Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
File:                     kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft (raw, json)
Hash identifier:          a2hRjuRqfUFhFAgzCUKkMYycI4VnzZhwYzHI94Wg/OQ=
Subject key identifier:   C1:2F:00:1F:CD:63:E5:60:9C:44:16:66:16:55:D8:50:9E:0E:55:35
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Certificate issuer:       /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial:       0172
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
Manifest number:          0167
Signing time:             Mon 05 May 2025 04:37:43 +0000
Manifest this update:     Mon 05 May 2025 04:37:42 +0000
Manifest next update:     Wed 07 May 2025 04:37:42 +0000
Files and hashes:         1: kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl (hash: iHLu/SU6dc+/6X8O7pwzW82sWThnNcBFGFSfyJ3F1Gg=)
                          2: AA49DBAA0BBA11F0ABCF1C53762E951A.roa (hash: 1gTiKBvUuN5Hp+vmaDEDs42+vihpN5KZK723GLEruGs=)
                          3: C21173B24F4811EF8A277884762E951A.roa (hash: Af8VqHnpag7lv/aOf7jeqaTrvvKqqPvGk8sXdY9C8oE=)
                          4: 2BFA32F04F4911EF85B98B88762E951A.roa (hash: VLnmys2y2qLTP9i5IM1gmNfB2WyHqNq5FeIYAdMqXMg=)
                          5: 8F09B9704F4811EF95C0F883762E951A.roa (hash: Jb7IC1uL5aUvVn+T0mFpr5lxOWcWzHI+l9IojCLU5sE=)
                          6: 4691B7064F4811EFB5EC1580762E951A.roa (hash: Y7dEtQLSXLs6SEUJz5C6Rgx6jukPXe2EL/tguL6OuEc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 May 2025 04:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
        Validity
            Not Before: May  5 04:37:42 2025 GMT
            Not After : May  7 04:37:42 2025 GMT
        Subject: CN=68184097-366b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:ba:d2:74:6f:85:69:51:6b:fd:37:f7:2f:
                    03:d2:d2:35:45:9b:0a:0f:c2:27:48:a8:81:bc:7b:
                    d0:b7:05:19:11:68:35:44:0d:6d:68:fc:e3:42:7c:
                    2c:8a:c8:07:34:da:3d:61:ab:53:2f:ad:cc:73:94:
                    00:d1:f1:90:9a:ee:ff:2b:30:2c:3e:b1:dd:33:27:
                    5e:8b:f9:6c:dd:ae:27:66:85:96:f9:b1:b0:bf:f9:
                    e0:40:ab:2b:28:8b:13:b5:64:8f:f9:6b:22:9c:ef:
                    f2:e4:62:e0:41:d8:de:59:95:10:bb:77:7d:df:c8:
                    16:94:0e:aa:ea:f5:2a:03:aa:9a:20:e6:88:d9:5c:
                    07:f8:44:90:70:cd:83:85:ba:dd:3e:8b:01:98:58:
                    52:25:9a:2d:78:f7:0e:d9:1d:06:07:5b:d2:dc:05:
                    e1:60:e6:7a:73:e9:a5:27:b5:3f:74:46:0f:ef:f0:
                    33:ff:13:10:35:a7:5f:3b:d5:81:05:8f:61:a0:69:
                    81:fe:a3:34:d6:03:c4:69:96:01:78:e7:96:e7:a3:
                    ef:b5:a1:09:2d:f4:8b:5a:1f:38:28:1a:ec:8d:68:
                    90:28:a6:c8:19:a1:7a:41:e0:67:1d:11:bf:fa:89:
                    9c:e5:ef:05:d1:9c:0f:8b:89:7d:ac:2b:3f:49:fd:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2F:00:1F:CD:63:E5:60:9C:44:16:66:16:55:D8:50:9E:0E:55:35
            X509v3 Authority Key Identifier:
                keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:05:c9:1f:6c:58:b7:22:bf:a1:79:08:f5:08:bd:e9:64:d8:
         1a:62:1d:22:3e:2b:fb:d4:11:c0:62:2d:be:67:57:e3:78:f7:
         5c:10:57:b2:56:07:15:17:07:24:89:07:86:d5:75:31:fb:78:
         06:1a:f2:41:fc:10:f5:d4:c3:ad:24:2d:25:3f:17:dc:8c:8c:
         1a:fe:55:b6:32:1e:f1:f0:5a:dc:85:15:02:9b:50:0a:77:db:
         35:63:a4:31:27:0d:ff:58:d5:1d:ad:68:aa:f3:0d:d5:05:75:
         25:e8:0c:df:06:40:65:99:36:05:9f:69:3f:bf:d6:1c:0c:5c:
         20:4e:13:23:a2:1d:2a:49:81:2b:31:ad:fb:5d:30:bf:a9:ff:
         9f:8f:1d:13:04:4a:11:fa:ea:54:26:44:23:e5:02:25:7f:8d:
         7b:9d:4a:5d:11:a6:cc:90:61:5e:8d:50:24:03:ee:2e:4f:57:
         b6:da:9c:d7:69:40:03:37:af:e9:ef:cb:9a:c4:46:2d:16:4f:
         1e:b5:1b:44:30:05:80:17:be:e1:d2:75:01:cc:5c:5a:e9:93:
         ec:3f:32:00:a3:cc:67:28:44:91:7c:f2:ec:31:f5:cc:c4:29:
         49:75:f0:53:21:b0:44:81:5b:90:a2:50:37:c1:4b:fb:24:da:
         ae:57:5e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:57:42 2025 by rpki-client