Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
File:                     fU328vfdsHN-2q2EhSP4cXbnzoE.mft (raw, json)
Hash identifier:          NJFsqDJ2Ojlc7fm4/gGPbg4IXA0igxC0XXI/8fi2gYE=
Subject key identifier:   57:87:D1:57:30:02:11:F4:D0:30:4A:61:1C:56:D3:C5:2B:AE:44:08
Authority key identifier: 7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81
Certificate issuer:       /CN=F3640C3CAF/serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
Certificate serial:       6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
Manifest number:          6C
Signing time:             Mon 28 Apr 2025 05:13:28 +0000
Manifest this update:     Mon 28 Apr 2025 05:13:27 +0000
Manifest next update:     Wed 30 Apr 2025 05:13:27 +0000
Files and hashes:         1: fU328vfdsHN-2q2EhSP4cXbnzoE.crl (hash: 01/d3g+lNwonO91HwqdoXLggYHoSV1qri+W35WLtucI=)
                          2: 9E9AD310D2BF11EFBBD01F9D762E951A.roa (hash: sKmiIxBHJPr3OGeB7htmDk2gGj7RAu5zKpegjCoJFAY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640C3CAF, serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
        Validity
            Not Before: Apr 28 05:13:27 2025 GMT
            Not After : Apr 30 05:13:27 2025 GMT
        Subject: CN=680f0e78-2ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dc:24:88:ad:42:b6:f1:b0:83:ee:d8:77:69:
                    60:8a:94:4b:97:54:48:1e:1a:fe:80:7f:2a:7a:47:
                    10:80:ab:b5:bb:03:02:ab:d9:4b:0f:bf:19:4f:a9:
                    f7:a7:cc:e6:63:36:b7:dc:d1:67:fa:5f:08:2b:ec:
                    5e:1f:d5:51:c5:e1:48:7c:8c:de:37:cc:c2:fe:e6:
                    0f:bb:e4:f3:da:7c:9e:fd:dd:e5:76:1e:96:ad:7c:
                    e1:7e:9c:d1:6e:7d:fa:e2:d5:bd:b6:21:0c:ad:e7:
                    43:ae:8e:bc:2f:18:90:d4:07:43:3c:53:f4:e5:51:
                    85:2c:2f:dd:7f:59:ac:93:2f:cc:cb:1b:0f:22:fd:
                    37:cd:0a:b6:70:28:f8:c2:c4:ef:ba:cb:e8:7d:d4:
                    09:13:a8:87:61:bb:14:95:16:6d:59:82:c7:fe:69:
                    30:63:57:ae:fb:00:71:71:09:c7:75:a9:d4:b9:f2:
                    e0:dd:f7:d2:4e:44:87:a0:77:cf:ec:2f:c7:36:50:
                    b3:e9:24:2e:7a:6f:45:55:89:ff:0a:39:02:bf:27:
                    06:f1:2b:27:6d:58:99:01:03:1b:1a:6a:0e:c5:fd:
                    c6:b0:99:c1:dd:50:34:c0:e8:ec:c4:34:02:be:de:
                    30:ff:aa:29:4a:fa:4c:56:e7:9d:2a:33:46:71:46:
                    d2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:87:D1:57:30:02:11:F4:D0:30:4A:61:1C:56:D3:C5:2B:AE:44:08
            X509v3 Authority Key Identifier:
                keyid:7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d8:5b:ee:0c:a8:23:9e:01:73:b1:b5:68:f9:13:8d:e9:e8:
         db:d3:e4:bd:80:f3:46:f4:4d:d6:2c:d1:18:ca:bb:05:83:d2:
         ef:90:90:cd:ca:e3:81:d3:73:88:18:12:13:f3:08:a2:cc:b6:
         01:98:57:41:e2:ed:ea:1b:d8:da:c5:73:c5:d0:52:51:83:8e:
         71:c3:ee:8d:0d:49:1e:78:ad:83:40:fc:bb:c9:79:05:2a:63:
         90:88:b0:f6:e6:c0:8b:db:c8:b3:e7:fa:62:9c:ea:18:36:5e:
         fe:6e:ac:21:ef:67:e6:1a:a7:b0:4a:9a:d7:f9:f0:30:62:5f:
         3b:2f:01:de:e1:a8:cf:5d:e5:02:3c:f0:f0:b9:a4:da:94:3a:
         63:8f:ec:df:6f:bf:67:49:fb:d8:d1:50:a1:93:50:88:cc:dc:
         69:d1:4a:79:e4:b0:c4:a3:7f:50:b9:bb:18:3f:f1:45:60:06:
         15:bf:51:f3:02:fb:45:84:d7:a9:48:ce:c9:e4:94:1f:20:52:
         61:e7:32:1b:01:65:5a:7e:b0:ee:8b:6f:e6:e5:c7:27:62:13:
         9f:bc:92:2e:5b:42:7e:84:04:f4:be:75:67:be:c1:eb:7a:e3:
         f0:4f:04:3a:58:25:bc:8e:99:ad:cc:79:59:9c:4c:80:dd:3b:
         ba:57:44:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----