Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
File:                     KIBrwzr6AQb7b4x0Keq3jBIBolk.mft (raw, json)
Hash identifier:          AvQcHkDpS9hlawMQ8dtsDKZZLd1+HXYYD5WAQ3WSSQ0=
Subject key identifier:   FE:92:46:05:46:B2:C0:38:63:D6:B3:E0:02:AC:E8:8F:7D:81:FD:07
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Certificate issuer:       /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial:       029C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
Manifest number:          029B
Signing time:             Tue 06 May 2025 03:54:47 +0000
Manifest this update:     Tue 06 May 2025 03:54:46 +0000
Manifest next update:     Thu 08 May 2025 03:54:46 +0000
Files and hashes:         1: KIBrwzr6AQb7b4x0Keq3jBIBolk.crl (hash: RFlxWCLtLn6icQxyEZQCCqTkIN7ul4mU5D4dDzDjM54=)
                          2: 12D945AE311311EEAFAB622D4AD9E6FC.roa (hash: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                          rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 May 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E201DAR, serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
        Validity
            Not Before: May  6 03:54:46 2025 GMT
            Not After : May  8 03:54:46 2025 GMT
        Subject: CN=68198807-8d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:bb:d4:4b:b1:d8:7f:e3:aa:5c:8d:2c:d8:
                    d3:7c:21:ce:e9:9d:60:30:38:2e:b1:a8:dd:64:f5:
                    05:c6:e0:d8:9a:09:91:10:fb:99:64:c2:92:8d:56:
                    21:a6:c2:03:3e:c0:36:42:17:9e:ea:18:6d:62:29:
                    55:ed:f1:6e:d2:6b:00:1d:46:0d:f3:0a:db:c0:28:
                    a4:62:8c:ee:d0:ba:40:be:99:00:b3:65:0d:f7:bb:
                    24:f8:56:51:c6:46:e5:aa:7e:49:58:63:53:71:ed:
                    e3:c4:57:26:e2:d1:e8:bb:98:4b:36:fd:12:b8:5d:
                    cc:7a:d4:d2:d1:50:b0:f9:25:d1:d3:03:1f:cb:50:
                    49:4b:24:c8:fc:12:b3:50:9b:71:68:00:29:41:fd:
                    c0:2c:71:05:ce:f7:d6:82:c7:1d:8c:72:9a:3b:01:
                    dd:96:93:f8:4d:b9:68:24:27:c3:5c:5e:17:6a:ac:
                    86:f1:9a:e7:14:4b:f5:53:ad:92:bd:60:2d:4c:46:
                    69:71:a7:8c:1e:45:f2:2b:46:bd:e7:da:92:2e:24:
                    de:d9:10:5e:de:90:b2:48:a1:36:1d:27:c2:a3:fa:
                    59:59:dc:14:85:e7:1d:1e:60:b6:56:58:c7:0c:ae:
                    8e:3a:f4:5e:30:c6:8c:b6:4f:27:6f:9b:48:af:d5:
                    c8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:92:46:05:46:B2:C0:38:63:D6:B3:E0:02:AC:E8:8F:7D:81:FD:07
            X509v3 Authority Key Identifier:
                keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:ed:df:07:da:35:b7:f6:08:4f:9a:ce:ac:90:d5:df:8b:
         70:a4:e1:18:72:e4:33:cb:a1:3d:9d:28:54:03:ab:f7:f6:b0:
         b4:87:6d:8c:9e:08:fd:04:bd:fd:72:93:ad:77:f2:64:75:90:
         2d:8d:71:ed:f7:d6:fa:c0:5e:88:93:3b:b0:42:51:25:8f:ea:
         f6:68:4f:17:02:a4:18:8b:6a:67:0f:be:26:77:d6:b6:2b:6e:
         65:df:89:cc:dd:1b:5e:6b:06:5c:ad:72:18:e7:88:98:44:33:
         56:61:94:e9:9e:38:e3:60:95:b7:a0:4e:f2:ba:ed:0e:f4:f7:
         8d:b5:bf:ac:ba:ff:a4:5b:a7:46:48:80:68:61:f2:41:84:e8:
         24:b9:69:8a:5c:2a:e1:37:36:c7:78:6a:3a:6f:30:cc:ef:ef:
         13:19:8e:d4:91:cb:70:e7:e7:72:65:05:62:fa:3f:0d:d9:87:
         f2:fe:21:1b:ce:b3:26:5f:13:51:36:48:38:32:d7:4f:d8:5b:
         1f:11:6d:8f:df:33:60:fe:85:7f:4c:6a:34:b9:77:e9:b8:29:
         93:7b:15:5b:77:7e:bd:ee:cd:f5:0e:e8:b2:cd:b4:f3:9a:39:
         8c:2c:23:d4:7d:4d:65:e6:4e:0f:7b:af:80:12:6d:74:7d:bd:
         b8:39:77:bf
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICApwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTIwMURBUjExMC8GA1UEBRMoMjg4MDZCQzMzQUZBMDEwNkZCNkY4Qzc0MjlFQUI3
OEMxMjAxQTI1OTAeFw0yNTA1MDYwMzU0NDZaFw0yNTA1MDgwMzU0NDZaMBgxFjAU
BgNVBAMTDTY4MTk4ODA3LThkMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDM37vUS7HYf+OqXI0s2NN8Ic7pnWAwOC6xqN1k9QXG4NiaCZEQ+5lkwpKN
ViGmwgM+wDZCF57qGG1iKVXt8W7SawAdRg3zCtvAKKRijO7QukC+mQCzZQ33uyT4
VlHGRuWqfklYY1Nx7ePEVybi0ei7mEs2/RK4Xcx61NLRULD5JdHTAx/LUElLJMj8
ErNQm3FoAClB/cAscQXO99aCxx2Mcpo7Ad2Wk/hNuWgkJ8NcXhdqrIbxmucUS/VT
rZK9YC1MRmlxp4weRfIrRr3n2pIuJN7ZEF7ekLJIoTYdJ8Kj+llZ3BSF5x0eYLZW
WMcMro469F4wxoy2Tydvm0iv1chLAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU/pJG
BUaywDhj1rPgAqzoj32B/QcwHwYDVR0jBBgwFoAUKIBrwzr6AQb7b4x0Keq3jBIB
olkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyMDFEL0FCRkMxNUJFMkZDRDExRUVCQUZFQTA0ODRBRDlFNkZDL0tJQnJ3
enI2QVFiN2I0eDBLZXEzakJJQm9say5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0tJQnJ3enI2QVFiN2I0eDBLZXEzakJJQm9say5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RTIwMUQvQUJGQzE1QkUyRkNEMTFFRUJBRkVBMDQ4NEFEOUU2
RkMvS0lCcnd6cjZBUWI3YjR4MEtlcTNqQklCb2xrLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGyu3fB9o1t/YIT5rOrJDV34twpOEYcuQz
y6E9nShUA6v39rC0h22Mngj9BL39cpOtd/JkdZAtjXHt99b6wF6IkzuwQlElj+r2
aE8XAqQYi2pnD74md9a2K25l34nM3RteawZcrXIY54iYRDNWYZTpnjjjYJW3oE7y
uu0O9PeNtb+suv+kW6dGSIBoYfJBhOgkuWmKXCrhNzbHeGo6bzDM7+8TGY7Ukctw
5+dyZQVi+j8N2Yfy/iEbzrMmXxNRNkg4MtdP2FsfEW2P3zNg/oV/TGo0uXfpuCmT
exVbd3697s31DuiyzbTzmjmMLCPUfU1l5k4Pe6+AEm10fb24OXe/
-----END CERTIFICATE-----
Generated at Tue May 6 12:36:33 2025 by rpki-client