Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
File:                     KIBrwzr6AQb7b4x0Keq3jBIBolk.mft (raw, json)
Hash identifier:          d7YGOybPv2yOcjSGhqpdRJ0DUGDVwc1DoR+eUx2N/iA=
Subject key identifier:   12:66:11:49:21:42:5C:66:CB:1B:AD:3D:E2:49:CA:6D:19:BE:C9:08
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Certificate issuer:       /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial:       02C3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
Manifest number:          02C2
Signing time:             Sat 14 Jun 2025 03:55:34 +0000
Manifest this update:     Sat 14 Jun 2025 03:55:33 +0000
Manifest next update:     Mon 16 Jun 2025 03:55:33 +0000
Files and hashes:         1: KIBrwzr6AQb7b4x0Keq3jBIBolk.crl (hash: cXGoeEDRGa7YOhJiUYUoZKlnoC2SMerRZmYVKZ6mwF8=)
                          2: 12D945AE311311EEAFAB622D4AD9E6FC.roa (hash: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                          rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 707 (0x2c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E201DAR, serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
        Validity
            Not Before: Jun 14 03:55:33 2025 GMT
            Not After : Jun 16 03:55:33 2025 GMT
        Subject: CN=684cf2b6-36ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:48:92:91:4a:91:87:37:70:72:21:46:ee:91:
                    81:da:c7:0a:ab:e4:0c:15:07:a7:58:0f:84:f3:94:
                    87:08:98:1f:3a:fc:6f:7d:d2:89:17:9c:c1:be:e1:
                    0c:e7:73:82:b7:0d:f4:21:8a:f6:d7:e3:b4:b5:be:
                    4e:66:c2:c4:99:cc:cc:bc:8b:b8:60:c6:34:50:ac:
                    3e:f6:13:7e:c4:ff:c7:db:d9:8b:30:a4:b0:58:40:
                    92:89:8b:82:c6:45:bc:c3:ea:79:f8:88:bf:5e:4b:
                    34:3f:3e:21:83:c0:90:f0:09:1f:4e:ed:a6:aa:48:
                    09:c2:fb:dd:08:b2:9e:1d:9a:08:f2:12:2b:4e:92:
                    f9:dd:8c:d2:f9:93:4e:02:43:79:61:31:75:41:fd:
                    15:75:8e:9c:a4:7c:af:7c:a2:da:14:88:ab:47:6c:
                    1c:a1:a4:d8:c8:42:95:5e:73:54:d7:50:c3:67:66:
                    2a:6d:72:fc:99:63:13:a7:41:9a:a5:57:01:15:2b:
                    2a:9e:7d:5b:16:9b:77:ac:20:55:09:cb:ec:d3:5d:
                    6b:ac:02:a1:60:ac:89:30:e7:7e:80:af:cf:37:be:
                    d5:aa:74:8c:9d:13:56:f2:6c:47:ef:6c:4c:e0:f8:
                    c1:44:88:8b:b0:03:9d:aa:cc:53:2c:ee:01:be:2f:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:66:11:49:21:42:5C:66:CB:1B:AD:3D:E2:49:CA:6D:19:BE:C9:08
            X509v3 Authority Key Identifier:
                keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:66:49:bf:a7:0b:2e:83:eb:68:48:ab:04:6f:de:12:3e:6f:
         b1:b8:06:39:e9:fd:cb:bd:30:65:10:d8:32:4c:b5:b2:32:50:
         b0:56:23:dd:68:b3:2f:ac:e9:9e:f1:b5:d1:18:52:73:de:0d:
         09:95:0c:3f:38:5b:f9:87:e4:19:aa:ad:45:14:88:da:44:f6:
         b7:c4:e4:0b:89:06:22:96:30:90:84:e6:a6:5f:d0:ec:c3:46:
         4a:c3:6b:44:58:5f:b1:91:e4:a5:bb:24:e2:38:d6:96:be:88:
         28:bb:d1:08:28:fc:9e:df:4e:68:ce:5f:2f:4a:3b:b9:b9:33:
         55:43:51:97:d9:22:a1:91:c4:20:7f:f3:ce:63:e2:10:a5:bf:
         90:93:c5:29:bf:8f:cf:14:b6:3d:41:c3:5f:2c:34:13:1c:fe:
         61:86:f9:37:45:65:40:c6:b1:e7:21:76:3c:59:28:4d:40:1f:
         cb:c5:cf:13:f2:46:a7:cd:57:97:e4:86:e6:f4:a7:1d:c6:ac:
         b6:22:9e:c6:79:76:e8:80:be:41:e7:3a:8d:89:7a:fb:72:59:
         0e:77:ee:49:42:52:75:08:0e:98:6c:cc:f8:90:92:28:b2:e6:
         b3:81:9f:b3:22:d2:e9:4a:48:86:d4:13:43:20:8c:c1:83:c0:
         50:3e:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:37:04 2025 by rpki-client