Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
File:                     kiiCgOPYgt7EFfWIHAFch2WdaEo.mft (raw, json)
Hash identifier:          L5B0CgTtvNNqLxcd07z2wpb2GVBJL3uMjr85zQIi8H0=
Subject key identifier:   41:01:3E:32:D0:67:CD:24:9D:FF:E9:47:D4:5A:DC:3C:0D:9A:67:6E
Authority key identifier: 92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A
Certificate issuer:       /CN=F365F7E8AR/serialNumber=92288280E3D882DEC415F5881C015C87659D684A
Certificate serial:       020E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
Manifest number:          020D
Signing time:             Sun 27 Apr 2025 04:12:06 +0000
Manifest this update:     Sun 27 Apr 2025 04:12:05 +0000
Manifest next update:     Tue 29 Apr 2025 04:12:05 +0000
Files and hashes:         1: kiiCgOPYgt7EFfWIHAFch2WdaEo.crl (hash: F9gyzU85TdZFbQGvMj3WR5Fc+FavJESnEvOrjlnWqJI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                          rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 04:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AR, serialNumber=92288280E3D882DEC415F5881C015C87659D684A
        Validity
            Not Before: Apr 27 04:12:05 2025 GMT
            Not After : Apr 29 04:12:05 2025 GMT
        Subject: CN=680dae96-7649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:44:39:b4:1b:25:de:b0:65:0b:be:63:bc:
                    4a:58:57:b6:04:08:ff:1f:70:79:a4:e1:26:25:d4:
                    1c:56:c9:36:c8:7a:67:dd:70:5c:44:2a:7a:ae:b5:
                    b7:7c:84:8d:cc:f0:b7:de:03:d0:6b:29:72:43:9c:
                    5b:2b:7b:35:a0:b3:1b:fc:61:68:38:8a:21:5a:7e:
                    0b:a3:66:04:e9:36:52:4a:2d:6b:f1:ca:01:76:e5:
                    86:09:74:09:a9:d0:bb:39:42:9b:de:28:f9:03:76:
                    19:13:a2:1c:54:8f:b3:6f:28:20:07:d5:de:4e:a2:
                    8b:13:30:ad:5e:b9:37:30:f3:1d:a0:09:d3:ed:27:
                    ef:22:0c:d9:fd:4d:92:99:a2:92:57:1e:08:67:a5:
                    58:73:24:99:0a:46:dd:0c:99:07:d2:69:d9:73:6f:
                    a8:b2:cf:a8:e6:b3:6c:4c:ac:79:5a:ad:37:a5:2a:
                    da:ba:f2:f6:10:11:7f:28:27:1d:15:6d:1f:62:d3:
                    01:53:66:ab:39:db:c0:78:45:c6:fa:af:22:3c:ea:
                    68:a2:2a:cb:14:a1:12:53:85:60:4e:33:51:68:fa:
                    93:c4:71:2a:4a:ca:0d:eb:48:5b:ff:4a:39:bd:82:
                    5d:bd:33:fb:de:14:d5:9e:65:f0:6d:3b:41:1f:ee:
                    4f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:01:3E:32:D0:67:CD:24:9D:FF:E9:47:D4:5A:DC:3C:0D:9A:67:6E
            X509v3 Authority Key Identifier:
                keyid:92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:41:5d:78:a5:06:4d:ea:e2:b0:d8:26:53:70:b2:50:2d:43:
         05:67:3c:e7:58:1d:64:93:8e:38:b8:d4:7e:ef:02:b8:f8:eb:
         32:03:79:5a:2a:de:be:8a:c8:50:ff:e2:e9:67:cd:58:07:a2:
         5c:d2:db:e3:c3:47:ee:e0:e0:f4:9b:33:95:47:4f:87:68:b5:
         9d:f6:1f:7f:26:91:60:45:b4:f9:e4:d2:b2:18:f2:d0:35:ff:
         21:a5:2b:27:b3:31:d6:49:cd:8c:6d:33:b1:94:17:d0:bc:54:
         bc:ee:a8:be:0d:c7:7b:ef:e6:f2:05:6f:af:9d:39:a7:8c:7b:
         da:34:b5:c6:f7:5f:74:49:d9:8e:e6:13:65:7a:9e:ac:bd:78:
         58:72:42:fb:73:e9:6c:05:6f:f1:43:e0:1e:6e:f4:b9:61:f0:
         60:ca:9d:16:de:bc:58:ec:e1:c1:ef:55:af:cc:e5:b3:89:33:
         dc:6e:ca:22:c7:43:f1:73:2f:cf:2c:3a:ea:ae:d5:59:3a:f1:
         bd:8f:d6:58:1f:b9:c5:8e:5d:92:c9:5f:09:ee:5a:1b:61:59:
         07:29:85:0c:c1:ea:a4:76:61:cb:7c:5d:70:cc:f8:7f:3d:a5:
         67:f6:5a:e2:1b:6d:07:59:b0:e2:e3:fb:29:36:c5:85:5d:c7:
         4e:87:aa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:43 2025 by rpki-client