Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
File:                     KvCNgqXIimbwBbMcgOhymuKM11U.mft (raw, json)
Hash identifier:          aOlhwzD2QvxWRZgrl9ocRNZ0oa81bB3GdjXc2gh8YaA=
Subject key identifier:   98:BB:05:54:CB:0B:A7:62:37:C8:AC:63:A4:D1:AC:48:F1:8A:4E:D9
Authority key identifier: 2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55
Certificate issuer:       /CN=F36406D3AF/serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
Certificate serial:       08B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
Manifest number:          08B7
Signing time:             Wed 14 May 2025 01:29:50 +0000
Manifest this update:     Wed 14 May 2025 01:29:49 +0000
Manifest next update:     Fri 16 May 2025 01:29:49 +0000
Files and hashes:         1: KvCNgqXIimbwBbMcgOhymuKM11U.crl (hash: IbhWAYNkXn9/SsCuz6nRMqxpfylP3yxRGRJlpIYy9Ao=)
                          2: E0B7E5C6AE2111E98F04DF3CF8AEA228.roa (hash: DsX+R5lwZz5IbPxYwdbT3HKP4x8lgrMkS5VZBHtyCkQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 May 2025 00:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2233 (0x8b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36406D3AF, serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
        Validity
            Not Before: May 14 01:29:49 2025 GMT
            Not After : May 16 01:29:49 2025 GMT
        Subject: CN=6823f20d-61c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a6:44:9d:e7:78:b0:cc:43:3d:ea:42:fc:eb:
                    b4:41:cb:05:57:dc:cc:56:4c:57:e5:cd:d6:ad:d5:
                    2f:8f:73:6c:ce:eb:90:43:2d:3f:be:a1:f9:0a:9c:
                    13:56:fa:e6:7f:13:9f:0e:f9:c7:5b:d5:86:23:de:
                    5e:66:07:44:df:d9:8a:ba:47:2f:7e:f5:61:4c:48:
                    49:69:78:32:24:f3:67:9a:c9:e7:65:59:0c:0c:5d:
                    79:99:67:fe:2f:5d:8b:60:ef:6b:b7:4c:e1:6d:34:
                    44:a2:eb:cd:e6:11:d7:4e:a7:c9:26:82:c2:76:b3:
                    f4:57:d1:53:dd:47:3a:ce:fb:8f:a4:87:ff:36:1e:
                    bd:e7:07:28:0b:b8:5c:d8:87:a0:34:fb:d3:79:e3:
                    fb:82:18:5d:e6:45:39:b8:e1:f7:e8:22:3a:0d:65:
                    2b:53:c8:5b:71:cc:7a:fe:f0:b4:b5:2b:a3:7e:5d:
                    a2:62:9f:a7:9e:a9:80:af:e3:70:2c:d5:df:bc:66:
                    25:c2:96:aa:07:63:60:0a:7f:71:57:cb:b9:a3:98:
                    b6:ab:73:fc:30:18:2d:26:ea:95:c4:84:8b:a0:9c:
                    83:af:5f:67:0e:9b:83:54:d4:6e:7d:26:d0:3d:d8:
                    27:18:92:8c:5c:89:5d:9e:45:64:a7:0e:b8:8d:64:
                    e0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BB:05:54:CB:0B:A7:62:37:C8:AC:63:A4:D1:AC:48:F1:8A:4E:D9
            X509v3 Authority Key Identifier:
                keyid:2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:da:ac:85:dc:dd:af:d3:98:c0:ad:2b:86:0b:69:02:7e:ce:
         3f:cf:e4:a1:cb:3e:65:0b:6d:6a:2e:c9:0e:43:22:d5:2a:a9:
         83:45:f1:49:97:13:62:77:ea:49:b9:d8:ad:35:5c:d9:5d:02:
         23:cd:b9:0a:6a:63:14:81:4c:f8:d0:b0:20:53:aa:a2:31:ff:
         2c:20:94:70:96:31:04:40:92:83:34:bc:9d:84:69:8e:52:b3:
         93:6d:7e:8e:fc:3a:b3:41:3d:88:d6:39:c9:f9:41:bd:bf:be:
         31:b4:17:d9:7e:ec:5b:de:f7:c1:f2:dd:6a:b6:05:51:fd:90:
         ff:ce:3c:ad:b5:56:40:d2:1e:20:1f:f8:48:6d:f6:0f:44:10:
         9e:56:b2:31:3f:c9:e9:77:c7:95:00:0d:b9:4b:03:55:0b:c0:
         81:6a:81:53:70:a3:51:17:88:06:72:50:fe:7e:6d:91:cb:2a:
         7a:54:ae:30:2f:85:46:5e:3b:05:8e:0c:36:38:e1:be:a5:99:
         e1:99:a2:de:ce:a7:b4:0e:75:ce:65:1d:e1:09:ee:c8:35:36:
         2d:a7:91:e7:e5:6e:e1:50:3c:96:66:86:ae:44:60:c0:cf:48:
         79:90:81:26:94:53:68:68:fd:f5:1d:39:2b:d8:c5:4d:59:29:
         8a:5c:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 17:41:54 2025 by rpki-client