Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
File:                     gw8nolWHc_MWi4g8BLAjjqV1I7U.mft (raw, json)
Hash identifier:          leSGauvsbVN0c/cYxmWo3PvyytPoPIWB5334xb9lFdE=
Subject key identifier:   88:B2:6C:5A:1C:93:79:E3:68:E0:52:FA:53:25:6E:F5:F0:40:8E:63
Authority key identifier: 83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5
Certificate issuer:       /CN=F36D9B5BAR/serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
Certificate serial:       0C31
Authority info access:    rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
Manifest number:          0C36
Signing time:             Sun 27 Apr 2025 01:08:52 +0000
Manifest this update:     Sun 27 Apr 2025 01:08:51 +0000
Manifest next update:     Tue 29 Apr 2025 01:08:51 +0000
Files and hashes:         1: gw8nolWHc_MWi4g8BLAjjqV1I7U.crl (hash: ixO5y09vKhRm/wrSYebLd9ZURPyPaRW7HyFev3tbDjo=)
                          2: D24E31E2DE7C11EBB05A5E63F8AEA228.roa (hash: M2UxYeTNruKkNVITsjU6u+dRgieWPfDpSGMbsu/uKcE=)
                          3: 44CC9024914411EFAF149499762E951A.roa (hash: l3Qn1RGJiIaOX/uJ3zhEKWWubILzUTCLDcpUJEVSwjw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
                          rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3121 (0xc31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D9B5BAR, serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
        Validity
            Not Before: Apr 27 01:08:51 2025 GMT
            Not After : Apr 29 01:08:51 2025 GMT
        Subject: CN=680d83a4-43f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:01:2c:64:82:db:c1:88:64:d7:ca:d7:0e:
                    2a:cc:dc:50:4c:72:93:72:e5:79:f5:29:ab:ff:5e:
                    aa:e8:df:26:3d:a7:2a:76:89:00:6f:83:fa:29:f1:
                    08:a6:41:36:54:bd:ae:62:b9:c0:cc:f2:6e:ae:ca:
                    01:21:8a:ab:65:7b:63:9d:6b:26:b3:5b:98:fc:56:
                    08:bb:bf:b5:b7:71:52:0c:50:1e:96:d2:61:0b:c7:
                    b5:d4:53:df:42:77:22:26:d5:8a:4c:17:5e:95:d7:
                    d0:c7:f0:ac:c2:2a:d0:00:9a:55:25:a6:4c:be:93:
                    9f:50:83:c4:6c:ba:27:41:df:a9:c4:e5:3f:ff:65:
                    d7:0f:7f:aa:59:8e:52:96:2a:95:82:94:48:bc:9b:
                    4c:a1:6d:13:3b:11:d7:5e:c2:31:41:b5:ab:55:26:
                    01:86:ec:a1:b5:4b:5f:ad:25:7f:44:bd:6b:21:5d:
                    8b:bd:5a:fd:9e:27:fa:fa:15:ba:fb:42:e7:c4:0f:
                    d3:e1:da:08:10:19:68:96:8c:20:cc:ff:49:01:28:
                    00:6a:cc:b6:97:b6:63:d4:8e:93:f9:9a:33:5b:39:
                    5b:33:2f:b6:f0:10:50:06:e0:f8:61:7a:d2:d0:f6:
                    47:e3:34:03:e5:de:a9:dc:8a:9b:b5:17:7a:73:48:
                    e0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B2:6C:5A:1C:93:79:E3:68:E0:52:FA:53:25:6E:F5:F0:40:8E:63
            X509v3 Authority Key Identifier:
                keyid:83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:35:d6:16:18:bd:20:04:ee:4e:1b:c4:1a:e5:21:ff:44:fc:
         5c:52:35:ab:87:77:bb:db:07:19:95:38:a8:b4:04:7a:a5:a8:
         df:39:78:69:43:35:c0:32:82:c0:08:ce:a3:69:cc:cd:ea:6e:
         67:26:fa:53:07:e5:e2:bc:7c:32:f8:c2:a8:dd:1a:63:c9:3c:
         9d:95:b5:2d:68:b1:53:81:c1:11:08:cc:29:95:af:fa:de:ea:
         4c:77:85:40:5e:d0:f3:8f:4f:06:c3:48:68:16:b4:0c:b7:46:
         ff:8c:f8:4d:24:72:dc:b6:33:f2:1f:3b:f8:be:87:99:39:89:
         cf:7e:8f:32:ed:3f:fc:c0:c3:ba:4a:2d:82:2a:fe:3d:a6:57:
         24:9f:b4:75:02:96:58:fc:0b:41:67:34:2c:80:c6:00:e7:d3:
         14:cc:ca:18:1d:e0:cd:03:55:2d:d5:82:f8:39:28:e4:ee:f9:
         76:e3:97:b4:e9:c0:7a:b6:13:a6:ba:ca:ed:be:ad:ff:33:11:
         6c:7a:28:11:9d:f1:1a:91:17:79:98:9e:7a:ff:d0:a2:ba:e0:
         25:bb:3b:3d:21:68:4c:0d:f7:8a:0e:ed:f2:cd:bd:fd:4c:b9:
         77:11:05:dd:59:fe:4d:9a:b9:3b:6c:44:d7:d3:12:1e:ab:de:
         69:f6:92:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----