Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
File:                     kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft (raw, json)
Hash identifier:          lYcwzFX5B972+FlE+9jWUm++JgQ2jUBfmyIhVDkxXl4=
Subject key identifier:   82:8B:5D:82:81:29:BF:D8:C4:27:53:E3:0D:FC:C7:9F:EA:85:20:9F
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Certificate issuer:       /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial:       08BB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
Manifest number:          08B4
Signing time:             Sat 03 May 2025 01:27:41 +0000
Manifest this update:     Sat 03 May 2025 01:27:40 +0000
Manifest next update:     Mon 05 May 2025 01:27:40 +0000
Files and hashes:         1: kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl (hash: kg3s5KasC4SPXnhjl0B62SL1Z2KtDB7JwQmLQISKEtY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                          rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 May 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2235 (0x8bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AR, serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
        Validity
            Not Before: May  3 01:27:40 2025 GMT
            Not After : May  5 01:27:40 2025 GMT
        Subject: CN=6815710d-ca13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:04:08:a7:f4:51:4e:b5:2f:17:01:59:cd:
                    90:5c:ab:61:8a:dd:ae:cf:51:1b:53:6a:1c:26:47:
                    75:29:66:81:c5:30:af:cf:04:77:0f:d7:37:fb:ab:
                    a5:6f:b9:dd:82:11:a1:db:9a:db:07:23:63:49:76:
                    af:b8:33:e1:5d:13:af:7b:44:1a:a6:05:e4:7a:15:
                    f1:84:c9:a7:b1:d8:6a:72:7d:f7:58:c3:a7:65:8d:
                    df:3e:30:a8:32:ef:5b:7b:98:e7:4d:59:5e:67:92:
                    0d:c7:dc:20:7c:09:5d:25:61:92:d3:6c:af:48:83:
                    e2:33:bc:29:db:a6:ad:6f:72:ff:d6:c8:8b:8f:bf:
                    ae:12:c1:3f:78:be:3c:f3:02:63:a7:d6:af:a3:0b:
                    5e:86:1d:ac:e5:b3:af:18:08:de:9a:ed:35:98:f6:
                    61:b8:f6:d4:6a:f6:99:05:60:50:af:5e:5a:01:1a:
                    5f:85:25:4f:69:f9:98:ab:8d:2d:25:6e:ff:c6:ee:
                    80:27:be:47:4e:b5:1f:1c:83:cd:1a:e5:38:b6:7d:
                    cb:57:e1:c3:2f:c0:af:48:1d:8a:71:f1:33:07:4d:
                    8e:2d:1f:8c:a4:77:21:37:24:3e:62:90:bf:1e:54:
                    9b:f5:40:e4:f2:70:1a:d9:d1:c3:18:3a:1d:f6:5e:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8B:5D:82:81:29:BF:D8:C4:27:53:E3:0D:FC:C7:9F:EA:85:20:9F
            X509v3 Authority Key Identifier:
                keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4c:34:a4:2a:96:27:66:e2:7f:f0:79:2e:93:d6:de:8b:b7:
         20:6c:97:5d:fe:3f:40:8a:42:e5:f5:77:dc:12:03:7b:a7:31:
         2d:b2:a6:04:11:90:8b:be:ba:19:c9:b4:e3:55:c8:b1:5a:0d:
         71:71:9b:c4:81:86:46:6c:89:37:f4:cd:50:95:55:24:12:67:
         46:1c:53:92:80:ca:90:df:75:8f:f0:f5:c5:2f:9e:b4:c5:71:
         30:a0:5a:02:4e:bf:71:9e:9e:0e:c5:0d:ce:92:2f:4c:01:5e:
         1d:22:65:4f:ee:06:93:fb:d8:69:39:aa:64:31:19:d7:97:c8:
         7b:6a:ce:03:81:4b:a1:26:45:28:ad:88:1b:5f:36:bb:82:22:
         d6:29:6f:75:18:f6:51:a9:08:d0:79:c4:89:47:36:c6:e8:18:
         5e:c9:93:20:5a:11:6c:26:94:6c:9c:e0:c6:80:5a:c5:16:ec:
         55:09:2d:c4:1d:23:af:b7:a0:0e:be:ba:84:d2:e8:30:af:91:
         9d:f6:16:5d:d4:e0:fe:32:37:62:8f:f4:33:8b:c6:94:8e:45:
         c2:23:8f:aa:f5:df:fb:97:40:0d:20:77:65:20:61:a7:ff:5a:
         93:f8:a9:31:e7:af:86:22:b8:69:5c:87:23:11:84:e5:83:55:
         89:e5:f7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:16:16 2025 by rpki-client