Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
File:                     48LJS_VpO0HwWh1WV9GnhLXVcmE.mft (raw, json)
Hash identifier:          1aTDGwA+EIosYGZx/bIqQ8+0EmmBAkRYpDvi6uNJb/E=
Subject key identifier:   EF:BE:C8:01:4C:BF:93:BB:95:68:29:C0:8C:D2:6C:20:24:56:D6:2B
Authority key identifier: E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61
Certificate issuer:       /CN=F3695CC5RI/serialNumber=E3C2C94BF5693B41F05A1D5657D1A784B5D57261
Certificate serial:       0541
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
Manifest number:          0540
Signing time:             Mon 28 Apr 2025 02:41:44 +0000
Manifest this update:     Mon 28 Apr 2025 02:41:43 +0000
Manifest next update:     Wed 30 Apr 2025 02:41:43 +0000
Files and hashes:         1: 48LJS_VpO0HwWh1WV9GnhLXVcmE.crl (hash: F60O8kVJY/wHUUpGdfsNtNEXGSWy5dsykv1aYTMz9Nw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
                          rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345 (0x541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695CC5RI, serialNumber=E3C2C94BF5693B41F05A1D5657D1A784B5D57261
        Validity
            Not Before: Apr 28 02:41:43 2025 GMT
            Not After : Apr 30 02:41:43 2025 GMT
        Subject: CN=680eeae8-b5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:a7:5b:b0:77:d9:f0:0f:c6:23:e2:9c:50:
                    ce:24:4e:b2:9b:78:81:8f:a0:90:9a:bc:4a:4a:ed:
                    51:2f:9e:11:6d:d1:48:f9:47:0f:87:9c:69:5b:c2:
                    3b:76:a1:01:6b:a6:a6:6e:99:cc:67:92:75:74:9c:
                    06:13:06:72:5a:ca:8c:03:4c:f0:ff:3d:cd:86:8a:
                    48:a9:2c:a8:d0:c8:6e:fd:75:0a:65:d4:c8:e6:c2:
                    d0:01:cf:60:ec:13:60:66:98:21:b9:8a:f2:d1:7d:
                    ae:b2:25:a4:29:f4:fe:07:3e:c7:1f:f0:e6:66:32:
                    65:69:2d:dd:f1:b4:e5:a1:27:08:d7:c7:bb:e9:da:
                    b4:eb:22:b4:32:94:01:24:a2:c1:62:2b:d7:fb:14:
                    51:68:eb:da:5e:ca:09:b5:94:9f:63:36:2f:93:b6:
                    aa:93:45:1c:36:fe:96:9e:66:c0:39:07:6f:81:66:
                    2c:a7:53:d2:5a:1b:05:c2:55:b4:f4:20:a4:7c:45:
                    87:ed:a6:30:44:e4:f9:51:b4:41:d5:52:d9:7c:ed:
                    59:13:c2:00:32:1d:f2:28:32:a0:4e:42:fc:0b:b6:
                    02:d1:05:37:7f:88:f7:bf:c4:9f:b2:49:81:5d:33:
                    e4:62:0b:68:c8:c3:e1:90:c4:bf:88:ff:4f:1a:d4:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BE:C8:01:4C:BF:93:BB:95:68:29:C0:8C:D2:6C:20:24:56:D6:2B
            X509v3 Authority Key Identifier:
                keyid:E3:C2:C9:4B:F5:69:3B:41:F0:5A:1D:56:57:D1:A7:84:B5:D5:72:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/48LJS_VpO0HwWh1WV9GnhLXVcmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/F5A81D42211B11ECBC50E22BD8A014CE/48LJS_VpO0HwWh1WV9GnhLXVcmE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:aa:a9:07:d3:d2:f8:0a:93:e5:95:df:b1:5e:c2:70:03:63:
         96:ad:e5:c7:15:8f:ad:cd:68:89:b1:fa:db:ed:58:59:4d:e0:
         74:b5:ab:24:76:a9:5d:1a:ab:e0:c4:56:89:fb:07:73:d1:4e:
         ba:c2:68:d7:98:da:82:82:1a:39:ef:1b:0c:0c:3a:6c:36:4f:
         25:22:c0:55:5a:39:73:e3:73:cf:aa:5e:95:cd:09:94:6d:43:
         1a:48:67:1c:5e:ae:2a:71:b8:1f:37:a3:d9:b9:4b:49:92:3d:
         15:f6:94:9c:7b:e1:ef:16:d1:b3:4c:4b:a5:1a:fd:71:d9:28:
         0d:2a:55:2b:f6:85:f4:9a:2b:44:57:61:4c:bf:1f:c7:da:14:
         e0:b1:bf:5e:1a:14:11:84:98:fb:af:0e:1e:a6:eb:b5:94:4b:
         22:e4:ce:6d:43:15:e8:60:b5:31:da:50:ef:7d:76:ee:16:11:
         4c:c5:d5:ba:84:34:59:d2:db:8b:d9:61:05:63:c3:a1:17:99:
         4d:16:d4:0a:e5:19:e9:e7:a6:03:2d:f2:05:10:34:67:72:08:
         0d:7f:a5:6f:61:71:e0:10:be:c7:2a:54:f8:3d:ea:85:c1:b3:
         86:ab:91:7b:e2:9b:05:c3:c3:92:be:ec:dc:8c:4d:0e:63:39:
         3c:0b:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----