Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          rFuf+CODggmbM1C8SkrA8Oj+zQHFyO70Vd65jlGXyoo=
Subject key identifier:   64:9E:4F:06:4B:94:DC:91:8E:38:C4:E6:41:84:FD:88:56:9C:C6:87
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       042D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          0429
Signing time:             Thu 21 Nov 2024 01:45:46 +0000
Manifest this update:     Thu 21 Nov 2024 01:45:45 +0000
Manifest next update:     Sat 23 Nov 2024 01:45:45 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: P4uI76UTaA3UM3PQwe5zSSUXIU2Ie7hmFLBCWoknG/M=)
                          2: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          3: 01CC6C947E8D11EC89A79C885A40D577.roa (hash: qd/8XDFff1CiSxAQk1vmUsyny6ywpT4UycAJmKGe26U=)
                          4: D88002927E8C11EC95A915885A40D577.roa (hash: zp+bksguNWi/6Gwbfy/elTDlK43kW6UD+PYcX23ze0Y=)
                          5: 675DA8B27E8211ECAB19A1E75A40D577.roa (hash: TlKHAqm5F0asDSkR7ApdBCSJn77368RAQ3PQ3KzHit4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1069 (0x42d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Nov 21 01:45:45 2024 GMT
            Not After : Nov 23 01:45:45 2024 GMT
        Subject: CN=673e90ca-8606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:60:ab:ea:71:54:16:6d:df:f2:38:de:5c:ec:
                    04:5a:39:f2:cb:74:70:39:b4:bf:ed:c9:4c:c8:ee:
                    1c:c1:66:89:ae:f7:55:c4:e6:d3:5e:6a:49:b0:87:
                    15:68:90:cf:ee:84:46:4b:03:01:98:ac:bd:9b:8b:
                    e6:86:84:e2:ac:81:02:c9:65:85:00:50:d1:1f:c3:
                    07:84:75:2f:34:c4:af:04:6a:f8:47:d1:a7:8c:08:
                    e5:e8:aa:44:0c:11:14:67:12:ce:e8:d6:9e:8f:85:
                    52:b5:07:48:b7:bd:fc:b2:a2:84:60:fa:08:8f:d4:
                    4a:c2:91:5a:bf:35:c3:80:f8:20:0a:ed:8e:2b:c5:
                    fd:02:b6:22:78:62:bd:53:1f:e2:37:6d:ac:bc:80:
                    a0:80:ce:fe:80:37:fe:fc:d2:55:23:56:18:2e:98:
                    5d:94:a1:68:f8:d1:64:eb:87:d1:08:f2:f5:b0:a2:
                    f9:6c:18:04:bf:76:b2:4b:52:fa:e1:a0:f8:18:25:
                    fd:12:6d:4d:86:1b:97:a9:8e:f0:46:86:1a:d8:8c:
                    82:a9:85:6b:ef:04:01:5a:95:fb:62:6f:bf:a1:1f:
                    63:17:22:e1:6e:61:ee:39:21:f2:35:f3:f2:28:52:
                    fa:77:04:ca:96:5b:3e:df:28:9d:e6:f3:2b:6d:ed:
                    ae:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9E:4F:06:4B:94:DC:91:8E:38:C4:E6:41:84:FD:88:56:9C:C6:87
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:03:14:2d:f0:66:cf:54:df:0d:db:5c:65:30:36:92:31:72:
         31:73:39:9b:05:ac:f9:bd:7b:60:5f:bd:b7:c6:76:27:80:21:
         6c:4e:6a:ed:4e:c0:41:d2:33:6f:b1:87:e0:88:07:ac:c8:80:
         02:1b:85:33:37:59:51:92:b3:5c:e5:c3:d0:66:85:b1:c1:17:
         5c:c1:cd:25:d1:a3:6b:77:c4:5a:34:1d:71:e2:71:67:92:21:
         e0:51:8f:52:87:ce:aa:73:30:f4:49:48:39:8d:f1:34:ff:52:
         53:bb:7d:e7:a8:ba:4f:2a:06:27:b5:ec:69:94:a7:32:00:8c:
         d3:ca:e0:5b:63:67:d2:92:33:e6:6c:8d:df:44:88:d8:f7:5e:
         16:f5:99:25:eb:73:d8:b8:3a:7d:54:4c:dd:0c:7d:14:29:11:
         f3:57:d3:ec:a1:4c:6a:f3:bf:2f:13:02:fd:5e:ec:dd:1d:12:
         af:99:01:67:bc:8a:ed:ca:06:b0:67:32:a9:e0:04:99:55:1c:
         77:85:7f:85:81:1f:75:15:77:49:fb:04:85:ee:16:b4:91:c7:
         56:ac:58:08:f5:88:97:b1:48:00:a3:50:f1:6a:67:5b:19:88:
         5b:a3:00:a1:d3:92:a0:7b:e6:98:20:27:49:69:13:51:ac:3e:
         53:c9:6f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:19:41 2024 by rpki-client on console-ams.rpki-client.org