Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
File:                     kiiCgOPYgt7EFfWIHAFch2WdaEo.mft (raw, json)
Hash identifier:          q6OvXkqSKtoCQhStO2NQqHkmb0RUkkkHgcXWEDEMDUw=
Subject key identifier:   80:B9:83:84:2D:08:51:53:23:6E:0D:02:CE:85:BA:02:D8:38:4A:F3
Authority key identifier: 92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A
Certificate issuer:       /CN=F365F7E8AR/serialNumber=92288280E3D882DEC415F5881C015C87659D684A
Certificate serial:       0237
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
Manifest number:          0236
Signing time:             Sat 07 Jun 2025 04:14:12 +0000
Manifest this update:     Sat 07 Jun 2025 04:14:11 +0000
Manifest next update:     Mon 09 Jun 2025 04:14:11 +0000
Files and hashes:         1: kiiCgOPYgt7EFfWIHAFch2WdaEo.crl (hash: ve6lTiKeQNjXEMhT6Aw6nnmAHVSleBAsWxH2ZjjWeQ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                          rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AR, serialNumber=92288280E3D882DEC415F5881C015C87659D684A
        Validity
            Not Before: Jun  7 04:14:11 2025 GMT
            Not After : Jun  9 04:14:11 2025 GMT
        Subject: CN=6843bc94-643e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:29:00:ad:b7:64:e2:7a:f0:94:35:5e:9d:
                    4f:96:f3:45:0d:11:b8:6e:72:74:58:74:b1:6e:74:
                    34:d7:3f:6c:5a:c8:0b:c4:9a:01:8d:33:7e:2c:43:
                    ae:0b:04:04:43:4e:7f:87:d1:15:81:8d:f0:48:90:
                    aa:63:a3:76:f9:8c:30:c5:ea:d6:af:1b:54:dc:fe:
                    90:58:cd:6b:0e:af:87:35:7d:ae:93:fb:94:dd:9a:
                    1d:0f:52:df:f9:47:f9:0d:28:15:84:9d:a8:49:bf:
                    1b:7d:55:2d:2b:8f:db:74:e9:cd:4c:05:94:76:43:
                    56:f8:87:16:00:a6:e2:a6:1b:c4:00:d5:d6:49:70:
                    66:04:49:5b:24:a8:0d:70:4b:21:35:57:c2:fb:20:
                    3c:3a:ee:cd:45:4d:08:9e:b2:05:69:30:aa:10:0f:
                    2c:6b:0b:bc:fa:e9:83:bd:61:f3:46:a5:e4:98:30:
                    54:10:ec:5a:d9:8b:20:57:65:44:6c:f4:53:57:59:
                    67:9a:9d:f5:90:ec:15:81:80:71:6e:7c:fe:99:22:
                    76:bb:6a:bd:3f:31:c8:4c:b5:3c:e4:58:69:31:53:
                    38:87:ee:07:46:59:73:25:ab:5b:b9:8f:74:6f:90:
                    eb:51:da:34:2d:cc:48:dd:78:e8:4c:11:c4:45:6b:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B9:83:84:2D:08:51:53:23:6E:0D:02:CE:85:BA:02:D8:38:4A:F3
            X509v3 Authority Key Identifier:
                keyid:92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1d:86:1e:81:1b:7f:72:3d:ae:87:f3:c4:bd:c0:2c:b9:2c:
         2a:52:f8:c7:c1:2e:c5:0d:51:a8:e5:33:46:18:2c:2f:4d:8d:
         a9:57:32:28:4f:71:6d:dc:f8:71:11:c4:01:73:c9:91:c6:63:
         a7:8d:6c:31:59:c9:bf:b3:10:1e:76:ef:96:2a:a8:06:c0:d6:
         7d:40:d2:46:89:72:fc:79:76:ca:82:1d:cc:00:33:eb:0e:06:
         42:c0:f1:1c:77:02:49:58:61:05:80:43:0e:6e:fc:46:84:a5:
         13:93:42:e9:8a:57:cf:cd:54:d1:e0:73:98:2c:b4:40:fc:cc:
         6d:9a:84:7a:f9:f7:88:56:2b:76:ca:13:b1:97:76:5e:18:2e:
         66:63:14:47:fb:f3:96:93:09:61:b9:f2:e1:a5:d4:56:36:e6:
         7b:7c:2a:87:fb:56:e2:59:cb:22:bf:fa:1d:60:d2:85:c7:7b:
         c0:84:f9:40:36:2b:89:7e:59:bb:f5:12:e4:30:1d:48:54:8f:
         69:9f:f8:4d:cd:8c:db:bf:66:22:f7:70:c3:f6:d9:da:03:e8:
         25:06:43:21:db:5c:0f:b9:67:11:d1:71:7f:46:8d:3e:70:6c:
         0b:c3:b1:4d:d7:8a:11:cc:1c:ec:2d:3e:54:0a:10:ed:4c:5d:
         23:d6:39:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:22 2025 by rpki-client