Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/W2-LDYYuYSEE0fy6aR8DaN008KE.mft
File:                     W2-LDYYuYSEE0fy6aR8DaN008KE.mft (raw, json)
Hash identifier:          GYWFU/zBT3dwnsF/ep9TlS1hilfX/EGoH15fj4HQ9oQ=
Subject key identifier:   79:C9:76:BE:73:A0:F5:5B:70:82:18:EC:8C:34:85:3E:45:A8:A6:94
Authority key identifier: 5B:6F:8B:0D:86:2E:61:21:04:D1:FC:BA:69:1F:03:68:DD:34:F0:A1
Certificate issuer:       /CN=F36C1E88AR/serialNumber=5B6F8B0D862E612104D1FCBA691F0368DD34F0A1
Certificate serial:       0241
Authority info access:    rsync://rpki.afrinic.net/repository/arin/W2-LDYYuYSEE0fy6aR8DaN008KE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/W2-LDYYuYSEE0fy6aR8DaN008KE.mft
Manifest number:          023C
Signing time:             Mon 28 Apr 2025 04:11:38 +0000
Manifest this update:     Mon 28 Apr 2025 04:11:37 +0000
Manifest next update:     Wed 30 Apr 2025 04:11:37 +0000
Files and hashes:         1: W2-LDYYuYSEE0fy6aR8DaN008KE.crl (hash: yV8iuYRVVbyTXWrh4+GfQQZFkFgfQbwYN1/VcCQubn8=)
                          2: 52B737FE365711EF93C48163762E951A.roa (hash: uhifOEwJuf00GYSopn1tLQdSysjL2MxwNmP+zqGUAaw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/W2-LDYYuYSEE0fy6aR8DaN008KE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/W2-LDYYuYSEE0fy6aR8DaN008KE.mft
                          rsync://rpki.afrinic.net/repository/arin/W2-LDYYuYSEE0fy6aR8DaN008KE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1E88AR, serialNumber=5B6F8B0D862E612104D1FCBA691F0368DD34F0A1
        Validity
            Not Before: Apr 28 04:11:37 2025 GMT
            Not After : Apr 30 04:11:37 2025 GMT
        Subject: CN=680efffa-fd8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:53:4e:2d:c2:0e:fc:a6:62:d3:76:0e:74:
                    87:8d:1c:c2:29:67:22:5e:83:4a:c5:02:0a:e8:ae:
                    d8:3e:0b:61:7f:b6:80:1a:40:83:e0:e4:61:ad:1c:
                    e9:c0:29:e0:a1:80:f4:e6:b4:3c:46:1a:67:0f:ab:
                    b1:7b:d8:3d:f6:82:eb:82:e6:69:4e:33:08:af:ae:
                    28:42:1b:9c:f8:8a:06:c1:d5:6d:3a:6d:72:af:d4:
                    91:d7:78:a7:7b:75:59:41:ca:3b:d5:eb:3f:ae:1e:
                    1a:ce:8d:27:95:0b:f8:b4:f5:db:54:82:52:cd:49:
                    ab:6d:6b:8b:95:8a:2c:9a:e2:5e:73:f7:99:c0:99:
                    0d:b8:79:8e:41:eb:7a:2e:9a:a4:53:f9:c2:c4:5a:
                    ca:72:ce:41:04:a1:03:59:82:da:d9:da:fc:c1:e3:
                    af:56:a4:da:19:7b:04:0b:5b:2c:2f:c4:78:bf:da:
                    9f:86:4e:dd:ad:1e:34:52:0c:4a:54:02:37:f9:a5:
                    d9:1c:29:1f:8c:74:9f:0a:fe:d9:e2:75:5a:9b:9e:
                    f2:3f:46:9d:03:16:96:0c:4e:c6:38:7a:5a:88:ec:
                    c3:6d:c4:99:e5:d9:60:25:7b:70:e4:18:af:b5:81:
                    02:2c:eb:b0:f1:eb:a6:d1:0b:60:84:8a:1c:b1:4a:
                    4f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C9:76:BE:73:A0:F5:5B:70:82:18:EC:8C:34:85:3E:45:A8:A6:94
            X509v3 Authority Key Identifier:
                keyid:5B:6F:8B:0D:86:2E:61:21:04:D1:FC:BA:69:1F:03:68:DD:34:F0:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/W2-LDYYuYSEE0fy6aR8DaN008KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/W2-LDYYuYSEE0fy6aR8DaN008KE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1E88/346B2F2278E711EE9F4E993C4AD9E6FC/W2-LDYYuYSEE0fy6aR8DaN008KE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a5:d5:94:28:20:c9:18:62:55:3a:53:22:e0:f0:2d:92:55:
         be:1e:7a:83:86:94:f2:c2:4d:08:8b:0b:43:f2:5f:f7:5c:02:
         69:a0:9f:4f:64:a7:c7:0f:d3:f1:b7:a1:bf:dc:fb:62:a7:ec:
         87:8a:eb:3b:99:c0:47:a4:2b:06:94:6b:20:bc:0d:0b:33:38:
         24:c1:ca:10:0f:78:eb:c8:69:16:0a:bf:16:33:48:5a:82:cb:
         5d:79:51:a0:d6:96:9a:e2:1e:d4:08:73:d3:8a:90:f9:e8:fe:
         1c:d5:03:e0:25:8c:6b:1a:fd:8f:51:2c:7b:8c:3e:84:8d:0b:
         4f:8a:ac:af:f3:d6:83:f8:77:49:94:67:f2:f0:3c:40:28:6a:
         fa:f0:9c:82:c8:b5:36:bb:17:be:4b:7e:bf:dc:7f:6c:88:25:
         a9:c6:13:f3:41:15:5b:66:19:0d:a3:20:9a:93:15:a2:35:f2:
         d5:fb:60:bb:9d:4d:c5:94:57:80:3a:0f:8f:15:3b:5e:56:34:
         68:ff:d7:24:17:5b:56:a3:3b:16:2f:cc:df:83:0d:ee:90:69:
         49:33:b8:1d:36:03:08:98:13:c7:70:63:08:9f:ca:67:95:6b:
         7a:eb:09:ab:96:ef:0d:4e:a4:d3:4f:f2:9b:c1:70:63:ff:71:
         76:32:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----