Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
File:                     8GzMRNUs-b4RXOx6TaaxMJukOaU.mft (raw, json)
Hash identifier:          Z+lziYT7a1+iHEUrYLJTHxLeKCB63WgSEDj+R08Z0SU=
Subject key identifier:   64:A2:47:A8:E0:9A:56:CA:35:13:0C:CB:F5:FA:30:6E:40:67:76:9D
Authority key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Certificate issuer:       /CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Certificate serial:       D2
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
Manifest number:          D1
Signing time:             Mon 28 Apr 2025 05:03:10 +0000
Manifest this update:     Mon 28 Apr 2025 05:03:09 +0000
Manifest next update:     Wed 30 Apr 2025 05:03:09 +0000
Files and hashes:         1: 8GzMRNUs-b4RXOx6TaaxMJukOaU.crl (hash: xsKa8tAbTJRT/FAja3bdUmqD2o5R8RKq1ANnqBw6Fes=)
                          2: 7F1695F2871411EF981CC64F762E951A.roa (hash: y+9csfTO7VjobZ1q8Iv+RH3EIrHQat1B/mZ0hIosNpk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                          rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9RI, serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
        Validity
            Not Before: Apr 28 05:03:09 2025 GMT
            Not After : Apr 30 05:03:09 2025 GMT
        Subject: CN=680f0c0e-f84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:e0:01:11:fb:a4:a5:2d:df:fc:6e:0e:1d:
                    e6:70:ab:38:3e:04:fa:b1:f8:f6:44:b1:57:2d:55:
                    de:b4:65:4e:3f:76:c9:25:fa:88:f1:77:f9:fc:e5:
                    74:3b:6a:4c:ab:02:ce:bf:4d:de:17:96:4f:e1:99:
                    84:a4:1f:75:24:22:51:b5:b4:13:a2:e5:f4:62:73:
                    a7:9f:f3:9e:5a:fb:d8:49:80:c6:f7:f2:1d:d1:65:
                    74:d7:a2:4c:7a:8d:5f:fe:08:ad:73:c7:c0:45:00:
                    09:6f:ba:50:50:05:85:f4:88:e1:ca:f8:f5:68:ec:
                    36:fc:4b:9b:ee:fa:dd:c2:0f:c2:17:4d:ba:4c:27:
                    fb:e4:ff:f4:cd:80:7e:90:fd:82:1b:65:0c:de:bd:
                    4f:43:53:bd:74:7c:de:98:b5:34:2f:7b:19:85:4d:
                    27:2f:d0:be:c4:37:85:d4:87:1c:46:2c:87:d9:a3:
                    e6:da:a2:7b:50:31:10:af:27:d3:fe:ed:e0:a2:fc:
                    23:7a:e5:e8:bf:ec:f6:7a:db:91:c0:01:75:f6:d1:
                    ac:b0:12:d0:fd:cc:2c:48:51:89:4e:21:76:bc:a4:
                    92:78:6b:64:0c:f2:a7:21:4b:dc:0c:a0:bc:a5:a7:
                    e4:51:a1:22:b3:bd:51:80:8b:b2:dd:a5:5e:8e:0a:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A2:47:A8:E0:9A:56:CA:35:13:0C:CB:F5:FA:30:6E:40:67:76:9D
            X509v3 Authority Key Identifier:
                keyid:F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:94:f7:3e:11:37:15:0b:af:71:ee:f7:0a:8e:b7:0b:56:16:
         c4:9e:93:4f:38:2e:0c:54:1d:e5:07:64:e2:c2:2a:e6:52:2a:
         9b:55:8a:f3:58:5c:be:72:8b:c4:e1:ce:ae:03:8c:3b:6a:42:
         a1:d6:9a:4a:7d:4d:64:cd:7c:52:b2:8e:d3:c5:43:12:30:b4:
         c0:ff:42:db:98:85:0a:96:60:eb:8b:a4:be:e2:fa:94:1b:b2:
         64:37:ae:4b:8b:72:f1:1d:3a:51:6c:93:02:b1:83:7e:69:cb:
         e1:8a:89:d7:ee:d6:61:b7:46:6d:e5:56:8a:7f:06:fc:da:4b:
         6f:2d:0e:3a:67:b3:ec:3e:3a:3c:6a:6a:ad:d8:17:70:b7:36:
         73:aa:b8:eb:1b:70:0f:72:43:ca:b4:b4:5c:94:95:e5:ab:c5:
         e7:e0:16:ad:0a:d9:71:03:82:92:bf:b1:20:ee:e4:73:3d:19:
         02:ce:f3:ed:70:a9:a1:7d:46:a7:b0:5f:09:1d:26:d5:64:6e:
         13:0b:4a:aa:3e:c6:12:e6:da:6d:51:35:ba:35:d8:c1:13:f2:
         6c:72:9f:fa:50:f3:16:df:6c:d5:58:88:3c:37:41:6c:ae:16:
         ac:e5:11:91:8d:f8:1a:1d:26:10:08:97:4f:1c:cc:83:7a:9e:
         5d:a4:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----