Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
File:                     KSWEoez-KvMJMi1y5i2NXGpe968.mft (raw, json)
Hash identifier:          560dqmJOsOVUiQTLZU1vhG4CnPDL+RvLBSX+G0H05s4=
Subject key identifier:   54:26:B7:32:84:AB:E0:15:64:AF:41:CE:79:14:91:9F:57:CE:51:51
Authority key identifier: 29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF
Certificate issuer:       /CN=F364791EAF/serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
Certificate serial:       02AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
Manifest number:          02A9
Signing time:             Tue 13 May 2025 03:58:27 +0000
Manifest this update:     Tue 13 May 2025 03:58:26 +0000
Manifest next update:     Thu 15 May 2025 03:58:26 +0000
Files and hashes:         1: KSWEoez-KvMJMi1y5i2NXGpe968.crl (hash: aeaIptOL+VxPrlXirRXzHjdrWXjD6mRNTq4xJhqoOKs=)
                          2: 9DC8C2C82CAE11F085B92DEADAE4EC9C.roa (hash: s4BJx/7blgbPVpMP6/xtoHDTm3C4tHe27u7Cb4Hry2k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 May 2025 03:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364791EAF, serialNumber=292584A1ECFE2AF309322D72E62D8D5C6A5EF7AF
        Validity
            Not Before: May 13 03:58:26 2025 GMT
            Not After : May 15 03:58:26 2025 GMT
        Subject: CN=6822c363-ce3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:da:b2:29:f4:2b:ca:08:6a:7c:ca:7f:70:
                    80:12:cd:23:4a:65:14:ad:e8:c9:ca:4c:d6:41:9a:
                    02:53:6b:d7:6e:7e:8b:91:ce:4d:7c:6d:f3:70:08:
                    1b:64:70:cd:95:51:b9:e1:db:da:35:72:e4:b1:63:
                    8b:e1:61:03:f8:1d:7a:1a:2a:ab:1c:6b:23:38:a4:
                    c8:a7:9f:88:1f:55:8d:1b:ad:43:e7:98:f0:04:20:
                    f8:b5:78:77:15:0f:6e:b5:d5:59:a7:5d:da:d4:80:
                    df:7b:e3:0f:74:41:31:63:9a:3f:2e:7c:76:9e:89:
                    e5:c4:e8:35:05:e1:87:c6:48:e2:a1:a0:ee:f7:c2:
                    ea:b0:a5:36:8c:0b:d2:bc:b7:d4:97:e6:6d:e9:23:
                    b7:5e:7c:b5:1f:b1:0e:1d:5d:d1:4d:cd:94:34:02:
                    e7:5d:c6:3b:18:63:72:5c:3f:07:7b:60:9d:9c:88:
                    08:c8:0a:f8:40:c9:2d:9d:c7:50:bf:65:e0:eb:04:
                    45:24:86:13:7e:14:43:09:9b:5f:0f:9a:a5:af:2b:
                    e8:f8:92:84:c3:b9:bf:b6:89:88:01:2c:2e:51:08:
                    27:40:38:ca:c0:15:d3:a4:81:30:bf:97:03:c3:34:
                    93:94:b0:9f:e6:0d:b4:e2:21:8f:bd:2c:70:cb:d7:
                    93:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:26:B7:32:84:AB:E0:15:64:AF:41:CE:79:14:91:9F:57:CE:51:51
            X509v3 Authority Key Identifier:
                keyid:29:25:84:A1:EC:FE:2A:F3:09:32:2D:72:E6:2D:8D:5C:6A:5E:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KSWEoez-KvMJMi1y5i2NXGpe968.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364791E/7EC3F6362F8511EEA83976724AD9E6FC/KSWEoez-KvMJMi1y5i2NXGpe968.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1e:35:85:3b:cf:3d:fd:4b:9d:1d:03:7f:94:44:74:eb:60:
         13:77:9f:1f:6c:19:fd:26:54:2f:ff:c8:5d:01:39:94:45:90:
         00:10:3c:da:dd:57:e2:b2:a5:8b:a8:cf:e4:93:6c:e5:e6:e3:
         ed:a6:54:1c:55:d8:32:3a:70:f6:c9:f8:6d:b3:2d:0a:2e:0f:
         12:6e:4f:91:df:cf:6d:90:17:c7:68:32:26:55:57:20:e8:61:
         b1:e4:30:5d:37:be:8f:9e:01:93:c9:fc:93:1c:62:8e:55:8b:
         91:bb:8f:7c:1d:e1:0f:2e:a1:1e:59:d4:ea:e7:54:40:06:de:
         d7:95:36:65:0f:37:37:88:d8:8c:d4:ea:d1:0d:dd:b6:f0:fe:
         8e:78:b2:60:93:13:34:87:02:04:5e:35:8e:d7:ba:a9:a0:f4:
         87:0d:57:ce:fd:cd:9b:a8:1b:93:18:a0:35:d5:1f:18:46:0c:
         c7:3a:05:83:3a:3d:a1:82:c1:20:2f:94:34:d0:30:cf:37:f2:
         af:b2:a5:a2:49:05:9c:99:e5:dc:36:4a:ce:2e:7d:be:08:4d:
         04:5e:46:a2:f4:9f:9c:ba:06:79:92:ba:2f:33:c8:95:aa:bd:
         e6:25:51:4b:c1:d9:70:8e:eb:10:af:9b:c7:9f:34:81:1f:7e:
         86:7f:ce:cb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDc5MUVBRjExMC8GA1UEBRMoMjkyNTg0QTFFQ0ZFMkFGMzA5MzIyRDcyRTYyRDhE
NUM2QTVFRjdBRjAeFw0yNTA1MTMwMzU4MjZaFw0yNTA1MTUwMzU4MjZaMBgxFjAU
BgNVBAMTDTY4MjJjMzYzLWNlM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBUdqyKfQryghqfMp/cIASzSNKZRSt6MnKTNZBmgJTa9dufouRzk18bfNw
CBtkcM2VUbnh29o1cuSxY4vhYQP4HXoaKqscayM4pMinn4gfVY0brUPnmPAEIPi1
eHcVD2611VmnXdrUgN974w90QTFjmj8ufHaeieXE6DUF4YfGSOKhoO73wuqwpTaM
C9K8t9SX5m3pI7defLUfsQ4dXdFNzZQ0AuddxjsYY3JcPwd7YJ2ciAjICvhAyS2d
x1C/ZeDrBEUkhhN+FEMJm18PmqWvK+j4koTDub+2iYgBLC5RCCdAOMrAFdOkgTC/
lwPDNJOUsJ/mDbTiIY+9LHDL15NVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVCa3
MoSr4BVkr0HOeRSRn1fOUVEwHwYDVR0jBBgwFoAUKSWEoez+KvMJMi1y5i2NXGpe
968wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3OTFFLzdFQzNGNjM2MkY4NTExRUVBODM5NzY3MjRBRDlFNkZDL0tTV0Vv
ZXotS3ZNSk1pMXk1aTJOWEdwZTk2OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tTV0VvZXotS3ZNSk1pMXk1aTJOWEdwZTk2OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDc5MUUvN0VDM0Y2MzYyRjg1MTFFRUE4Mzk3NjcyNEFE
OUU2RkMvS1NXRW9lei1Ldk1KTWkxeTVpMk5YR3BlOTY4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYHjWFO889/UudHQN/lER062ATd58f
bBn9JlQv/8hdATmURZAAEDza3VfisqWLqM/kk2zl5uPtplQcVdgyOnD2yfhtsy0K
Lg8Sbk+R389tkBfHaDImVVcg6GGx5DBdN76PngGTyfyTHGKOVYuRu498HeEPLqEe
WdTq51RABt7XlTZlDzc3iNiM1OrRDd228P6OeLJgkxM0hwIEXjWO17qpoPSHDVfO
/c2bqBuTGKA11R8YRgzHOgWDOj2hgsEgL5Q00DDPN/KvsqWiSQWcmeXcNkrOLn2+
CE0EXkai9J+cugZ5krovM8iVqr3mJVFLwdlwjusQr5vHnzSBH36Gf87L
-----END CERTIFICATE-----
Generated at Wed May 14 00:17:11 2025 by rpki-client