Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
File:                     KyRChIF0qoiURpp3m5_X2klYxmk.mft (raw, json)
Hash identifier:          a2E/XPBrwtTx1O0WuoEYv/pvxl1FiG816OEHpH1RTF8=
Subject key identifier:   71:D7:AE:49:D1:F6:39:67:3F:EE:FB:2C:3F:95:67:C8:E0:A1:99:61
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Certificate issuer:       /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial:       0CAD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
Manifest number:          0CA4
Signing time:             Sat 04 May 2024 00:38:40 +0000
Manifest this update:     Sat 04 May 2024 00:38:39 +0000
Manifest next update:     Mon 06 May 2024 00:38:39 +0000
Files and hashes:         1: KyRChIF0qoiURpp3m5_X2klYxmk.crl (hash: qEkNoknaRVPu05COsnrweuvSno2mO9h5FuFvEsMVeXs=)
                          2: E90F871CA09811ECA7CC64845A40D577.roa (hash: oxWlZcS9cWEi0+CZBGrhmI9nrUQ78IAE+xwjMFu/v9A=)
                          3: 30DA2FD2D99011EBB3AFA075F8AEA228.roa (hash: p31uwZZBrdaLtBzico1EAerpqK+JUtNLbRhjPY74axU=)
                          4: C125AEA2968911ECB8B62F765A40D577.roa (hash: Iv44exOZ2UhalkmALSilO2jVi2bBIIFYg68+4/da9Kc=)
                          5: 93B09E96968911EC8ABA97755A40D577.roa (hash: kxRt6qd6kaByRmRIql5NGWo05VbARfvdU2aJ1JxsCNc=)
                          6: A66C5B60EEFB11EAB67BB760F8AEA228.roa (hash: FhdIMm+EQ8oEL4UIZyKUV2bOPB0gTKOHcKnmpA8WxzA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3245 (0xcad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Validity
            Not Before: May  4 00:38:39 2024 GMT
            Not After : May  6 00:38:39 2024 GMT
        Subject: CN=6635838f-cca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:e4:8b:01:f9:88:3e:bd:e2:b5:2a:52:2b:
                    e4:41:e7:f5:19:f7:94:63:c6:fa:f9:6b:22:79:49:
                    96:85:ad:d2:5e:46:96:73:a1:ec:78:b8:78:f9:0a:
                    98:f5:e2:0f:a8:02:34:ff:5f:94:29:ab:75:d0:26:
                    27:c3:71:57:a9:13:b6:29:7b:c7:01:1f:ef:07:bd:
                    af:4e:cc:7d:25:f0:53:94:26:bc:f5:63:ed:bc:d0:
                    34:a6:bd:17:6e:b8:29:73:c7:67:af:91:06:f4:2d:
                    c2:f1:ba:26:39:da:1d:ef:f8:06:2a:98:fd:7e:70:
                    8f:a2:22:08:c2:d5:d2:ad:e2:1d:0d:cf:22:2b:2f:
                    fb:d5:dd:c0:bb:e9:fb:c4:db:a6:6c:46:b1:d3:24:
                    72:ed:22:cd:f0:25:d2:c5:07:94:9c:16:28:de:1d:
                    32:45:6b:b3:e0:93:92:39:dd:ae:e0:b2:50:8b:e4:
                    17:89:1f:b1:75:b9:29:3a:cb:90:02:b2:18:52:a8:
                    5d:23:4b:7d:b6:98:1a:17:b5:e2:fd:c1:93:e9:ef:
                    6b:49:c7:03:70:66:65:f4:f9:8d:bf:27:85:ec:1a:
                    b1:bf:68:37:d3:15:a3:1b:8d:82:b6:7a:da:d3:6b:
                    71:96:fb:0a:6f:94:42:3e:2b:7a:56:20:12:af:71:
                    bf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D7:AE:49:D1:F6:39:67:3F:EE:FB:2C:3F:95:67:C8:E0:A1:99:61
            X509v3 Authority Key Identifier:
                keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:96:b8:a8:62:c4:0e:a3:a1:8c:88:ab:e9:1d:c5:d4:fe:8a:
         1b:52:0c:88:35:93:0f:26:ab:0a:34:58:34:2a:d4:1d:41:52:
         86:d1:03:cd:49:c8:99:ad:20:68:8f:e0:ec:f5:82:5f:32:2c:
         ff:40:46:a6:5b:1b:56:a8:49:a5:b8:35:dd:60:a3:8e:b2:b7:
         5e:61:a9:dc:12:77:df:73:a1:2f:47:ba:8d:b7:84:34:76:5c:
         98:07:05:05:08:dc:82:be:f0:0b:f3:a6:77:87:eb:4e:31:73:
         13:3d:25:5d:89:3c:94:cb:7e:1f:99:00:a4:ea:65:15:78:bc:
         56:ec:ef:39:55:20:ea:38:98:bd:07:61:ee:2e:12:20:44:f8:
         1f:aa:e5:46:49:c6:5a:6f:83:c4:8b:82:8a:0f:e7:d5:f3:5e:
         91:99:9b:c9:47:a3:ab:21:a2:71:d9:46:6b:3b:3c:cd:54:7a:
         ed:ea:60:d3:09:77:df:1c:86:3e:1c:b7:ca:28:a7:8b:a1:dd:
         3e:81:c3:63:2f:70:6d:b6:f1:f6:b6:d1:9d:7d:d6:6a:b9:3b:
         ca:94:fc:e7:5b:ee:17:51:bd:59:93:57:00:5e:11:41:a8:74:
         33:e8:70:fa:64:6f:db:e8:f8:2c:51:57:c4:3b:82:eb:8e:25:
         ff:02:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:12 2024 by rpki-client on console-fra.rpki-client.org