Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
File:                     fzc4orKLb6wO4WjazaECCZH2Xv8.mft (raw, json)
Hash identifier:          CV6wU/UMSMkWdboP5z1fTFZlYhbStiddbkWakUocqS0=
Subject key identifier:   EB:C2:22:B2:89:92:D9:72:E3:91:9D:25:58:83:BB:C5:22:51:3D:B8
Authority key identifier: 7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
Certificate issuer:       /CN=F36CAD03AF/serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
Certificate serial:       02AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
Manifest number:          02AA
Signing time:             Mon 28 Apr 2025 03:55:54 +0000
Manifest this update:     Mon 28 Apr 2025 03:55:53 +0000
Manifest next update:     Wed 30 Apr 2025 03:55:53 +0000
Files and hashes:         1: fzc4orKLb6wO4WjazaECCZH2Xv8.crl (hash: AYiXHx0fcArQ6loME71p/ZN3fHQ/UkxV1UAkUdVH8KM=)
                          2: AFDCE496DD6A11EFB91A764C762E951A.roa (hash: LUqMxb0MwGP6MZT9i0MH7OuuoSQyIJFrnjoWDAeBNXw=)
                          3: 5101379C1F4311EE8FC7B9634AD9E6FC.roa (hash: 9vRfRWcOnYof6Mu0ENqhdmmo04buF4ccumW7t2r2a0A=)
                          4: 1FACC63EDD6A11EFB9FD6F4B762E951A.roa (hash: dF+TudNzn5JdoAREd/OnWJP6k5lbPTgpi/h8Pngj+g0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAD03AF, serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
        Validity
            Not Before: Apr 28 03:55:53 2025 GMT
            Not After : Apr 30 03:55:53 2025 GMT
        Subject: CN=680efc4a-b170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:8c:23:c8:6a:52:7f:33:f6:cb:3b:bd:99:
                    f7:70:9b:36:3c:50:eb:ef:95:10:10:33:e7:2a:08:
                    74:20:f4:4d:d5:f7:12:2e:19:fa:dd:e4:51:ae:60:
                    67:3c:62:0f:21:07:27:7d:3b:2f:4d:b5:4d:b3:3f:
                    37:14:53:98:34:20:5c:ff:c2:91:c2:25:bd:c9:d5:
                    d6:79:58:aa:eb:27:18:6f:22:98:f3:5e:38:1b:3e:
                    65:dc:94:eb:54:e0:9c:aa:54:3c:a9:6a:62:8a:b5:
                    2a:53:18:96:67:7d:80:73:3e:28:15:73:8a:45:fb:
                    e7:74:13:b5:c0:2b:96:8d:0f:f5:35:0b:73:0c:66:
                    b2:e4:23:11:76:32:54:ae:3f:16:a4:a5:2f:49:ed:
                    2f:46:d1:de:83:c2:ac:52:1d:13:db:f9:e1:10:db:
                    10:f2:80:7a:b8:c0:2f:d0:89:be:68:7c:32:fa:8a:
                    e8:77:78:b1:37:8e:64:ae:ff:69:3c:b3:03:a7:4c:
                    7a:07:74:22:90:f3:d4:c2:ba:6a:d2:d5:3c:74:52:
                    d0:fd:4e:ec:97:1f:0d:70:e3:0b:56:9d:7f:5f:78:
                    a0:d7:2c:42:a2:0c:54:3e:df:d1:67:89:5d:e6:c3:
                    0a:49:f1:5a:6c:6d:ba:e4:07:25:fe:a3:39:9c:b5:
                    fd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C2:22:B2:89:92:D9:72:E3:91:9D:25:58:83:BB:C5:22:51:3D:B8
            X509v3 Authority Key Identifier:
                keyid:7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9e:67:ea:0f:4c:1a:59:8b:9a:e3:2b:3b:d0:ea:fd:83:ea:
         9b:33:e1:13:43:33:97:df:02:04:5a:0a:ff:1e:4f:88:ad:d5:
         c0:1b:74:cd:12:e5:35:5f:47:7c:ac:bc:40:95:ce:8f:75:aa:
         15:1b:b5:98:5d:b0:14:27:5e:b6:1a:e6:29:c6:70:ef:2a:35:
         ce:e8:57:e4:18:06:ae:0e:d4:b2:6c:ec:a5:e4:f6:d3:c3:bd:
         73:17:5a:d5:0a:53:85:e6:30:5a:50:8d:9f:62:db:16:d6:bb:
         62:12:21:e1:84:71:d7:70:14:86:3c:2d:ea:77:cf:c6:62:ea:
         3d:04:73:c5:49:33:ca:55:43:3a:46:22:2c:df:b1:69:45:21:
         2c:76:bc:4f:8b:7e:09:d5:ea:fc:92:4d:59:ec:0d:d7:16:7f:
         50:b9:74:2e:09:e3:f2:26:7a:1f:3a:87:f2:d6:d0:b6:30:d6:
         94:43:b1:07:4c:be:e2:e1:4e:71:05:d4:29:6a:82:c0:56:a3:
         13:94:e3:ca:33:18:75:1b:38:a6:84:e2:53:c9:fd:27:64:45:
         13:50:51:ef:5a:ae:c9:0c:d7:48:2a:46:1f:da:17:a1:6d:04:
         0d:cc:0b:19:87:8a:a8:0d:d6:1e:60:b1:e2:4b:0a:31:25:24:
         e3:34:95:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----