Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
File:                     ndN95jYew89otu98PBKrOZx8L4s.mft (raw, json)
Hash identifier:          FSTdlsTS0xFac7d/aHh/ZTivi/6f3WS4vvCcOebjL14=
Subject key identifier:   7D:FA:3F:7B:1D:64:8E:DD:F2:63:1E:E0:61:DA:63:42:BC:01:9F:1D
Authority key identifier: 9D:D3:7D:E6:36:1E:C3:CF:68:B6:EF:7C:3C:12:AB:39:9C:7C:2F:8B
Certificate issuer:       /CN=F3660442AF/serialNumber=9DD37DE6361EC3CF68B6EF7C3C12AB399C7C2F8B
Certificate serial:       03C1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
Manifest number:          03BF
Signing time:             Mon 28 Apr 2025 03:22:48 +0000
Manifest this update:     Mon 28 Apr 2025 03:22:47 +0000
Manifest next update:     Wed 30 Apr 2025 03:22:47 +0000
Files and hashes:         1: ndN95jYew89otu98PBKrOZx8L4s.crl (hash: TB+U3VCx5QYDZhY6rsAl3iZ5ykbMbet9xmkYTvogS0w=)
                          2: CA173E5E37FF11EE925E9B3E4AD9E6FC.roa (hash: DTtlgrbmzzwxu3uoClo86Z6YZ7fh9HCMMfQJyujQvlA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961 (0x3c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660442AF, serialNumber=9DD37DE6361EC3CF68B6EF7C3C12AB399C7C2F8B
        Validity
            Not Before: Apr 28 03:22:47 2025 GMT
            Not After : Apr 30 03:22:47 2025 GMT
        Subject: CN=680ef488-ed96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:72:04:58:32:b4:ce:74:57:a4:79:2f:36:2b:
                    c3:5a:a3:b8:ce:e3:3a:f0:b1:47:58:ad:e8:e4:a4:
                    d0:86:03:d9:24:82:0f:ac:97:88:68:8d:76:33:01:
                    d8:b4:0e:8c:e6:2f:bc:77:3f:0d:3b:bd:af:35:62:
                    64:5f:87:b3:08:89:75:4c:5f:c3:56:33:e6:95:8e:
                    cd:b0:a6:7a:f4:60:4c:7a:10:b6:4f:f8:52:09:84:
                    69:1d:59:a4:fd:cb:12:27:34:44:ff:2d:6e:96:fa:
                    94:14:80:47:b4:18:fd:14:e9:d8:ad:ae:3a:2b:db:
                    6a:58:6f:87:ed:fb:77:4e:14:3e:2e:bc:8f:7f:f0:
                    99:9a:09:8e:de:e2:0f:65:bc:dc:86:64:1d:33:5f:
                    a2:ec:0f:5c:94:36:13:86:64:cf:3c:29:f8:ee:25:
                    e5:d4:9f:ec:4e:11:09:fc:a7:02:6b:04:b6:64:de:
                    52:85:00:2a:77:f6:0f:03:b1:ed:44:f8:a7:7b:67:
                    2a:4e:0e:d9:fb:e8:e5:46:2b:94:f6:b6:04:77:d5:
                    5d:58:ea:e1:fb:f9:55:91:fb:0f:e6:16:b3:36:6d:
                    08:91:36:f5:ae:43:9f:84:ad:e9:8e:d4:7e:9e:a3:
                    af:3c:58:67:c8:6c:d2:cf:f9:bc:24:62:c7:ed:c6:
                    c5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FA:3F:7B:1D:64:8E:DD:F2:63:1E:E0:61:DA:63:42:BC:01:9F:1D
            X509v3 Authority Key Identifier:
                keyid:9D:D3:7D:E6:36:1E:C3:CF:68:B6:EF:7C:3C:12:AB:39:9C:7C:2F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ndN95jYew89otu98PBKrOZx8L4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660442/2962801C4FB211ED837146D4F1222468/ndN95jYew89otu98PBKrOZx8L4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:89:cd:06:f7:a1:22:2d:4d:b5:70:20:e5:32:fe:22:7b:60:
         90:b2:47:cd:61:ec:4e:56:e8:fa:90:08:b1:6b:d4:dc:f0:c7:
         ba:ad:ae:49:d1:3a:1d:12:a2:af:d6:d7:dc:5c:69:8e:85:cc:
         a1:db:80:ec:5b:5d:24:4b:86:20:73:18:e8:f7:fd:a8:42:b9:
         c8:c3:b3:de:1a:f3:63:75:95:c0:92:cb:77:83:b5:3a:30:b3:
         4c:d9:4b:45:71:df:b7:7c:db:8f:4f:bf:35:7d:25:62:32:27:
         2e:bd:49:e1:de:45:cd:0e:b9:b6:11:9b:46:7d:12:37:6a:0c:
         5c:4d:a7:28:8f:82:67:e9:79:f1:59:f5:2d:ae:37:45:e5:21:
         35:3d:ef:76:ea:cc:7e:43:e0:04:e2:a8:39:ce:58:58:4c:c0:
         60:a5:58:b9:b3:74:04:31:af:a1:69:fc:38:24:6c:62:c7:4f:
         5d:a8:88:f8:d9:16:4c:03:27:d5:01:ac:0e:5e:cf:4b:12:5d:
         0a:ed:7f:fc:4e:6a:e4:e4:9e:33:94:e5:69:01:1d:00:af:22:
         ae:c0:55:31:c9:05:f6:b1:df:3d:1e:3a:2a:be:a5:b1:a0:da:
         95:a9:3c:3e:4f:ea:02:7a:ee:9b:25:35:8b:77:0a:b3:b2:bc:
         f6:0f:57:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----