Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
File:                     KyRChIF0qoiURpp3m5_X2klYxmk.mft (raw, json)
Hash identifier:          LtEqjof23sepPH608pv+1qfWwD45qZzDbOB7qZC0B3E=
Subject key identifier:   CE:11:04:B5:61:6A:51:0D:A4:AE:E6:A8:A2:CF:79:DE:28:32:B4:9F
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Certificate issuer:       /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial:       0CCB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
Manifest number:          0CC2
Signing time:             Mon 03 Jun 2024 00:38:36 +0000
Manifest this update:     Mon 03 Jun 2024 00:38:35 +0000
Manifest next update:     Wed 05 Jun 2024 00:38:35 +0000
Files and hashes:         1: KyRChIF0qoiURpp3m5_X2klYxmk.crl (hash: pxNt7/+nvIsPsxTaxPNmuFD6n4jSt0azAHLECNpjl5g=)
                          2: E90F871CA09811ECA7CC64845A40D577.roa (hash: oxWlZcS9cWEi0+CZBGrhmI9nrUQ78IAE+xwjMFu/v9A=)
                          3: 30DA2FD2D99011EBB3AFA075F8AEA228.roa (hash: p31uwZZBrdaLtBzico1EAerpqK+JUtNLbRhjPY74axU=)
                          4: C125AEA2968911ECB8B62F765A40D577.roa (hash: Iv44exOZ2UhalkmALSilO2jVi2bBIIFYg68+4/da9Kc=)
                          5: 93B09E96968911EC8ABA97755A40D577.roa (hash: kxRt6qd6kaByRmRIql5NGWo05VbARfvdU2aJ1JxsCNc=)
                          6: A66C5B60EEFB11EAB67BB760F8AEA228.roa (hash: FhdIMm+EQ8oEL4UIZyKUV2bOPB0gTKOHcKnmpA8WxzA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3275 (0xccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Validity
            Not Before: Jun  3 00:38:35 2024 GMT
            Not After : Jun  5 00:38:35 2024 GMT
        Subject: CN=665d108c-dd16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5c:f6:51:ae:04:ad:20:91:0c:55:e8:a8:a3:
                    d4:d1:05:66:4a:16:59:c6:a4:e9:39:ed:fd:3f:4b:
                    8b:ae:c1:3d:47:ef:6c:32:1d:0b:b2:4e:09:8b:86:
                    3f:9b:6f:94:e5:cd:9e:56:1a:6b:a0:d5:0d:d1:df:
                    79:a5:66:bb:56:7f:41:7a:59:31:40:b9:58:d5:af:
                    d8:a8:04:f2:99:0c:02:d5:48:d5:1e:07:46:b3:d5:
                    08:8a:30:86:b7:b1:3e:37:7a:20:d4:17:5a:1c:17:
                    ac:a2:49:1c:c2:5f:75:b4:1a:7c:ab:30:1f:5c:c4:
                    31:82:b4:21:9e:a5:da:44:81:7a:2c:fa:6c:57:3d:
                    16:7f:5d:39:2e:48:a9:e0:fd:b3:7c:f3:a7:fd:40:
                    0b:fd:4d:58:a2:d4:c0:3b:a6:25:9d:c4:74:18:b1:
                    13:69:d8:55:4c:a0:2f:4b:c4:b8:4a:97:af:18:62:
                    ab:4c:30:45:24:58:4d:f5:01:b6:45:78:71:39:3d:
                    e9:58:6c:98:cf:1f:52:72:2e:78:13:9c:96:b1:d0:
                    44:b4:9a:77:b1:13:2d:c6:8d:2f:f5:e5:df:74:fb:
                    66:b4:a2:8a:f2:6b:6f:bb:c5:c9:c1:e5:a5:e7:40:
                    3a:7b:16:65:04:d0:a6:86:d2:47:46:a8:06:47:ff:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:11:04:B5:61:6A:51:0D:A4:AE:E6:A8:A2:CF:79:DE:28:32:B4:9F
            X509v3 Authority Key Identifier:
                keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:7c:21:a2:f5:4d:f0:ce:77:b5:3d:5c:f5:0a:89:d8:c3:cb:
         9a:0f:66:f3:81:37:95:6f:8c:15:11:40:da:65:21:5a:c7:18:
         be:98:99:9d:bc:c4:00:74:d0:8e:4a:ed:2c:d1:e2:2f:28:75:
         e5:9e:c8:b4:c1:79:e3:28:21:0b:2c:5b:54:5e:71:67:8c:cf:
         40:cc:f6:6b:45:50:c8:be:78:93:6b:1f:84:31:5a:21:00:da:
         11:08:8d:cd:c0:cb:8a:b2:21:5d:44:f3:05:14:fb:88:62:4d:
         d6:4a:a1:06:55:24:5b:85:83:18:23:50:21:8e:7b:35:52:7c:
         b6:8e:66:18:5a:ec:a5:fe:0e:84:c1:7a:e0:00:52:26:05:3d:
         62:1c:72:4d:19:b1:8a:15:f0:63:d9:94:e9:69:a4:67:0e:5f:
         e0:26:30:cd:48:46:a4:21:95:47:b6:b2:6c:11:c7:fa:c0:92:
         89:ed:c8:df:80:e6:b7:b5:04:41:cb:90:2f:4d:95:89:6c:cd:
         24:97:61:5d:9a:55:e2:2f:4e:ff:d0:b9:31:8b:cd:77:4f:0c:
         4d:77:71:75:05:82:b7:db:a2:e6:be:33:ca:ac:a6:fd:77:b4:
         da:e4:fe:95:62:6e:20:34:4b:a3:93:75:ee:8a:13:c4:e0:96:
         f3:d1:a5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:54:29 2024 by rpki-client on console-ams.rpki-client.org