Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
File:                     zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft (raw, json)
Hash identifier:          jPKQJntSLn6xzE3CRjxFpJayo/W3bUGw+Zm0pQ6SA6A=
Subject key identifier:   89:4F:46:DF:EB:B1:EA:63:77:E3:A5:B5:1E:80:1E:2D:27:C8:97:BA
Authority key identifier: CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A
Certificate issuer:       /CN=F3698125AR/serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
Certificate serial:       0229
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
Manifest number:          0227
Signing time:             Mon 28 Apr 2025 04:13:10 +0000
Manifest this update:     Mon 28 Apr 2025 04:13:10 +0000
Manifest next update:     Wed 30 Apr 2025 04:13:10 +0000
Files and hashes:         1: zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl (hash: rCcYZOPrDDLpD0DvwAYCN2zdR6azjIpDu1jtYpf91aQ=)
                          2: 637017A4270D11EF83B8A0DA7CDC24C2.roa (hash: KcWpAlTox8uHxgsa4XXL2SuGUP0/4ifMRuSUqNE8VdQ=)
                          3: D2BCB8AC24CD11EFBA1E711B7DDC24C2.roa (hash: pk6a4ptH8vZ8/DDIS6o5NsLyUfZR0uUROi741ipkTm8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
                          rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AR, serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
        Validity
            Not Before: Apr 28 04:13:10 2025 GMT
            Not After : Apr 30 04:13:10 2025 GMT
        Subject: CN=680f0056-86d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:31:93:d1:0e:91:14:5d:83:be:d1:2d:38:
                    a4:2b:84:cc:ae:39:8d:ae:05:dc:67:c5:54:cc:b3:
                    55:51:6a:ea:e9:ba:98:86:68:35:cb:ff:8e:43:2e:
                    ad:1a:41:42:6e:46:64:48:67:43:ce:04:75:28:d9:
                    fc:99:32:44:58:72:2c:8a:29:3b:33:ad:03:4c:a6:
                    ec:64:b3:49:ac:9e:4f:3b:dc:32:db:2c:46:cb:95:
                    f8:11:26:e3:30:1e:32:23:17:8c:52:61:37:76:3d:
                    cd:0b:9a:ed:d9:01:13:7a:5f:b2:f8:1a:8a:52:3c:
                    62:0b:e6:41:b1:1b:46:ce:01:23:fc:32:3c:50:87:
                    2b:a3:3d:f3:c0:aa:1b:91:5f:ba:19:3a:36:ae:20:
                    03:9f:9c:e2:21:1b:6c:46:91:82:4d:7e:33:fb:86:
                    04:81:dc:aa:3e:17:48:cf:cd:a5:0f:55:ac:62:4f:
                    b9:aa:b1:92:fd:3f:32:0c:73:cc:78:1f:94:4d:87:
                    c3:d0:5c:30:13:57:78:8c:46:fd:3c:bf:21:5e:72:
                    88:99:2f:06:01:2b:24:06:03:66:eb:27:a5:42:e5:
                    cd:b3:83:61:1a:6b:98:65:4d:46:bb:83:4e:d5:96:
                    ed:d9:9e:19:94:21:b8:c4:6c:9b:da:6b:2c:18:8d:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4F:46:DF:EB:B1:EA:63:77:E3:A5:B5:1E:80:1E:2D:27:C8:97:BA
            X509v3 Authority Key Identifier:
                keyid:CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:04:db:67:00:6c:ad:52:21:b1:3c:4d:2e:fc:d1:11:4c:25:
         45:8b:86:00:4b:7b:20:02:81:51:48:ab:ab:5c:76:c5:06:7e:
         2c:76:aa:15:eb:42:b7:e3:07:08:eb:71:97:f7:d0:fd:60:c1:
         39:81:e8:df:0f:66:fa:94:73:ae:c1:9f:21:4c:ed:12:75:1d:
         df:1b:e0:4f:d6:47:ec:b7:21:a8:a4:88:07:50:78:95:9b:9a:
         19:f6:86:10:fe:be:c3:df:29:ea:bc:e5:da:a8:7a:b8:84:ec:
         8b:c7:00:20:a2:c5:1f:a7:8b:66:4c:c0:c1:6d:b6:7c:52:19:
         c8:9e:81:2e:01:14:64:1c:e6:18:56:a8:a0:ee:bd:67:fb:79:
         fe:db:03:09:c8:4b:bc:48:29:fd:96:e5:52:d9:f9:3b:51:b5:
         2f:cc:b2:46:e2:76:a3:20:5b:d3:95:55:82:ef:13:f4:dc:64:
         7f:38:77:bf:8b:46:97:3f:fa:1a:ed:42:a8:56:57:c3:4d:89:
         eb:60:29:ea:b0:7a:76:37:07:b8:42:ac:94:c8:f3:77:5a:2c:
         76:54:07:3a:87:10:b9:a7:5c:96:75:6a:0a:2b:80:89:d6:9b:
         8f:f1:78:98:19:18:4e:25:97:47:5a:fe:0a:ed:46:f0:e8:bc:
         b5:78:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----