Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
File:                     JEaS2sYhhOTIg1elJqucZvlKTH4.mft (raw, json)
Hash identifier:          Is2USBgR6daCN0l8224OnG4wC4z4X+sLTpU0pZZkB2I=
Subject key identifier:   AF:84:B4:BB:5C:72:D1:54:23:37:D8:44:C7:A2:7C:73:68:DB:DD:12
Authority key identifier: 24:46:92:DA:C6:21:84:E4:C8:83:57:A5:26:AB:9C:66:F9:4A:4C:7E
Certificate issuer:       /CN=F363DCF2AF/serialNumber=244692DAC62184E4C88357A526AB9C66F94A4C7E
Certificate serial:       66
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
Manifest number:          62
Signing time:             Mon 28 Apr 2025 05:15:01 +0000
Manifest this update:     Mon 28 Apr 2025 05:15:00 +0000
Manifest next update:     Wed 30 Apr 2025 05:15:00 +0000
Files and hashes:         1: JEaS2sYhhOTIg1elJqucZvlKTH4.crl (hash: 7ZZmUzHTYidg02xyyZJTisEaFHynQwnAT3bvfqyr7NU=)
                          2: 7E8AB1F2210D11F0BF867894DAE4EC9C.roa (hash: DjV7nCg+4hB07UZMYzd0xmACSMYBPBQfqRJs7j2MoEM=)
                          3: 201348D2210D11F0ABE7E991DAE4EC9C.roa (hash: LUo+fZ8ICythu7NN9JfJV1LkDsZAEGtwMfGmobKx8es=)
                          4: D6E208F6210C11F0A4C7E78FDAE4EC9C.roa (hash: UTbJHvdCycZUQvLa3nWOWV1moJ9jZms3ZBFk0hjIuSc=)
                          5: E21E90EE210D11F0934A7996DAE4EC9C.roa (hash: iUS+8IiwQWTC3KosgvVLrgeHR5LzZ/YYi+HkfN+5rAw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363DCF2AF, serialNumber=244692DAC62184E4C88357A526AB9C66F94A4C7E
        Validity
            Not Before: Apr 28 05:15:00 2025 GMT
            Not After : Apr 30 05:15:00 2025 GMT
        Subject: CN=680f0ed5-c7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:ea:db:2b:89:69:ee:a8:92:76:d8:52:b4:
                    33:58:ac:e3:3b:cf:a6:e3:17:dc:2c:76:fc:ed:f1:
                    5e:50:51:ec:85:35:6b:5b:82:fb:8b:ba:73:52:0d:
                    e2:32:19:77:0b:40:74:1e:d7:a2:27:31:9b:71:0e:
                    09:07:0f:9f:59:46:94:eb:ae:82:d8:a1:f2:a6:77:
                    32:47:65:25:54:0f:ad:f5:7b:3d:e9:15:0b:bb:72:
                    21:a5:bf:81:d6:e7:a9:97:09:6c:0c:f6:f4:3c:0a:
                    03:a9:ac:1d:e2:59:8a:68:e2:6a:93:3f:e7:33:40:
                    29:31:03:57:36:27:96:eb:10:03:58:cb:c4:78:f9:
                    b0:82:e1:44:fe:2d:70:3f:78:d0:ed:9f:f0:c1:f1:
                    38:5d:9d:13:6a:86:88:3d:1b:57:02:9f:d6:30:0b:
                    7e:71:ca:e4:b7:38:32:0e:d0:c1:41:5d:48:e9:67:
                    91:b4:43:29:35:d6:79:b3:98:2d:f0:87:f0:60:68:
                    c5:e5:87:9c:f1:a6:ca:ee:44:1e:65:53:77:2c:22:
                    06:d2:57:79:a5:5d:8c:f7:da:50:04:41:c1:0f:e2:
                    8e:ac:a1:cf:71:9b:ef:0b:a2:18:dc:0e:d5:69:14:
                    77:67:f6:af:b0:5e:93:b9:cf:b5:44:9c:a8:7b:25:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:84:B4:BB:5C:72:D1:54:23:37:D8:44:C7:A2:7C:73:68:DB:DD:12
            X509v3 Authority Key Identifier:
                keyid:24:46:92:DA:C6:21:84:E4:C8:83:57:A5:26:AB:9C:66:F9:4A:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JEaS2sYhhOTIg1elJqucZvlKTH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/8827F5DCDCBE11EFB15840BB762E951A/JEaS2sYhhOTIg1elJqucZvlKTH4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:76:46:0a:a1:77:97:fb:63:31:7a:31:bc:33:99:4e:39:ff:
         39:f1:0c:82:d4:10:aa:b0:27:b5:8a:ae:ee:af:f1:36:1a:bb:
         33:5b:4f:c5:1e:b0:ce:16:c2:38:7e:71:bb:07:c3:6c:7d:94:
         f1:60:9e:0f:93:ba:8b:74:a1:ef:a2:59:cb:c6:e1:2d:84:c7:
         fd:6f:4a:99:2e:05:12:07:99:70:19:75:a0:19:b4:c8:5a:49:
         d0:f9:c5:8e:1b:6b:b4:23:8c:61:0e:02:2b:25:7b:8d:83:97:
         b3:2e:d0:f3:20:b5:25:da:e4:72:10:42:31:0f:19:95:f2:0e:
         a9:6c:2f:80:ea:a1:2f:81:19:66:6a:1e:3b:15:b5:8e:38:53:
         80:49:f6:f2:37:b6:ba:85:60:9e:83:8f:d4:39:1d:d0:0f:36:
         37:1c:01:b8:78:a9:a3:b9:7f:ef:07:be:f9:67:f5:c5:17:a1:
         34:b4:0b:3f:35:7c:21:2a:e1:4a:9f:a7:35:d7:92:10:17:ee:
         8f:db:dd:cd:48:71:c2:a1:7c:3d:41:65:e9:24:5b:1c:e0:5b:
         4f:3a:eb:c3:d2:c0:9f:ae:93:a4:a2:81:8c:33:35:a7:ea:9c:
         e5:eb:ca:fa:b5:6f:28:db:1d:5a:51:e1:4a:8c:9d:6e:00:9e:
         00:74:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----