Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
File:                     kjOEThK8fu30Ns4cyZ6uITZHJkc.mft (raw, json)
Hash identifier:          XYVcQBv3/vgriqI0y6FRz2Kw59ouI3vFSjkk/WLHuEw=
Subject key identifier:   40:EF:78:1E:AD:2C:F1:34:92:63:4B:5B:C2:CB:FB:66:B3:A2:BF:9E
Authority key identifier: 92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47
Certificate issuer:       /CN=F36F8DABAR/serialNumber=9233844E12BC7EEDF436CE1CC99EAE2136472647
Certificate serial:       0B06
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
Manifest number:          0B00
Signing time:             Mon 28 Apr 2025 01:12:43 +0000
Manifest this update:     Mon 28 Apr 2025 01:12:42 +0000
Manifest next update:     Wed 30 Apr 2025 01:12:42 +0000
Files and hashes:         1: kjOEThK8fu30Ns4cyZ6uITZHJkc.crl (hash: SSZh6TpVVQnJXT+TKJGCyBLwC0pLQktmZZK1zvVhorI=)
                          2: DC9DA0E4D58F11EEB154057C775412E6.roa (hash: gp7fukfD5fPb1a+zTWjX6E2Nn206G89h7J8+rzHmk5o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
                          rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2822 (0xb06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8DABAR, serialNumber=9233844E12BC7EEDF436CE1CC99EAE2136472647
        Validity
            Not Before: Apr 28 01:12:42 2025 GMT
            Not After : Apr 30 01:12:42 2025 GMT
        Subject: CN=680ed60b-0ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:4e:71:2f:53:a6:a7:6b:d7:6e:32:14:c4:
                    ff:79:a7:6c:d5:36:f3:8f:0b:b5:dd:85:8b:19:12:
                    90:29:b7:bb:06:b5:a4:10:fb:54:29:a3:60:24:8c:
                    b5:6e:95:16:b7:2c:27:62:39:20:5e:2b:19:89:05:
                    93:16:d9:2b:55:fd:37:32:4b:a8:11:2e:6a:f8:03:
                    39:5c:9f:21:52:55:28:b3:5b:5f:7f:8f:5b:2f:30:
                    36:19:c2:65:e0:f3:f3:65:a7:03:5a:bb:9f:a8:aa:
                    cf:69:71:e7:10:2b:09:e9:51:30:93:b2:74:21:46:
                    90:13:f8:ba:dc:88:28:45:78:db:0b:d8:9e:af:76:
                    cf:89:8d:2b:02:9b:63:9a:67:de:2d:2e:43:59:91:
                    ce:35:fc:7f:29:7e:49:b1:37:a2:93:1d:12:dc:42:
                    09:1a:9f:0d:0c:d4:6d:9e:a8:db:17:ea:e0:3d:e0:
                    9c:fb:37:b9:5f:c4:3b:15:78:bc:6d:8d:55:81:0c:
                    48:02:08:9c:ee:95:d1:91:d5:e4:ba:80:c7:50:d6:
                    74:e0:0c:6f:71:49:d2:d6:f3:f6:5e:e2:b1:11:aa:
                    74:4c:d7:f5:6e:4d:fb:30:a7:1b:45:66:07:f2:b0:
                    81:e5:e5:87:03:b8:50:89:50:d9:79:96:f1:4d:fd:
                    89:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EF:78:1E:AD:2C:F1:34:92:63:4B:5B:C2:CB:FB:66:B3:A2:BF:9E
            X509v3 Authority Key Identifier:
                keyid:92:33:84:4E:12:BC:7E:ED:F4:36:CE:1C:C9:9E:AE:21:36:47:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kjOEThK8fu30Ns4cyZ6uITZHJkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8DAB/78CB9050B9C411E7ADD18C61F8AEA228/kjOEThK8fu30Ns4cyZ6uITZHJkc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:fd:6f:8b:40:9e:0a:84:cd:75:b5:1f:49:9e:f8:ea:97:e5:
         64:fd:4b:b5:4f:84:b6:38:48:9d:ce:20:1f:01:75:78:64:67:
         c6:c5:d5:f0:2c:11:d5:c8:e9:8a:f5:d3:08:b9:e6:1c:1a:97:
         31:9f:bc:c8:18:1c:ca:46:45:f0:36:c0:8d:19:17:cd:cd:c0:
         88:af:15:7e:4b:47:c1:1b:ce:4f:ed:17:8d:af:89:f5:1c:5a:
         b7:df:64:cd:02:33:8a:ae:52:3f:37:1c:5d:44:cd:87:90:82:
         7e:1c:44:34:70:90:f7:f7:91:7d:eb:c8:41:9c:99:4c:dc:54:
         6c:cd:54:e8:af:29:69:8c:94:60:ad:20:65:d7:ca:7c:57:da:
         2d:39:b2:a0:c5:5a:0c:b1:c9:7b:d9:21:8d:09:6f:f1:aa:e5:
         7a:ad:28:ed:b7:3a:48:a4:f7:35:36:79:8e:d4:4d:50:a9:71:
         1e:3f:bf:9b:53:99:a4:57:a4:31:8d:12:61:8f:ad:1c:cc:20:
         0b:a6:f1:ca:aa:ac:83:05:87:ea:a4:38:6a:e2:67:4a:4f:ff:
         60:ad:33:91:35:8b:30:91:94:bf:9c:45:e6:0d:f8:a3:19:4a:
         ea:16:fa:55:e9:af:3f:6f:22:4d:9f:34:c2:9b:e0:78:c1:11:
         4e:ac:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:34:40 2025 by rpki-client