Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          zL1stM2z6Mx2OX0140LpYeMcSyG7Nn87ZjvVyZHs5yk=
Subject key identifier:   56:CB:48:36:3C:E5:62:FD:4C:C0:B9:F3:75:96:97:3F:FE:EE:8E:73
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       04CF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          04CB
Signing time:             Sat 26 Apr 2025 02:47:41 +0000
Manifest this update:     Sat 26 Apr 2025 02:47:40 +0000
Manifest next update:     Mon 28 Apr 2025 02:47:40 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: kIqcrQhK9E4oiWe06bFzf3OUqgXjSmHZihpvK3Iv9Vg=)
                          2: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          3: 01CC6C947E8D11EC89A79C885A40D577.roa (hash: qd/8XDFff1CiSxAQk1vmUsyny6ywpT4UycAJmKGe26U=)
                          4: D88002927E8C11EC95A915885A40D577.roa (hash: zp+bksguNWi/6Gwbfy/elTDlK43kW6UD+PYcX23ze0Y=)
                          5: 675DA8B27E8211ECAB19A1E75A40D577.roa (hash: TlKHAqm5F0asDSkR7ApdBCSJn77368RAQ3PQ3KzHit4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1231 (0x4cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Apr 26 02:47:40 2025 GMT
            Not After : Apr 28 02:47:40 2025 GMT
        Subject: CN=680c494d-db81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:be:84:1a:b7:36:f7:56:c3:8d:69:be:d0:
                    d8:f2:67:74:5b:3b:62:03:3f:45:2e:ec:2f:fa:9b:
                    41:cf:1d:fa:2e:bd:40:9d:14:57:70:fa:31:c6:07:
                    d5:16:68:4d:ad:c2:35:9a:65:68:8f:d7:77:f5:3e:
                    78:d1:56:29:e9:f4:7b:af:61:c5:9b:eb:fd:dc:74:
                    10:66:99:58:fe:2d:a2:53:26:11:a4:61:ce:f4:1b:
                    63:b5:87:87:56:da:72:3c:e0:1b:d3:d9:c0:a3:e3:
                    12:50:e0:0e:b5:12:71:9c:b7:16:88:45:84:bb:e0:
                    e3:69:0e:fc:1f:84:1d:2b:ca:3f:20:b9:58:07:f1:
                    9b:df:b8:4f:28:88:28:e2:cd:62:45:a3:44:19:ae:
                    3a:dd:a8:46:12:57:df:71:7a:ae:2d:db:be:57:a5:
                    66:cb:e0:5f:9e:ff:48:11:1a:4e:31:c2:31:d4:5f:
                    b8:c9:a9:91:5c:c9:d1:10:b8:0a:92:82:e3:ab:cc:
                    cd:65:41:d1:5b:7d:b4:d5:ec:fc:c1:11:e5:84:83:
                    f3:d7:de:d6:53:2a:29:62:d0:3d:be:32:73:1d:8a:
                    75:53:44:ba:52:a9:f8:19:b8:16:98:54:ef:0d:a8:
                    65:95:2d:4f:33:93:b8:dc:ef:ca:0f:ae:48:55:c7:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CB:48:36:3C:E5:62:FD:4C:C0:B9:F3:75:96:97:3F:FE:EE:8E:73
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:12:74:5e:ab:4c:de:95:da:da:c7:c5:9c:d9:aa:d4:5c:5c:
         1c:30:fd:b7:99:2f:06:00:d2:8a:91:b5:94:ec:3e:f6:20:2b:
         eb:5d:34:8f:72:fc:65:e8:d1:65:af:e1:39:a8:50:1f:94:7e:
         03:7b:c0:85:48:f3:a2:52:3b:f8:9b:e7:1c:ac:e3:fd:21:e0:
         6b:0f:38:0e:47:3f:58:38:60:be:91:a0:2f:41:a8:7c:c9:52:
         ea:f3:23:ac:5d:73:85:72:5b:4c:f2:d8:47:d3:0f:4c:22:b8:
         86:d5:16:dd:59:24:a2:d9:65:83:78:6d:df:79:87:e7:b3:44:
         40:88:6b:b9:6d:8f:83:47:68:d1:fa:98:a0:9f:c0:e6:64:87:
         74:e8:29:91:33:fc:8c:15:0c:cd:d5:1c:0c:dc:0f:e1:b9:96:
         5f:40:1d:8f:76:63:ae:1b:ce:88:f3:60:b0:29:a1:ec:9c:cc:
         a6:61:84:96:c4:40:3e:46:5d:ff:7e:59:5e:24:9c:8d:f5:3e:
         c2:e5:5d:f2:25:f9:b5:c2:e3:36:dd:cc:ab:e0:6a:f5:34:59:
         a1:10:ca:67:e5:07:da:9d:60:58:a9:4c:62:34:f0:cd:aa:34:
         3c:fb:92:7f:f8:eb:df:07:a3:81:b7:95:38:c4:a0:b1:2d:93:
         8f:48:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:17:14 2025 by rpki-client on console.sobornost.net