Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
File:                     KIBrwzr6AQb7b4x0Keq3jBIBolk.mft (raw, json)
Hash identifier:          520yb8p6O7sGuy13xLt/wqrPh2pdrLqPAFYo8uPgPP4=
Subject key identifier:   41:8E:BA:85:83:2F:75:7D:C8:10:C8:6F:84:18:74:CC:41:A8:C7:67
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Certificate issuer:       /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial:       0291
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
Manifest number:          0290
Signing time:             Fri 25 Apr 2025 03:53:01 +0000
Manifest this update:     Fri 25 Apr 2025 03:53:00 +0000
Manifest next update:     Sun 27 Apr 2025 03:53:00 +0000
Files and hashes:         1: KIBrwzr6AQb7b4x0Keq3jBIBolk.crl (hash: KytqKvRem0UaGLOX8+QiVBuY1LDt4k/UH4bwCmtVcrs=)
                          2: 12D945AE311311EEAFAB622D4AD9E6FC.roa (hash: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                          rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E201DAR, serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
        Validity
            Not Before: Apr 25 03:53:00 2025 GMT
            Not After : Apr 27 03:53:00 2025 GMT
        Subject: CN=680b071c-2c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:b3:b1:cc:87:99:e8:8f:a2:2f:7a:2d:f2:
                    1e:63:23:d6:92:2a:3e:dd:55:f1:74:66:02:d9:80:
                    45:82:bb:36:c1:8a:51:3b:5d:66:98:5a:b2:1c:71:
                    9f:50:c7:83:33:b0:7a:0f:a0:e2:a2:b3:b8:a3:ba:
                    63:4a:56:bf:8a:2b:cb:41:eb:34:a1:85:3f:da:26:
                    e8:db:26:56:f1:b4:35:7b:fb:40:fa:2c:77:4f:59:
                    0f:3b:27:19:06:3e:ab:0b:b8:22:ea:9a:43:9c:a8:
                    dd:a8:e3:3d:77:4a:0b:65:34:f0:79:1e:24:ff:ca:
                    4e:77:8f:93:0a:28:46:22:64:d3:14:da:23:26:c1:
                    2e:23:0a:f5:de:b5:6e:49:15:d1:0c:da:87:5b:9c:
                    30:3e:ce:2e:c0:ff:19:c3:e8:02:12:29:a0:a5:60:
                    35:87:02:5d:ad:2b:4e:7b:63:78:6b:2a:f7:3b:86:
                    9e:47:08:4f:e9:89:8e:c9:49:87:6c:5e:1c:dd:1d:
                    40:38:b1:2b:24:35:7b:01:67:e0:99:97:ab:f8:ce:
                    2f:96:7a:01:bf:2f:7d:18:8f:70:2e:01:0a:50:aa:
                    13:b2:27:1d:82:e2:a1:17:1c:38:77:8a:28:69:db:
                    43:46:78:ac:92:cb:15:66:a7:06:46:47:e1:69:1e:
                    50:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8E:BA:85:83:2F:75:7D:C8:10:C8:6F:84:18:74:CC:41:A8:C7:67
            X509v3 Authority Key Identifier:
                keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:52:f7:20:4d:74:e1:a9:24:9f:48:06:bc:62:2e:1d:4f:32:
         4b:b3:76:d2:b8:7c:64:11:20:e9:96:c9:68:82:89:41:4e:2d:
         dc:93:9b:1a:8f:49:33:51:35:40:f4:f2:16:0c:1a:0e:e2:4f:
         95:b7:22:8b:40:8c:01:79:45:bd:c7:f0:8c:bc:12:b0:16:0e:
         ba:f1:24:74:ca:50:e5:15:87:a5:7f:fe:62:f7:3a:7a:10:f0:
         6a:96:d2:c3:3c:88:42:ee:5c:c7:f3:b8:21:af:36:77:5c:9e:
         2a:31:a1:3c:3e:11:f2:70:32:a2:98:a3:14:b7:e5:20:34:07:
         a4:a8:5e:4c:fe:85:c0:6f:64:c3:cb:8c:da:39:9c:86:95:54:
         c3:00:e5:db:83:68:50:4a:1e:68:59:9a:43:c9:e2:66:d7:44:
         f6:9f:77:60:f7:54:d1:9a:0f:91:2c:b3:af:8e:fe:01:6d:9b:
         e6:79:41:5d:1a:65:c3:00:64:3f:6f:f1:8c:4d:fa:2c:10:ae:
         f9:e4:98:04:a2:af:e9:36:a5:1b:dd:b7:c8:a3:5e:9b:27:28:
         0d:6f:ca:ed:dd:09:16:ff:78:3c:79:0f:67:f3:a0:08:1c:d3:
         49:5f:9c:0c:48:ed:1e:6d:bb:ac:ff:27:b8:16:ed:12:cf:8b:
         24:99:e1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:17 2025 by rpki-client on console.sobornost.net