Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
File:                     kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft (raw, json)
Hash identifier:          aL1aEkIOFns1nYCb2Gr3uHd9UWqJ5ONDBE8Kqp3fQ3Q=
Subject key identifier:   ED:5D:AE:44:35:6F:68:0E:99:AE:F6:EE:E0:7F:A4:AA:5B:3E:25:58
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Certificate issuer:       /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial:       01AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
Manifest number:          01A1
Signing time:             Mon 30 Jun 2025 04:38:28 +0000
Manifest this update:     Mon 30 Jun 2025 04:38:28 +0000
Manifest next update:     Wed 02 Jul 2025 04:38:28 +0000
Files and hashes:         1: kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl (hash: 8g+nsJVEnZYjlqPFCF0a0BbfQtWffHgv0J9jg3pGqHQ=)
                          2: 12F98C3A322C11F09C0E00A8DAE4EC9C.roa (hash: 3/y2xPCMLAqnZ9fL5r4SiXDKczBJPyz466opmOdw+x8=)
                          3: AA49DBAA0BBA11F0ABCF1C53762E951A.roa (hash: 1gTiKBvUuN5Hp+vmaDEDs42+vihpN5KZK723GLEruGs=)
                          4: C21173B24F4811EF8A277884762E951A.roa (hash: Af8VqHnpag7lv/aOf7jeqaTrvvKqqPvGk8sXdY9C8oE=)
                          5: 2BFA32F04F4911EF85B98B88762E951A.roa (hash: VLnmys2y2qLTP9i5IM1gmNfB2WyHqNq5FeIYAdMqXMg=)
                          6: 8F09B9704F4811EF95C0F883762E951A.roa (hash: Jb7IC1uL5aUvVn+T0mFpr5lxOWcWzHI+l9IojCLU5sE=)
                          7: 4691B7064F4811EFB5EC1580762E951A.roa (hash: Y7dEtQLSXLs6SEUJz5C6Rgx6jukPXe2EL/tguL6OuEc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 00:06:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
        Validity
            Not Before: Jun 30 04:38:28 2025 GMT
            Not After : Jul  2 04:38:28 2025 GMT
        Subject: CN=686214c4-c43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5d:43:83:99:65:e9:69:c3:c3:e3:15:27:2b:
                    75:81:be:14:bf:39:58:9a:61:30:46:50:3e:90:49:
                    7f:3b:7c:6c:f7:26:8c:e1:b4:b1:a6:a8:66:ea:53:
                    fe:78:bf:df:ac:d4:9f:ed:3f:75:3e:78:c3:6c:2f:
                    d4:a0:10:c6:ca:c0:6a:75:da:95:d6:07:7c:0b:05:
                    7c:21:7c:d1:3c:7a:13:22:0e:bc:59:e9:5d:46:a2:
                    d4:e2:31:02:7d:80:80:84:45:7a:9f:e6:b5:37:81:
                    57:9c:53:3c:c6:21:86:09:04:7f:cb:e0:4b:64:80:
                    8e:bf:22:1f:01:b1:4e:27:75:00:3f:b5:65:77:fb:
                    be:ac:dc:6a:fd:0b:32:c0:27:fd:5d:37:2b:9a:83:
                    18:7f:38:6b:cb:22:b1:b9:1c:45:81:d4:ce:fc:f8:
                    59:b1:e2:dc:0d:71:58:f4:69:97:44:3d:3d:f4:5c:
                    ca:f5:3a:d0:61:b0:30:2f:70:ba:de:d2:ea:dd:6d:
                    ad:93:e1:63:4c:2c:04:85:66:bb:ca:ff:a8:7a:84:
                    1e:c8:05:1f:4a:9f:50:a0:9c:7e:d6:e1:70:da:9c:
                    f8:4b:4d:ad:65:b1:1f:87:99:55:0f:84:f6:62:d7:
                    60:e0:34:02:b1:ca:59:3b:b7:42:20:a2:5a:53:0d:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5D:AE:44:35:6F:68:0E:99:AE:F6:EE:E0:7F:A4:AA:5B:3E:25:58
            X509v3 Authority Key Identifier:
                keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:ce:b2:97:cb:a2:59:6a:00:a8:cb:f7:96:60:20:b7:b7:
         ef:4b:0b:a4:8c:2d:5b:9b:e0:8e:85:43:29:ad:71:5d:ac:41:
         2f:84:20:d5:64:fc:b7:d3:4f:13:80:f7:b7:f1:e8:60:4d:bf:
         51:d9:0a:b8:74:5a:26:98:f7:3c:c2:b4:05:f0:7d:90:bc:c7:
         02:6a:df:68:f6:e2:67:d7:8a:df:65:a3:71:1d:f4:7e:37:eb:
         2b:ce:eb:dc:99:40:9f:25:76:94:0e:53:57:71:18:b7:81:cc:
         cc:a8:77:d9:73:16:03:96:a8:d1:a3:d2:77:35:35:72:51:a6:
         86:42:18:e7:bf:5d:a5:7c:09:c1:dd:0d:0d:56:b5:cd:17:51:
         0b:8d:d3:eb:c8:1f:85:bb:01:51:8c:e7:4e:cd:3c:eb:85:7d:
         43:b1:37:29:b9:0d:40:e8:32:fb:97:72:da:50:ef:11:d2:47:
         3a:63:20:ea:f2:3c:31:ab:c2:3f:d8:47:7a:ab:69:73:be:12:
         6f:a0:73:c8:78:ab:68:b8:7b:c9:cb:e3:a0:eb:5a:11:ac:f1:
         c5:2a:6a:16:ff:6f:33:b1:fa:ed:c7:c9:77:09:c6:d7:57:13:
         3f:ed:14:61:57:47:7a:9a:ea:61:fa:0e:85:28:c3:69:a8:8b:
         52:c6:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:52:33 2025 by rpki-client