Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
File:                     kiiCgOPYgt7EFfWIHAFch2WdaEo.mft (raw, json)
Hash identifier:          di6rXVqF9VSmxOI++68VCWQfJmqtn8Ot/S7mPfCcY7c=
Subject key identifier:   55:C0:5C:74:F9:36:D5:4F:66:44:69:90:26:B1:F3:C1:1F:E3:1E:EC
Authority key identifier: 92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A
Certificate issuer:       /CN=F365F7E8AR/serialNumber=92288280E3D882DEC415F5881C015C87659D684A
Certificate serial:       020C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
Manifest number:          020B
Signing time:             Fri 25 Apr 2025 04:11:20 +0000
Manifest this update:     Fri 25 Apr 2025 04:11:19 +0000
Manifest next update:     Sun 27 Apr 2025 04:11:19 +0000
Files and hashes:         1: kiiCgOPYgt7EFfWIHAFch2WdaEo.crl (hash: aGcGsxp61Lh3uQoziRy4ZRUmriyY+5VEqeUd/aAwz7U=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                          rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AR, serialNumber=92288280E3D882DEC415F5881C015C87659D684A
        Validity
            Not Before: Apr 25 04:11:19 2025 GMT
            Not After : Apr 27 04:11:19 2025 GMT
        Subject: CN=680b0b68-2182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:55:f4:9c:d1:e9:36:ff:ad:42:6c:3c:d4:66:
                    f7:8e:0a:9e:25:fb:71:15:f5:13:8b:57:8d:03:ae:
                    83:ad:48:f8:97:d8:05:6d:ef:dd:f0:1f:25:17:72:
                    49:fa:08:ad:51:2e:b6:5e:14:a4:a2:e4:d2:4a:50:
                    a0:fc:09:e4:1f:a7:52:ca:d7:61:08:2a:ec:0f:12:
                    5c:0e:be:45:8c:83:04:0e:f9:58:9c:65:07:68:16:
                    0d:36:17:7a:ae:75:38:84:63:52:1d:71:66:0f:3f:
                    34:86:02:f4:93:d5:5b:7c:ad:4e:e7:d9:c9:b0:13:
                    ea:2c:b2:10:ee:b5:7b:24:f4:6b:5c:5f:c7:e3:bd:
                    67:ce:a9:82:e6:ac:f0:b1:ce:55:8d:7e:34:69:c7:
                    76:4e:20:32:a6:7d:91:70:bd:28:72:ee:f6:8e:b9:
                    51:98:db:eb:69:d9:4b:95:75:5d:20:da:21:2c:25:
                    4f:ec:3f:8b:30:3b:cc:f9:d3:06:f0:42:96:6d:2d:
                    e0:08:0e:1d:20:0d:3f:47:b7:ef:4a:5c:74:66:14:
                    87:6d:67:cb:13:eb:71:71:ce:b2:8d:32:3b:79:33:
                    28:2b:d8:37:16:df:bc:ec:54:eb:9c:7c:2c:10:77:
                    a0:d2:43:df:f5:b8:e2:40:ea:8a:3f:bd:2d:31:d9:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C0:5C:74:F9:36:D5:4F:66:44:69:90:26:B1:F3:C1:1F:E3:1E:EC
            X509v3 Authority Key Identifier:
                keyid:92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:35:f7:ab:62:6d:63:43:a8:cd:22:26:c4:1f:c1:83:d7:34:
         b9:90:55:62:37:be:32:3e:a9:d3:9c:ea:b9:19:ee:a2:4e:1b:
         6e:2a:c0:6b:46:51:25:ec:69:86:3d:8e:26:25:13:80:9b:87:
         52:bc:e3:90:85:7b:72:b8:e8:c8:16:23:be:3e:c3:3e:32:39:
         f9:2d:86:70:dc:37:e3:0d:d9:7a:ec:4e:92:3b:44:2d:e5:34:
         80:e5:74:20:69:30:fd:4a:b0:db:44:b1:93:26:fb:a7:fd:28:
         1a:3e:99:8c:ae:d1:31:83:6b:9e:05:0b:9c:41:7f:b6:cc:8b:
         bc:62:1d:ca:d0:9e:f0:b2:d5:46:73:ef:c5:84:eb:22:44:2a:
         98:38:f9:95:3e:50:1a:52:8c:17:1c:57:53:64:98:9c:84:19:
         56:d1:df:7e:22:76:bf:00:ed:61:0e:cb:f2:5b:a5:b0:69:82:
         cb:d5:a0:a3:c1:01:a1:1f:fe:4e:52:aa:d4:fa:a6:98:df:53:
         54:74:3a:e1:d9:91:ae:e3:81:e6:6e:90:16:64:30:38:ea:60:
         ae:6b:ba:de:c2:6e:2c:c9:37:01:e5:cf:27:64:a0:93:c5:83:
         32:d1:84:57:67:91:6d:98:bf:23:3e:77:7e:f4:00:76:58:e7:
         c9:ff:0a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:09 2025 by rpki-client on console.sobornost.net