Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          vRiMfqFMNQv2mDfVP267uMFJl6eE4oj1zR/YBTeFGq4=
Subject key identifier:   74:9C:F5:2A:58:4F:BF:BE:D1:20:4E:00:C0:C3:7C:C1:4D:42:32:72
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       06A2
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          069D
Signing time:             Mon 28 Apr 2025 02:04:27 +0000
Manifest this update:     Mon 28 Apr 2025 02:04:26 +0000
Manifest next update:     Wed 30 Apr 2025 02:04:26 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: tczttfJ0LP52OsYpT7k8f5EF6zZjgoRIYiHVm6sYgwI=)
                          2: 9EF8FBBA1BFB11EE8D767F5E4AD9E6FC.roa (hash: ic/Fv7vDPLdwq215X1uSW0oAemEyGKLMsbDQyRvHOkE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1698 (0x6a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: Apr 28 02:04:26 2025 GMT
            Not After : Apr 30 02:04:26 2025 GMT
        Subject: CN=680ee22b-e54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:0f:8a:64:f5:9c:29:49:cc:22:fe:28:86:
                    db:7b:31:64:a7:32:df:16:d4:5c:66:43:81:55:4b:
                    bf:cd:ed:dc:14:ea:23:8c:36:87:7d:18:e6:99:11:
                    62:9e:8d:2f:dd:b4:7f:b9:8c:b4:15:34:ca:44:26:
                    57:81:fa:76:8c:21:35:38:99:43:18:40:9f:62:15:
                    f0:7c:ee:91:4b:a8:5c:c7:63:7d:95:b5:8b:d1:ee:
                    2d:de:3a:99:38:50:b5:a4:44:c9:a0:69:78:c4:8d:
                    40:f4:54:1d:73:80:6e:08:40:7b:fb:b1:63:48:e9:
                    9a:83:c0:fd:de:41:ee:fb:02:dd:94:7d:f2:e8:c2:
                    37:24:22:b4:73:12:be:7e:35:4c:94:9a:0c:1a:03:
                    c4:cf:96:5b:db:c8:51:e8:01:ca:47:cc:88:ea:48:
                    f3:ea:1d:aa:e0:c6:13:57:98:fe:ef:dd:12:86:11:
                    8c:17:7b:c9:d5:1b:eb:60:8b:02:54:2f:ec:e1:e3:
                    1b:8b:65:47:b2:4a:a3:7c:02:15:eb:c0:21:cc:4c:
                    e0:9e:15:43:91:1a:fd:89:4f:7e:8f:49:43:4d:41:
                    06:7d:27:2f:4e:14:60:36:01:a0:b0:9d:96:ff:f0:
                    e4:37:e2:89:1d:52:58:fa:35:fa:1f:02:90:a3:91:
                    74:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9C:F5:2A:58:4F:BF:BE:D1:20:4E:00:C0:C3:7C:C1:4D:42:32:72
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b1:3a:74:17:78:9b:47:ff:9a:4e:7f:00:c4:2f:ed:08:fa:
         1c:c3:dc:21:94:3d:a5:a3:a7:54:1c:f3:12:d6:b7:e5:71:b9:
         bb:d2:09:1a:89:e8:4a:a7:ea:64:1a:61:ff:7f:c3:72:37:6b:
         c9:6f:21:75:1d:ff:a8:11:88:f2:ed:0c:6e:b3:a2:03:29:a8:
         97:e0:17:b8:33:8e:f0:8c:73:59:8e:fa:fe:35:f8:12:07:ed:
         98:42:48:af:54:78:63:ba:23:c7:e7:dd:10:0e:c9:58:13:f1:
         ad:cb:62:10:b0:9d:d3:75:16:a3:e8:7b:f0:f7:32:06:86:9c:
         6a:0f:c5:0e:d8:73:0b:3d:dd:3d:ed:f8:54:e3:e8:82:64:24:
         6e:aa:12:08:01:99:eb:ab:84:b7:9a:99:2a:82:54:78:71:7e:
         4d:01:fc:5a:8a:f5:13:7f:ea:b1:41:9c:27:01:28:c2:4b:27:
         d7:f8:70:c8:58:42:09:ee:ac:6f:f9:d0:76:3b:ba:19:7f:e9:
         14:4b:ea:c8:eb:a1:91:da:2b:e1:94:da:cf:c3:0c:e0:1d:8a:
         34:ce:ba:7b:31:ae:f9:bc:46:8a:9f:61:8b:4a:37:95:de:3d:
         8c:c2:36:13:5a:14:1c:b7:4c:76:96:bf:26:29:71:1c:7a:f6:
         d3:6b:bb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----