Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
File:                     kiiCgOPYgt7EFfWIHAFch2WdaEo.mft (raw, json)
Hash identifier:          uaRubIXVq8nJ+1CmQRIBmweZQlpvKSrDuF0vuntes+E=
Subject key identifier:   AE:D4:3E:60:1D:A7:A7:DB:8A:5F:EE:D1:B5:76:89:15:BD:89:BF:0C
Authority key identifier: 92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A
Certificate issuer:       /CN=F365F7E8AR/serialNumber=92288280E3D882DEC415F5881C015C87659D684A
Certificate serial:       0222
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
Manifest number:          0221
Signing time:             Sat 17 May 2025 04:12:12 +0000
Manifest this update:     Sat 17 May 2025 04:12:11 +0000
Manifest next update:     Mon 19 May 2025 04:12:11 +0000
Files and hashes:         1: kiiCgOPYgt7EFfWIHAFch2WdaEo.crl (hash: rs6LNWze3lcJbZnsCvq11FT4F18LYY37+D30MEyExig=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                          rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AR, serialNumber=92288280E3D882DEC415F5881C015C87659D684A
        Validity
            Not Before: May 17 04:12:11 2025 GMT
            Not After : May 19 04:12:11 2025 GMT
        Subject: CN=68280c9c-763a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:c3:0d:4a:96:48:ff:00:91:61:6c:46:d6:
                    62:75:7e:9a:bd:57:8f:b2:b1:79:0b:9f:83:d7:2a:
                    46:b4:29:9d:98:5c:17:fe:8c:19:2e:5f:fa:7b:2a:
                    bb:22:98:a8:cf:43:05:0d:0d:89:a9:49:53:92:3a:
                    2d:f0:58:e1:f1:18:d1:de:56:85:5d:3a:e3:ae:db:
                    b5:e6:d9:6f:26:0d:6e:6a:13:74:10:06:c8:f6:33:
                    f3:41:c6:a8:14:9f:aa:7d:0f:fe:5a:56:9d:b4:56:
                    50:fa:c5:55:c4:23:1f:3c:fa:ea:e2:22:4a:ee:1b:
                    b4:4f:5a:b2:ce:2e:8f:60:a9:bb:75:b6:55:71:57:
                    97:da:e9:f0:d4:92:f0:1c:4a:a6:75:06:72:a7:ee:
                    92:a2:2d:92:be:51:e7:8b:d8:11:f8:0d:24:92:4f:
                    f3:b3:f4:24:54:12:b5:fb:27:31:25:77:51:7c:21:
                    7e:ca:78:1b:12:f5:fa:e7:0c:d7:2c:2f:05:dd:c2:
                    2f:06:4b:84:8e:78:aa:9a:6e:a1:61:ab:0c:b5:2b:
                    85:8f:7f:77:dc:5f:ff:51:b8:fa:0a:c9:c4:c6:50:
                    d5:23:07:4a:f2:e1:22:20:20:03:85:1d:51:82:fb:
                    11:58:8c:57:a1:4a:42:01:ca:e9:b2:14:ac:b5:56:
                    d8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D4:3E:60:1D:A7:A7:DB:8A:5F:EE:D1:B5:76:89:15:BD:89:BF:0C
            X509v3 Authority Key Identifier:
                keyid:92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:49:e6:2f:01:e4:72:7f:87:35:c7:b3:f2:2a:c0:ee:e9:08:
         2b:5c:9c:d7:58:37:c9:6f:c8:11:65:1b:0b:a7:9b:48:5d:a5:
         bc:cc:f7:6c:f5:90:18:59:22:27:01:a9:60:71:28:0e:eb:6d:
         86:9e:de:f6:30:c2:67:e1:bc:31:47:3a:16:d8:9a:03:63:4e:
         78:43:c8:cf:ad:a8:27:97:22:fa:7c:62:45:30:e7:a7:e6:e8:
         71:8d:97:6e:1b:e7:83:18:58:44:ec:9f:a3:3e:4e:0d:be:d8:
         b3:35:d5:e4:62:16:e3:d7:45:fd:68:73:8d:85:f8:5a:2f:b3:
         aa:f1:bd:7c:58:fb:c6:6b:69:a1:17:af:b4:8c:d3:fd:b9:38:
         0c:49:a7:f9:d4:32:97:28:6e:9f:e4:ea:a7:d5:a4:9d:9e:d4:
         46:05:4f:2e:f6:22:87:3c:cb:4a:9c:e6:a5:6b:72:f2:3a:4b:
         db:9f:02:ef:00:b3:56:8d:5a:ea:ee:54:f4:80:eb:62:30:a9:
         7a:36:16:9d:3f:b2:4b:8c:b9:c1:37:ec:76:02:6c:2e:d4:78:
         25:92:f4:e5:25:d7:c9:72:4d:f6:ea:22:de:71:da:c9:3d:7b:
         69:e5:0e:8e:30:c8:62:6e:bf:29:10:7b:c2:b6:7d:04:f7:b6:
         a5:f2:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:30:50 2025 by rpki-client