Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
File:                     SmfXXBQJ0u538xkN5zXsl-9jDVg.mft (raw, json)
Hash identifier:          na9Bn6dKJo20YLptZpyuC6/ThYoKzVbGhacYkWHQgFM=
Subject key identifier:   2C:51:D4:B5:F1:1D:07:A0:4B:F6:11:4D:08:8A:B2:ED:08:21:CD:19
Authority key identifier: 4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58
Certificate issuer:       /CN=F36700DBAF/serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58
Certificate serial:       057A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
Manifest number:          057A
Signing time:             Mon 28 Apr 2025 02:34:39 +0000
Manifest this update:     Mon 28 Apr 2025 02:34:38 +0000
Manifest next update:     Wed 30 Apr 2025 02:34:38 +0000
Files and hashes:         1: SmfXXBQJ0u538xkN5zXsl-9jDVg.crl (hash: TXesCnkD7Tx8G0JBlm6LOTcbYPX85G+FIuHJoVKr7j0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402 (0x57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36700DBAF, serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58
        Validity
            Not Before: Apr 28 02:34:38 2025 GMT
            Not After : Apr 30 02:34:38 2025 GMT
        Subject: CN=680ee93f-2e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:6a:ec:39:7e:28:72:cc:81:37:ce:cf:c4:
                    ca:a3:28:47:94:69:81:ce:7f:30:3e:8a:74:cd:16:
                    8f:e0:13:29:d2:90:18:c3:37:85:85:52:a4:71:ac:
                    30:34:68:91:3a:82:95:9e:28:04:93:d7:1c:55:ad:
                    c3:27:11:69:a3:e8:45:4f:d0:ee:a7:c6:86:99:d2:
                    c5:ae:92:d5:34:29:55:47:5a:51:16:2a:86:91:73:
                    05:24:c7:bf:e5:f3:ef:51:b7:a7:d7:5e:3a:f5:e9:
                    a5:48:53:bf:c7:c7:b1:82:20:25:8c:b3:e2:e8:2c:
                    c7:44:8e:6b:82:ba:20:8e:ab:00:09:bd:9c:38:2a:
                    b5:9d:a5:ce:9d:8b:d5:83:48:7a:db:b4:76:b0:4f:
                    ad:be:16:44:ed:08:b5:87:c8:f3:20:cc:77:01:f9:
                    1b:5b:87:2c:89:55:29:af:0f:73:1f:42:36:88:5f:
                    27:bc:b7:74:52:b2:7c:10:44:15:74:cb:9a:84:0a:
                    b1:83:68:80:d8:55:20:f2:e6:3e:df:a6:9d:fc:a6:
                    55:a4:b8:8c:3c:51:67:bb:d5:0a:48:26:71:97:c3:
                    5c:94:d4:d6:2b:53:38:30:d6:53:47:31:1d:77:f9:
                    92:bd:db:fc:fb:ae:fe:f7:0e:b9:a3:ed:b7:87:ca:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:51:D4:B5:F1:1D:07:A0:4B:F6:11:4D:08:8A:B2:ED:08:21:CD:19
            X509v3 Authority Key Identifier:
                keyid:4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:1e:60:64:11:f2:54:97:f7:a3:fe:c6:cd:28:42:8a:96:a0:
         e9:bb:c0:d6:15:a4:08:00:46:ae:1d:34:19:3f:07:44:de:fa:
         99:dd:d8:56:3a:36:a1:a8:e4:40:ae:3d:e0:3e:9e:7a:89:7f:
         f9:c4:6e:90:5a:4d:26:32:3e:68:35:dc:db:6d:61:b7:96:dc:
         d4:eb:5d:98:37:88:42:87:e8:f8:43:42:60:a6:b9:d4:36:34:
         dd:6d:15:77:22:78:b1:94:ea:e4:49:40:55:01:2c:83:15:66:
         fc:bc:62:30:3b:80:3a:bd:ad:75:1e:e8:c5:93:a6:f6:17:0c:
         28:72:79:8c:d0:0a:52:2f:3f:94:a0:dd:8c:06:a9:af:fa:4e:
         11:2f:2d:22:c6:fb:90:f7:49:28:e0:ad:5f:ae:12:43:ce:f0:
         48:c8:8e:2d:f4:99:b2:31:76:24:2a:ff:b3:b0:54:fd:e2:ba:
         41:78:2d:aa:7d:98:89:c5:05:7c:ff:a4:fc:d1:d5:1a:fa:7c:
         b7:fc:04:f2:3b:0b:a4:34:41:f8:bc:3c:87:fc:ed:25:c4:df:
         ae:66:86:34:06:16:87:9a:6d:7e:84:6a:d0:5e:e7:c4:e4:65:
         23:d6:e5:11:51:3a:01:29:d3:e4:1b:1f:7d:05:de:4e:8a:2d:
         d4:38:37:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----