Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
File:                     kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft (raw, json)
Hash identifier:          8MOeFU6iCm+NaDs85pvE+5KoK6oRjU4rXfRgyKojm3o=
Subject key identifier:   F4:9A:66:21:6F:5F:49:CB:E3:63:91:8B:E6:A8:C1:DC:66:58:34:C1
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Certificate issuer:       /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial:       0168
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
Manifest number:          015D
Signing time:             Fri 25 Apr 2025 04:33:25 +0000
Manifest this update:     Fri 25 Apr 2025 04:33:24 +0000
Manifest next update:     Sun 27 Apr 2025 04:33:24 +0000
Files and hashes:         1: kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl (hash: O5gOwH9n9+h0x0XFy1uNLQxUDi5eCkpkhsYCpCV2ok4=)
                          2: AA49DBAA0BBA11F0ABCF1C53762E951A.roa (hash: 1gTiKBvUuN5Hp+vmaDEDs42+vihpN5KZK723GLEruGs=)
                          3: C21173B24F4811EF8A277884762E951A.roa (hash: Af8VqHnpag7lv/aOf7jeqaTrvvKqqPvGk8sXdY9C8oE=)
                          4: 2BFA32F04F4911EF85B98B88762E951A.roa (hash: VLnmys2y2qLTP9i5IM1gmNfB2WyHqNq5FeIYAdMqXMg=)
                          5: 8F09B9704F4811EF95C0F883762E951A.roa (hash: Jb7IC1uL5aUvVn+T0mFpr5lxOWcWzHI+l9IojCLU5sE=)
                          6: 4691B7064F4811EFB5EC1580762E951A.roa (hash: Y7dEtQLSXLs6SEUJz5C6Rgx6jukPXe2EL/tguL6OuEc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
        Validity
            Not Before: Apr 25 04:33:24 2025 GMT
            Not After : Apr 27 04:33:24 2025 GMT
        Subject: CN=680b1095-d0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:b4:42:db:d8:f5:9f:d6:03:3c:9a:f3:05:
                    ce:4a:af:9d:51:8b:9a:78:92:7c:db:c1:69:da:eb:
                    f9:b0:25:93:48:0d:e2:83:06:26:90:10:3d:b0:fe:
                    2f:e1:03:ed:f8:4c:57:8b:ec:01:3d:9d:08:f3:66:
                    0b:74:5a:84:cc:4b:39:14:bd:ac:66:6d:89:8f:06:
                    e6:05:f6:a7:ed:c3:8e:36:22:fd:4c:f0:26:ca:58:
                    f3:55:f0:0b:87:5d:c6:95:cf:99:e4:8c:2a:3d:67:
                    39:a0:4a:67:6d:06:2f:22:e1:ee:91:11:80:1f:38:
                    b5:93:50:8b:6b:fa:dc:f3:b6:b3:2b:30:ef:b2:14:
                    bf:99:41:3c:cf:ec:eb:8f:a9:7f:24:c3:9b:79:a9:
                    8c:89:be:c8:03:26:ab:73:e0:8c:a2:b9:4f:03:8c:
                    bf:51:fd:ae:de:99:7b:af:30:5c:2b:d4:4b:38:86:
                    ad:de:35:2b:45:52:e4:93:25:a6:19:52:ef:fa:3f:
                    6e:02:7e:14:16:bf:7c:a8:a6:ba:c6:6b:45:b9:32:
                    a7:f1:9d:78:26:33:e5:f0:29:28:2e:ba:d8:ae:68:
                    c5:c7:31:d6:20:b6:c4:8f:08:65:0c:cb:d0:50:95:
                    1f:a9:67:f6:af:6a:d1:ef:bc:2f:b0:1c:a1:ca:ba:
                    26:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9A:66:21:6F:5F:49:CB:E3:63:91:8B:E6:A8:C1:DC:66:58:34:C1
            X509v3 Authority Key Identifier:
                keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:18:9d:c9:05:e6:10:43:35:a9:2c:12:a6:fe:e8:e7:bf:35:
         01:8b:df:e7:52:9c:af:8b:a8:d9:a0:86:1f:b1:0a:b3:52:9e:
         f2:ae:12:43:c3:0a:a8:e6:30:d1:e3:dd:7e:94:8e:2b:66:cf:
         d1:f0:ed:a9:e4:60:80:b9:c7:b3:e1:e9:b2:98:b4:3a:d3:b3:
         bf:4a:22:96:66:37:b4:3d:0b:b7:d9:43:42:89:64:93:be:60:
         e3:5e:df:39:fb:f0:1c:01:46:2d:d4:20:f3:f1:5b:67:a2:cf:
         aa:11:c7:4e:62:d4:0e:9f:06:0d:33:fd:d7:cf:af:c3:76:0e:
         cc:88:b5:2e:27:08:85:1f:f3:a3:56:da:78:c3:ee:1c:ed:bb:
         96:db:02:ab:c8:9c:02:9d:50:77:61:20:64:9d:54:7c:04:16:
         db:37:00:40:b5:be:f7:11:51:0b:ba:eb:be:1d:3d:3a:b5:47:
         1e:ac:b9:5c:b3:ba:0b:5c:f9:03:2a:d0:52:b8:57:73:1c:64:
         0a:54:70:10:f7:f3:a4:9b:9d:cd:9d:70:38:3d:18:9f:96:bb:
         62:61:73:b7:52:6c:48:a0:07:5f:82:7d:bf:28:2e:7d:1f:7e:
         63:5a:b2:c8:ce:22:74:69:0a:10:32:1a:b4:6f:93:00:40:27:
         d9:f3:62:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:28 2025 by rpki-client on console.sobornost.net