Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
File:                     kiiCgOPYgt7EFfWIHAFch2WdaEo.mft (raw, json)
Hash identifier:          Mor9PIAU+mwbcw5yDECdbDWCLZGk87j2kQCy3tnAkBM=
Subject key identifier:   26:BA:3F:FC:A5:02:91:45:2E:F5:5A:4D:02:89:31:B8:B9:39:FA:5C
Authority key identifier: 92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A
Certificate issuer:       /CN=F365F7E8AR/serialNumber=92288280E3D882DEC415F5881C015C87659D684A
Certificate serial:       B3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
Manifest number:          B2
Signing time:             Sat 25 May 2024 02:27:58 +0000
Manifest this update:     Sat 25 May 2024 02:27:57 +0000
Manifest next update:     Mon 27 May 2024 02:27:57 +0000
Files and hashes:         1: kiiCgOPYgt7EFfWIHAFch2WdaEo.crl (hash: 4sJ42uJkh9P3NHEyMaymn7Fu/C6NUdoaueWPjkLfXio=)
                          2: 79AD612A96CB11EE98861375D25BE465.roa (hash: pJJwWWZ3eGmNADavfEjqIboJzELGSXs7htQ7g1gn4ko=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                          rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 27 May 2024 00:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AR/serialNumber=92288280E3D882DEC415F5881C015C87659D684A
        Validity
            Not Before: May 25 02:27:57 2024 GMT
            Not After : May 27 02:27:57 2024 GMT
        Subject: CN=66514cae-8d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:4b:26:10:64:d0:70:09:f8:12:35:88:a5:
                    3a:39:fa:ca:0d:0f:03:38:9d:02:3f:67:01:7d:6a:
                    06:33:bb:fe:44:41:fa:4b:dd:d2:97:84:4d:55:2a:
                    e6:16:1f:b3:57:2f:0c:c8:a0:ba:d9:14:a1:79:96:
                    1c:f7:ef:c9:96:20:60:50:e8:41:52:45:31:de:0e:
                    d3:2f:93:39:f7:c2:95:3f:fd:6f:84:00:9d:45:81:
                    e0:c7:0f:7f:5c:1e:09:22:d3:2a:63:8f:8e:d7:70:
                    e1:87:bc:3c:d9:f0:bd:34:0b:8b:0d:1b:9f:12:7e:
                    f0:e5:e2:9f:7d:e7:01:4f:23:19:35:a4:95:07:cd:
                    1a:5c:cf:f2:3e:83:35:a6:f6:39:dc:83:f8:68:97:
                    53:e1:1e:80:f3:1c:51:ee:e2:83:d9:f3:47:0f:cb:
                    83:ce:3b:8c:1c:1b:31:35:4f:e2:6f:b3:ef:76:b5:
                    5b:91:38:07:09:f9:95:ed:5e:f1:0f:0b:06:fd:b6:
                    db:dd:a3:e8:ad:9f:37:44:20:2f:ea:40:fa:83:2c:
                    cf:18:78:b7:1c:c4:b6:75:6b:27:b2:d1:6b:12:fb:
                    f1:33:00:18:43:a1:b0:e9:33:b0:44:f4:77:ec:32:
                    87:e5:88:d7:28:fe:4a:4e:66:5f:8d:04:c9:13:8e:
                    5f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BA:3F:FC:A5:02:91:45:2E:F5:5A:4D:02:89:31:B8:B9:39:FA:5C
            X509v3 Authority Key Identifier:
                keyid:92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:06:9f:bb:eb:fd:66:11:78:cc:2a:27:3e:7d:60:8e:b0:86:
         62:89:fd:81:6b:96:32:d8:7b:e3:bf:42:6a:08:24:d0:db:29:
         6d:2f:db:51:ab:47:c5:8f:fb:ab:f2:1d:76:ff:c2:b6:a9:d7:
         5c:a1:32:f9:96:76:c1:f7:6d:e7:3a:e7:e5:36:af:26:e3:00:
         58:8b:39:76:81:9f:3b:75:89:97:8d:51:4c:b9:ae:ec:05:cb:
         11:7e:12:ef:29:2d:ff:13:78:c6:dc:f5:e7:ba:6c:a6:34:e1:
         8a:f6:cc:15:e4:c8:b7:26:64:97:8b:14:38:20:dd:68:35:a2:
         6a:df:34:9b:3d:99:d5:a7:0c:db:3a:12:9d:44:77:31:63:fe:
         4f:cd:16:91:f7:7f:da:90:89:c4:c0:6f:28:76:94:3f:21:35:
         1c:8a:f4:05:5d:53:94:a9:ab:7b:3b:55:6c:80:63:85:5d:82:
         be:01:9f:bd:1d:28:a5:c3:bb:1d:e0:3d:c2:4e:85:83:d5:5c:
         0e:95:7e:ba:e3:18:47:62:98:3d:b9:8b:ab:b6:61:28:7c:25:
         48:be:f3:17:97:12:13:b7:8b:d4:9b:84:6f:ea:5d:ad:60:8d:
         f0:10:5b:a2:1c:19:6a:17:a4:f2:47:06:d0:a3:23:17:c3:b5:
         50:0c:e8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 03:05:54 2024 by rpki-client on console-fra.rpki-client.org