Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
File:                     kkLGCS_iI5rNMMSPNawbxN313L4.mft (raw, json)
Hash identifier:          90B/QntN1W/CHB2RNg5OH50kAvstnSGuQKiEkmQuxxQ=
Subject key identifier:   F3:40:BD:F7:1C:D2:CB:4F:88:0F:21:6B:95:53:70:B9:D2:74:B6:35
Authority key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Certificate issuer:       /CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Certificate serial:       03B1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
Manifest number:          03B0
Signing time:             Wed 06 Aug 2025 03:29:22 +0000
Manifest this update:     Wed 06 Aug 2025 03:29:21 +0000
Manifest next update:     Fri 08 Aug 2025 03:29:21 +0000
Files and hashes:         1: kkLGCS_iI5rNMMSPNawbxN313L4.crl (hash: Op/x4TVmfZKyp2+Ets/B2F4T0V0TMNsdjoIPS7V9VFA=)
                          2: 77776CF68DDF11EE9554951A4AD9E6FC.roa (hash: P/s62KTUxEoG/rgkYrfYli6201mLv2NV6jxtdASDzgE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                          rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 08 Aug 2025 03:29:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945 (0x3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AR, serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
        Validity
            Not Before: Aug  6 03:29:21 2025 GMT
            Not After : Aug  8 03:29:21 2025 GMT
        Subject: CN=6892cc12-9434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:49:b5:ca:2a:da:9d:dd:93:c9:e8:1d:bc:
                    02:d2:ce:b6:1c:ca:87:8f:f6:9d:c9:fa:7b:d3:08:
                    1f:5d:ca:aa:22:06:85:b3:4f:0d:b9:ec:24:6a:fd:
                    21:00:ef:2b:08:29:7b:5d:b7:98:46:b4:b9:83:d2:
                    23:4f:a3:2e:0c:b2:43:fd:f9:b9:fc:fe:09:b0:bf:
                    70:17:5d:81:85:93:39:f9:aa:95:1a:15:32:0b:22:
                    8b:79:a0:9a:13:ae:af:bb:e8:80:70:48:ce:b9:ad:
                    c5:a4:7c:56:fc:84:16:4c:03:04:fc:ad:6d:0f:0a:
                    ac:b6:30:e2:ac:9a:4c:f0:39:e3:5b:ed:df:63:38:
                    e3:75:cb:ec:a5:1c:a3:76:97:da:99:3b:e8:12:bd:
                    16:4a:24:a0:e2:70:74:69:b6:f6:a5:10:45:da:b0:
                    4f:2a:81:cf:1b:db:b5:d4:45:eb:77:9f:32:fb:fe:
                    64:08:6a:dd:9b:88:c4:81:33:09:cd:36:bd:7d:eb:
                    32:de:00:b0:1b:c0:53:84:e4:03:f7:d4:67:58:ea:
                    9f:fe:31:7a:99:5d:43:cd:3c:50:eb:06:27:ce:6d:
                    ef:b3:4e:93:db:88:72:bc:14:3c:20:7e:12:41:fd:
                    1e:39:73:fb:a4:21:4b:ac:5a:f6:49:36:45:8f:18:
                    34:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:40:BD:F7:1C:D2:CB:4F:88:0F:21:6B:95:53:70:B9:D2:74:B6:35
            X509v3 Authority Key Identifier:
                keyid:92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:84:70:6c:8f:ae:1e:55:cb:9f:2a:32:6c:a8:55:71:2d:4b:
         79:32:85:8d:1b:18:7b:8b:d1:e2:63:e8:7e:6f:83:b9:68:d2:
         4b:05:1e:35:7c:20:5b:66:6b:25:4f:7f:3b:b7:cc:96:91:fc:
         3c:cd:cb:58:5f:89:d9:ee:63:68:61:53:8b:7e:a6:a3:9c:60:
         68:d1:dc:04:e1:63:59:f4:93:16:65:fb:3d:70:04:cb:f1:63:
         9a:23:af:86:61:28:63:6e:03:58:6b:b2:a0:dd:ed:74:d0:b3:
         67:37:34:d3:6c:55:63:78:cc:f6:2b:94:8e:a7:e5:07:b4:39:
         1a:10:a3:eb:e4:76:d4:c0:7a:04:af:9a:6a:f6:23:1a:04:c4:
         0e:c4:62:75:fb:2b:0e:f4:cf:34:94:0d:43:86:f5:cb:39:75:
         e3:5f:d7:6c:70:47:54:c2:c0:49:84:d5:c7:3b:a9:95:bd:b1:
         07:16:fc:0a:26:a3:fb:c2:0c:80:55:75:18:b0:4f:0d:22:81:
         5d:78:39:f0:f9:ab:32:1c:09:3e:6b:8e:2d:f6:19:e3:a4:49:
         f2:d7:3f:39:db:53:fc:5b:93:ad:9c:37:cf:3f:46:b3:8a:cb:
         96:9c:e2:09:80:21:23:79:1f:97:80:0f:47:35:99:ed:a9:8e:
         41:6a:39:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:14 2025 by rpki-client