Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          MkJFUgN5IBSXqko/xJSqCZkBCm6gBRuKAJwGMmg0+q4=
Subject key identifier:   69:90:15:CF:70:10:D8:A5:20:AD:02:FD:61:8A:57:D8:B5:57:2B:14
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       04B9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          04B5
Signing time:             Sat 05 Apr 2025 01:57:12 +0000
Manifest this update:     Sat 05 Apr 2025 01:57:12 +0000
Manifest next update:     Mon 07 Apr 2025 01:57:12 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: ZxZWwEvNfqBxQHzEkZfn77Sx0ZerXX6ALu3S3xapS0U=)
                          2: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          3: 01CC6C947E8D11EC89A79C885A40D577.roa (hash: qd/8XDFff1CiSxAQk1vmUsyny6ywpT4UycAJmKGe26U=)
                          4: D88002927E8C11EC95A915885A40D577.roa (hash: zp+bksguNWi/6Gwbfy/elTDlK43kW6UD+PYcX23ze0Y=)
                          5: 675DA8B27E8211ECAB19A1E75A40D577.roa (hash: TlKHAqm5F0asDSkR7ApdBCSJn77368RAQ3PQ3KzHit4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Apr 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1209 (0x4b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR
        Validity
            Not Before: Apr  5 01:57:12 2025 GMT
            Not After : Apr  7 01:57:12 2025 GMT
        Subject: CN=67f08df8-6389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:5e:37:c7:a0:b8:ea:1a:f3:5b:37:14:47:
                    00:bb:76:a3:65:20:7f:00:a2:bd:be:e3:93:73:cb:
                    4f:0c:f2:ee:b4:f3:db:73:8a:d2:0f:20:71:18:8c:
                    de:37:f9:42:cc:c5:43:2c:3f:92:77:5b:b3:a2:4c:
                    42:a3:01:94:90:db:63:da:cb:8e:a7:2f:dc:c3:16:
                    54:2a:42:85:a3:3a:44:ca:96:15:cf:cf:42:c3:b2:
                    14:ea:35:85:02:7c:bb:0e:66:9c:7c:30:e7:81:0c:
                    f0:a2:c9:73:8b:f9:52:62:95:56:9f:34:b0:08:17:
                    99:e6:7f:b3:9b:70:04:38:75:30:34:ab:a9:58:a9:
                    b0:8a:3a:17:72:af:fe:36:5f:0c:0f:e2:ba:e4:30:
                    00:cd:df:7d:b9:94:09:90:33:4c:2e:11:5b:4a:28:
                    e3:2a:bd:c8:2f:60:00:d2:f7:7d:1f:06:20:a5:4c:
                    0a:07:39:2b:b6:f3:34:c6:c6:ff:09:e0:dd:5f:90:
                    6b:09:fb:31:c9:2e:b7:e8:44:30:25:8a:4a:d5:e5:
                    d8:e7:4f:ea:76:0a:6b:b9:98:27:39:99:8b:2b:cc:
                    02:03:bd:67:0c:b1:4e:2b:1c:7b:c3:12:97:97:d6:
                    50:39:22:68:12:66:12:b9:02:f7:7e:7a:0e:91:14:
                    58:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:90:15:CF:70:10:D8:A5:20:AD:02:FD:61:8A:57:D8:B5:57:2B:14
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:38:97:59:01:ca:54:1f:79:01:6a:b5:88:c0:22:ef:80:b7:
         27:36:24:ff:9f:f4:fe:4a:bf:e1:94:b3:88:56:a3:98:e8:f8:
         3d:a7:b9:d8:2c:42:fa:71:64:16:a5:ec:de:c3:f1:01:f8:e4:
         78:9a:51:f1:62:26:c5:90:d1:29:a2:09:ae:ab:c6:9a:d7:a4:
         ca:da:32:2c:d9:e9:37:a9:4d:72:bc:87:a5:99:de:7c:73:7c:
         ab:a0:a0:19:45:a2:1d:6b:d3:89:82:46:f6:0d:31:3c:25:3c:
         37:d5:fd:9f:05:8c:d4:80:a9:7b:30:6d:9e:24:27:db:d6:61:
         32:8d:c5:01:2e:1c:66:d8:bb:e1:19:03:55:2e:8e:47:c1:14:
         a4:c2:01:64:09:0c:1e:75:b8:bf:fb:a2:7a:1e:1c:53:15:b8:
         9d:7f:e3:e0:34:81:1a:be:94:ab:27:e6:79:13:90:dd:6b:b4:
         c1:09:44:8d:2a:06:77:7f:f1:1a:3d:be:f8:2d:05:aa:16:ee:
         8f:c8:51:2f:dd:06:e2:e1:0a:53:af:f5:14:21:6d:91:6d:7f:
         a9:c7:08:e5:4d:08:9d:b6:91:59:ec:c4:7c:84:74:13:1b:81:
         38:15:a4:94:57:e0:03:84:4d:fa:7c:d5:58:ae:bc:b4:87:ee:
         38:1c:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:19 2025 by rpki-client