Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
File:                     1QtxHNd881kYPT_e5YqZVLbPdwg.mft (raw, json)
Hash identifier:          0+Co6ohZjM/f4aNpw3g+sj856450hDrWOyRW1V3nxAQ=
Subject key identifier:   73:48:0D:87:85:C4:E0:5E:90:C9:2F:5F:E7:0B:6B:21:9F:69:22:40
Authority key identifier: D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08
Certificate issuer:       /CN=F367FECCAF/serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
Certificate serial:       058A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
Manifest number:          0588
Signing time:             Fri 25 Apr 2025 02:24:39 +0000
Manifest this update:     Fri 25 Apr 2025 02:24:38 +0000
Manifest next update:     Sun 27 Apr 2025 02:24:38 +0000
Files and hashes:         1: 1QtxHNd881kYPT_e5YqZVLbPdwg.crl (hash: pcHUVzLRU8QRiYNvTRuTZOoJrNkmRbSNGMqcw0R2et8=)
                          2: B690F15AEA3F11EB95F0A53BD8A014CE.roa (hash: zcL/xyLFW6ScnLFhDbmKjK12jh4EIgZ+FnDPZ3ww0Pc=)
                          3: EF13939EEA3E11EBAF73813AD8A014CE.roa (hash: 8Po3zyxjlwyh9BwwxrkrQw/Ky3Lp6GZyHJxMXtGCOnQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FECCAF, serialNumber=D50B711CD77CF359183D3FDEE58A9954B6CF7708
        Validity
            Not Before: Apr 25 02:24:38 2025 GMT
            Not After : Apr 27 02:24:38 2025 GMT
        Subject: CN=680af267-2466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:04:53:bf:4c:ff:d9:34:30:fe:c4:1e:a3:
                    a3:0c:a8:2a:9b:1c:59:56:b4:6a:3b:0b:ff:f8:40:
                    3d:96:81:94:1b:73:90:2f:ca:c3:f7:47:16:62:8e:
                    19:e9:2b:5f:91:b7:1c:1a:8a:fb:eb:1a:d1:18:ff:
                    70:e7:bc:b5:8a:18:4c:40:a3:04:88:aa:f3:d5:51:
                    a2:d9:92:49:6b:7f:e5:65:41:8d:4c:d0:e0:12:f3:
                    9a:2a:90:c1:67:93:34:34:7a:e1:63:80:7e:a0:64:
                    5a:76:86:0e:61:57:22:34:63:c2:93:87:50:e0:33:
                    35:00:72:5b:4f:a9:5b:15:a9:ee:75:f9:82:ed:36:
                    c4:85:ac:2d:68:1c:5b:f0:34:41:14:ed:c6:fd:e8:
                    97:a5:fe:6e:61:16:a0:8d:49:b2:1f:8f:be:47:c8:
                    f7:8f:a9:b8:57:ba:cd:7c:da:ba:13:72:f1:7f:74:
                    59:7e:8e:cc:b9:b5:bf:04:e0:61:b2:a8:eb:9d:81:
                    25:9c:8f:e9:12:ff:cf:9b:79:f8:a5:18:c6:b3:8d:
                    aa:b5:f0:b3:9a:49:43:c4:4d:7a:99:38:3d:82:a6:
                    e4:97:de:e7:f6:cb:98:87:b9:4e:8c:61:a2:92:ab:
                    ab:cd:ef:fd:21:9e:87:cb:4d:3c:aa:a6:31:16:86:
                    f8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:48:0D:87:85:C4:E0:5E:90:C9:2F:5F:E7:0B:6B:21:9F:69:22:40
            X509v3 Authority Key Identifier:
                keyid:D5:0B:71:1C:D7:7C:F3:59:18:3D:3F:DE:E5:8A:99:54:B6:CF:77:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1QtxHNd881kYPT_e5YqZVLbPdwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/449EE63EEA3E11EB941D9B39D8A014CE/1QtxHNd881kYPT_e5YqZVLbPdwg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:13:4a:4a:ae:7b:f9:88:7d:e5:0d:c7:1a:02:93:0d:82:2c:
         8e:00:78:bb:62:09:2f:61:7b:19:a7:26:1c:43:1c:dd:5c:00:
         d9:73:f0:75:d5:e8:53:64:cb:19:23:22:ae:11:2e:9e:9a:05:
         b7:5a:69:04:a5:2b:29:a4:08:99:64:ea:81:f8:d7:b9:7d:6c:
         88:d6:30:d4:2f:b1:8b:29:c1:c5:9b:26:dd:48:a1:d2:23:62:
         32:db:0e:31:2c:e9:0f:22:b3:65:70:07:87:db:fb:f4:f6:56:
         06:e5:7a:9c:b5:42:4c:38:da:bc:8a:47:6e:08:25:74:4e:3a:
         0c:a0:2d:5b:b1:10:78:8c:f1:d6:60:f1:59:63:f2:86:41:8a:
         e1:12:47:02:7d:04:cb:2f:e4:fa:6e:e8:4a:7a:bf:d0:c9:af:
         43:44:47:c7:12:9b:bb:52:ea:e0:aa:25:98:c9:42:78:65:56:
         ea:ca:22:3d:0e:af:68:a3:54:04:98:4e:ee:90:7e:90:b7:62:
         64:bb:4f:47:66:b5:d6:7b:a6:d1:7f:6e:56:ca:8b:84:c2:8a:
         e4:a0:a3:88:19:fd:8f:b7:13:fa:26:4d:6f:47:0c:67:54:ce:
         1e:f4:9a:6e:01:fc:ec:4f:31:6f:f7:06:40:52:6f:74:26:75:
         e5:3d:b4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----