Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File:                     xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier:          /pduJwuDmCBieMbt8jgglgCUvYSfcTXJKcCrAcDYOAo=
Subject key identifier:   BC:F5:07:42:5E:F8:84:76:FE:F6:0A:68:98:58:96:84:D7:07:CF:FF
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer:       /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial:       0287
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number:          0287
Signing time:             Mon 28 Apr 2025 04:00:46 +0000
Manifest this update:     Mon 28 Apr 2025 04:00:45 +0000
Manifest next update:     Wed 30 Apr 2025 04:00:45 +0000
Files and hashes:         1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: 3YVpCbVY47a9LE9we8SaYplsqOwLVmRpXBxSdUvu5TI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                          rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
        Validity
            Not Before: Apr 28 04:00:45 2025 GMT
            Not After : Apr 30 04:00:45 2025 GMT
        Subject: CN=680efd6e-f581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:87:df:d0:61:90:b0:84:92:b4:6d:0a:86:4b:
                    88:90:46:93:15:e6:ab:7c:96:6e:50:df:6b:7d:c6:
                    03:2e:cd:f9:3c:78:f2:30:65:0a:2d:da:4e:56:7a:
                    12:27:69:15:b6:da:cb:7a:3f:03:a9:a2:e7:c6:ca:
                    0a:c8:c6:cf:df:96:b0:2c:b4:99:4d:00:06:97:d2:
                    4b:f9:6e:58:90:9b:18:d3:42:dd:23:de:e1:c3:e4:
                    c3:6c:49:0c:45:73:f8:45:26:98:18:6f:7b:34:12:
                    92:bf:11:1e:5d:f0:c1:b6:09:8a:0f:59:66:b6:49:
                    24:2a:4b:67:ca:78:dc:6c:2d:86:ec:94:5d:f4:c1:
                    72:36:3a:71:9e:a7:c7:ac:e7:1e:10:28:d7:42:27:
                    aa:d9:d9:22:cc:39:91:2a:fd:6a:9a:56:34:1b:af:
                    21:34:98:b4:8e:ed:4a:02:ae:6f:5e:cf:7b:45:cc:
                    4d:ed:61:98:27:e5:1e:60:71:b2:b3:d8:e8:b3:33:
                    7f:0c:fb:49:0d:d9:de:9e:de:f7:80:75:5f:f9:1e:
                    27:6d:1c:8c:b0:c0:7f:21:a4:9c:63:f4:db:5c:78:
                    7c:86:50:dc:b2:bb:98:24:32:18:25:05:fe:6f:66:
                    e7:06:fb:89:fb:92:d8:0c:ca:07:17:6a:53:fa:82:
                    05:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F5:07:42:5E:F8:84:76:FE:F6:0A:68:98:58:96:84:D7:07:CF:FF
            X509v3 Authority Key Identifier:
                keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e1:f6:ca:1e:52:33:28:23:c9:69:9b:fe:e6:a2:d8:54:04:
         06:68:94:f5:a6:f3:bd:5a:cf:a7:3f:3f:12:49:81:09:d6:90:
         93:ee:ba:c8:36:0c:cd:77:94:63:a3:e5:b1:95:49:db:56:10:
         54:d0:47:ef:50:07:3c:1c:da:8f:86:24:3f:ec:69:7a:e2:b2:
         6d:1d:7e:a2:7e:15:f0:b8:2e:1a:b2:79:72:26:1a:c1:5d:e9:
         de:29:58:7e:6d:38:09:8a:ec:35:1a:b9:04:67:a5:8c:8c:fd:
         79:61:98:07:69:b0:ba:87:11:b5:e6:d6:d4:2b:54:52:c9:18:
         c7:84:ca:92:35:3a:60:92:c7:03:66:e0:51:50:55:54:03:99:
         a3:87:e2:33:e5:93:a9:35:e5:c6:68:f0:57:5f:7c:3c:09:f6:
         dd:cc:16:0c:65:53:ff:20:f4:1d:dc:22:15:00:ef:83:9b:d2:
         65:ea:0e:0f:15:cd:52:99:b1:57:01:bb:46:1e:2a:f7:b0:7f:
         ad:c3:b9:ab:dd:33:95:d9:34:a4:5a:e0:03:bd:27:15:ee:c7:
         3c:50:5f:fd:95:a2:8a:0e:6c:3d:d5:b2:6f:01:04:e0:33:61:
         4a:86:9a:7f:b3:31:0e:11:ab:75:bf:b1:a1:8d:ad:96:4b:36:
         8a:0a:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----