Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
File:                     qPP_zPK9bxc-V43OhiXgHFOX9zU.mft (raw, json)
Hash identifier:          xWwpxRpH83fY7c5aa8knUqNjYY5awbdfJqxmBu32UDU=
Subject key identifier:   99:79:2A:95:79:3F:13:B1:0C:3B:D3:67:0C:07:28:11:D7:26:DA:6C
Authority key identifier: A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35
Certificate issuer:       /CN=F3684027AF/serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
Certificate serial:       0547
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
Manifest number:          0545
Signing time:             Mon 28 Apr 2025 02:41:17 +0000
Manifest this update:     Mon 28 Apr 2025 02:41:17 +0000
Manifest next update:     Wed 30 Apr 2025 02:41:17 +0000
Files and hashes:         1: qPP_zPK9bxc-V43OhiXgHFOX9zU.crl (hash: VJdHBOTM9bhuGjz6q/3aPirG7dWAqsMFNcy0Ao/vXic=)
                          2: 7053DDBA207711ECA57B2A27D8A014CE.roa (hash: 8FwYiwQNn3Nk7JGlhTjNINHWw5iUKIWhAuMhk3sKQys=)
                          3: 5EE2F40CED9F11ED90CD53134AD9E6FC.roa (hash: 7NdUaz4rD9qpZUgGvl0CsoD0saUCFYGySX0YWVKqUtI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1351 (0x547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3684027AF, serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
        Validity
            Not Before: Apr 28 02:41:17 2025 GMT
            Not After : Apr 30 02:41:17 2025 GMT
        Subject: CN=680eeacd-bde6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:d0:31:4c:02:76:a8:6b:61:fd:a4:40:3e:
                    62:17:74:7f:19:55:6e:e5:e3:5f:41:64:af:a6:a7:
                    0c:aa:ae:6e:17:23:d2:bd:c8:4f:20:86:59:bf:b7:
                    c8:28:ed:d1:fc:41:e8:8e:b3:5e:bc:50:0b:1c:bd:
                    db:d5:3c:e8:8a:ef:c0:19:8a:83:74:50:cf:d9:cc:
                    cb:11:2d:e8:b7:fc:47:72:71:f5:2c:01:34:93:42:
                    d7:44:7f:e0:d0:5d:74:20:84:a3:63:5a:e1:b5:18:
                    4e:7b:e9:e7:86:2a:74:7c:c4:e9:67:25:50:92:fd:
                    f4:b3:cb:69:f5:bc:ec:72:56:dc:88:4a:46:0d:7b:
                    8b:fb:51:b0:a0:ea:89:ac:c7:03:36:01:d4:97:5e:
                    a2:c0:af:9c:e3:41:63:d5:d2:8f:4f:2b:b2:70:cc:
                    1a:75:6b:58:80:41:a9:fe:ef:87:4d:e6:ee:26:0f:
                    8f:b8:7e:df:80:33:7f:6e:22:ee:84:ee:45:76:fb:
                    1e:5e:55:d0:c1:9f:99:ff:96:28:63:2e:16:28:e1:
                    53:64:ae:82:2f:5c:1b:2f:2a:34:c4:79:d6:08:9b:
                    3d:99:a0:bc:07:97:98:25:d2:6f:f7:6c:82:8c:fc:
                    fe:5a:7f:c2:a2:81:33:f0:3c:37:3d:22:b7:05:d7:
                    ca:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:79:2A:95:79:3F:13:B1:0C:3B:D3:67:0C:07:28:11:D7:26:DA:6C
            X509v3 Authority Key Identifier:
                keyid:A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b9:06:a0:c1:ce:09:c7:65:7d:e5:66:e1:56:f6:69:a5:06:
         99:cb:b4:a2:4a:16:ef:24:43:2b:14:dd:57:da:3c:3d:1f:e4:
         4f:8c:7b:fb:3d:88:2e:0f:b5:06:8d:d2:05:34:23:b6:a9:07:
         28:8a:d1:99:16:c4:e6:a3:f5:72:b8:2e:59:4f:01:f1:29:5a:
         11:bd:9a:37:10:d2:f9:80:79:d4:64:57:2c:87:a8:4c:b8:ba:
         14:2e:28:d8:dc:93:4e:c2:5d:d8:fd:5a:bf:b7:3e:48:d1:b9:
         d5:a2:3d:bc:a3:ba:62:21:c2:0b:36:c1:da:4c:9d:d4:69:92:
         41:4b:10:a2:92:f3:f9:b2:5a:e0:66:d8:f2:0f:b7:eb:37:4b:
         33:1f:f1:ea:14:45:e7:e3:3c:89:1f:8e:0f:d1:68:61:7e:c9:
         31:15:2d:78:d7:8d:f4:df:b4:dd:53:34:75:4a:3f:02:52:e5:
         25:5b:34:95:12:84:45:1f:67:6d:94:3b:56:f0:7c:6f:64:a9:
         84:67:2f:83:9a:57:d8:3c:c1:55:9b:13:43:dd:e9:6f:c5:55:
         5c:25:19:02:d7:fd:f9:6c:eb:c0:2f:c7:c2:3e:33:e2:3c:08:
         66:18:94:46:d6:45:d2:96:63:1a:16:23:56:96:e9:5d:8a:22:
         7c:e1:83:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----