7AU5ZV0=)
                          3: 26DC05C4986311EFBE63827B762E951A.roa (hash: 9xkZbyUzhuxbnuEDnds0Ogy4qS4HDRlvSKhOgozHOF4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363460FAF, serialNumber=255F6A203E4D4299976913A6F62DE8C48EEC93BD
        Validity
            Not Before: Apr 28 05:05:49 2025 GMT
            Not After : Apr 30 05:05:49 2025 GMT
        Subject: CN=680f0cad-9d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:bf:b5:26:1c:09:2a:ed:4b:c3:47:99:7c:
                    52:7a:11:bd:2f:1b:84:e3:50:e9:05:e6:f5:a8:45:
                    4b:4d:4f:80:91:f8:ff:a6:21:bb:68:69:f0:23:a1:
                    91:0e:44:0b:0c:e9:95:fc:21:95:d6:de:b7:0a:fa:
                    0b:42:9f:50:7f:25:72:5f:89:fd:86:5d:64:27:8c:
                    7f:48:93:ef:de:d4:26:53:20:91:14:27:4b:5c:e7:
                    2f:4b:20:71:3c:63:36:82:77:7d:47:d2:d5:7e:62:
                    ff:40:e4:20:a5:72:5f:e7:28:10:f2:34:8f:c0:62:
                    ad:a2:ec:fa:64:37:7a:f0:6e:39:08:4a:34:69:93:
                    d8:50:44:1a:35:f1:03:66:2f:8b:9b:2d:fb:b5:63:
                    8f:39:63:a3:d2:c3:67:37:72:0c:b9:bf:0b:81:72:
                    08:7f:1f:17:65:db:ff:6c:85:4b:bd:dd:ba:cc:b5:
                    06:11:2d:d0:b6:37:e9:2f:4b:ce:cc:94:7a:0f:ce:
                    eb:40:30:37:bc:fd:b7:07:3a:44:34:47:13:a8:84:
                    07:18:12:8a:8d:a0:41:35:25:73:83:63:a7:d8:17:
                    68:91:40:5a:85:a2:b3:67:f3:96:37:56:80:49:33:
                    19:17:31:a0:0f:1c:62:6c:3e:27:96:60:16:86:9b:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:87:26:22:A7:B8:E2:05:B3:CE:1F:4A:93:7B:29:F0:A3:D1:C1:91
            X509v3 Authority Key Identifier:
                keyid:25:5F:6A:20:3E:4D:42:99:97:69:13:A6:F6:2D:E8:C4:8E:EC:93:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JV9qID5NQpmXaROm9i3oxI7sk70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363460F/09B5B7B2986111EFBC3A7F6E762E951A/JV9qID5NQpmXaROm9i3oxI7sk70.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e7:dd:5d:75:62:33:1e:00:57:2e:54:6a:3b:2d:c6:5d:f3:
         f0:92:c1:23:f3:6e:6b:a5:f7:09:c9:18:af:6e:05:fe:3f:2f:
         6d:43:37:04:8e:85:6f:10:c2:6b:56:00:5b:52:e0:19:8c:42:
         a2:24:69:eb:80:ba:58:de:ce:24:9a:89:ef:4c:65:6e:88:65:
         77:a8:a3:a1:2f:20:c1:07:72:bf:60:6f:b1:00:3b:7d:70:28:
         50:8e:9d:59:3c:17:a7:e5:10:43:21:7f:a9:1c:25:27:24:20:
         c6:04:6b:6d:05:3e:d7:d4:0b:81:af:5b:9b:98:e9:61:dd:d6:
         4d:85:5a:05:6b:eb:98:a8:d5:b5:5b:b3:c6:80:ea:50:57:e3:
         c5:f3:54:0b:7c:df:30:ac:2b:51:e5:8f:79:8f:32:d1:13:9f:
         1c:0b:2b:f9:e4:38:f5:c5:86:24:74:48:50:97:7c:dc:f1:55:
         4d:6a:de:3e:c5:65:7f:80:43:e5:93:34:62:5f:68:dd:a8:5e:
         ed:c4:ac:77:16:c8:98:a2:95:5b:47:80:cf:57:8e:3a:97:45:
         7c:ff:0e:45:c5:e7:18:d2:d3:87:26:76:36:7e:88:00:96:9f:
         72:6a:6c:29:f5:19:c7:cf:3d:6e:5a:e1:fe:6c:15:01:dd:11:
         86:2b:7a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----