Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
File:                     sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft (raw, json)
Hash identifier:          hSR+NDKqPespPzlpyArV8GJZVwQ24dt6OfEuwVoe1wM=
Subject key identifier:   42:02:21:4D:40:D3:BF:CB:8C:D5:12:39:06:AC:49:9B:2E:23:0C:CA
Authority key identifier: B0:F8:FF:A5:BB:CE:CD:31:3D:F9:8E:A4:4A:4F:3E:A5:CF:D7:C4:7C
Certificate issuer:       /CN=F36702EEAF/serialNumber=B0F8FFA5BBCECD313DF98EA44A4F3EA5CFD7C47C
Certificate serial:       0603
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
Manifest number:          0601
Signing time:             Fri 25 Apr 2025 02:10:41 +0000
Manifest this update:     Fri 25 Apr 2025 02:10:40 +0000
Manifest next update:     Sun 27 Apr 2025 02:10:40 +0000
Files and hashes:         1: sPj_pbvOzTE9-Y6kSk8-pc_XxHw.crl (hash: KUjMmeHurBdEOC2zLxS23FVJ+ZK7bqvClXFoNeKMohY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36702EEAF, serialNumber=B0F8FFA5BBCECD313DF98EA44A4F3EA5CFD7C47C
        Validity
            Not Before: Apr 25 02:10:40 2025 GMT
            Not After : Apr 27 02:10:40 2025 GMT
        Subject: CN=680aef21-b546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:4d:bd:4d:cc:04:ec:85:86:e4:6c:8c:cb:
                    af:61:8f:e7:c9:a1:69:85:18:20:82:99:aa:d6:ea:
                    e5:b6:98:46:64:57:c4:a3:be:49:ed:a9:fb:cd:61:
                    ef:3e:a6:15:1b:dc:8b:8e:2a:54:f3:70:ff:34:4a:
                    d7:f3:74:2f:5a:52:c0:c9:ea:8e:cf:31:46:ca:53:
                    b7:b8:f4:51:a4:b0:e3:42:14:f8:95:a6:ed:d8:cc:
                    e1:15:59:07:81:c8:18:c1:bb:56:d1:30:69:d2:5c:
                    c5:d2:a8:59:5b:a3:18:7e:ee:36:67:53:81:4c:e6:
                    ba:9c:2b:5b:35:cb:81:e0:5f:1b:0f:f8:0d:84:ce:
                    e0:9c:26:5e:54:84:99:d2:fb:4f:27:8f:ee:d6:a3:
                    3c:c9:54:9a:df:59:9b:c5:6b:0b:b4:5e:02:fa:47:
                    a4:2e:96:67:51:58:fd:98:ec:78:e4:d0:0c:bd:91:
                    03:62:39:67:81:7d:1b:bb:94:48:a7:a9:bc:e9:bc:
                    a0:89:ff:74:fe:26:3e:bb:2c:46:8f:6a:df:1c:29:
                    8d:f1:7e:e7:e3:63:33:65:8a:b2:11:5c:6d:ed:4b:
                    25:98:ed:cf:fe:1c:f2:fa:39:98:8c:c5:a1:ac:fd:
                    ee:21:88:51:b2:93:ed:38:f5:03:85:37:2a:fe:e5:
                    39:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:02:21:4D:40:D3:BF:CB:8C:D5:12:39:06:AC:49:9B:2E:23:0C:CA
            X509v3 Authority Key Identifier:
                keyid:B0:F8:FF:A5:BB:CE:CD:31:3D:F9:8E:A4:4A:4F:3E:A5:CF:D7:C4:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:4b:d3:ba:30:3a:01:89:62:f5:74:97:27:e1:c7:94:59:76:
         63:de:ed:2b:a0:09:7e:3f:84:e7:73:b5:3e:15:51:eb:69:f0:
         19:e7:13:1a:20:5e:33:ec:b1:b7:18:b4:3d:92:79:3b:6f:9c:
         37:38:e8:78:ab:ea:a6:9c:39:d2:26:d2:52:2d:9e:1b:06:6c:
         a2:a6:5b:69:62:ac:8c:44:06:16:0c:47:15:ed:45:04:88:9b:
         df:c1:29:53:cf:e3:2f:c9:99:ee:17:54:9a:99:77:44:db:f5:
         7d:23:26:a5:2a:06:64:b0:11:b2:8a:73:6b:c4:97:30:66:ad:
         5d:c8:73:d6:b4:f7:12:9a:b9:bf:74:1e:ce:a3:b7:b6:c1:3a:
         19:42:81:37:36:6d:15:fb:46:4c:b4:b2:a0:dd:b0:05:a5:9c:
         09:60:16:18:e0:46:9d:15:06:7d:2c:c3:d9:39:b8:41:b7:a3:
         8f:d9:f0:e8:6e:03:01:ef:74:17:64:5c:b5:2f:e9:3b:d1:e4:
         1f:95:6b:47:21:a0:33:a8:9d:85:15:b0:e6:22:1a:c0:3c:40:
         84:39:39:32:cf:18:cd:61:fe:cd:94:74:3e:1c:69:9d:ca:b2:
         b9:a4:33:91:27:4f:7c:4e:80:aa:4f:e2:83:83:3f:99:c1:f0:
         14:1f:a7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----