Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
File:                     Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft (raw, json)
Hash identifier:          qgSUrXw/fINuXJoxfaf8UAbqxtvcsHiOss2IGG67EBY=
Subject key identifier:   4B:88:06:FD:A4:D8:87:46:BF:8D:3D:3D:E2:69:23:CB:A6:3D:AF:E5
Authority key identifier: 2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D
Certificate issuer:       /CN=F369C49AAF/serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
Certificate serial:       0167
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
Manifest number:          0166
Signing time:             Fri 04 Apr 2025 02:57:29 +0000
Manifest this update:     Fri 04 Apr 2025 02:57:29 +0000
Manifest next update:     Sun 06 Apr 2025 02:57:29 +0000
Files and hashes:         1: Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl (hash: 9bHv6aJ7Z0b98OP4QIHqY4Uj4mlmRL7s9w3cYNQyAYU=)
                          2: 3F101946015F11EFB16E3011017001B1.roa (hash: Xh6nt99XUHYlPadPzPRYk3ee0GvJbKhlgYL2g7hGR5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Apr 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C49AAF
        Validity
            Not Before: Apr  4 02:57:29 2025 GMT
            Not After : Apr  6 02:57:29 2025 GMT
        Subject: CN=67ef4a99-7ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:86:b0:ff:fd:69:41:39:53:b9:a7:67:2c:80:
                    a9:69:81:94:04:de:ac:2c:f1:44:f4:55:55:af:9f:
                    ac:87:c7:1c:e4:23:59:e2:fe:8b:32:3d:fd:d4:ca:
                    0c:44:ae:be:4f:63:8a:4c:59:31:50:0b:68:5d:fd:
                    90:59:25:ec:6c:e4:03:1a:8e:df:1b:d1:42:cc:7e:
                    02:3b:3b:10:2d:4b:28:dc:45:dc:da:b6:7b:5e:bb:
                    63:47:f3:50:e4:2e:21:79:b0:8d:d6:80:c1:87:de:
                    6a:5e:57:f2:0f:53:6f:84:31:d9:90:38:b3:f6:cc:
                    10:21:08:72:df:bd:e2:ec:79:43:a4:76:b6:8a:d9:
                    33:2c:cf:b4:fa:78:07:7b:61:4f:08:26:4e:72:a2:
                    c5:55:3b:7f:17:fe:db:fa:67:49:70:06:cc:e8:09:
                    1d:27:91:75:79:f8:7c:51:30:5a:d8:03:e9:7a:e6:
                    e0:80:89:4d:a8:e8:09:c7:56:90:09:7b:06:db:73:
                    cb:8d:5e:d1:a3:56:e5:7d:47:f3:3a:da:23:f9:11:
                    c5:eb:da:52:66:2e:c1:bf:c3:8b:ce:5b:b9:13:e2:
                    18:42:80:86:14:9d:53:4d:86:2d:39:fd:0f:e6:a7:
                    fd:23:7f:ba:a5:a1:ae:82:12:45:a6:7b:86:2d:06:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:88:06:FD:A4:D8:87:46:BF:8D:3D:3D:E2:69:23:CB:A6:3D:AF:E5
            X509v3 Authority Key Identifier:
                keyid:2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:42:c3:15:c1:1c:f3:71:96:20:63:39:0d:ad:2b:e2:a1:43:
         be:a4:14:ee:51:38:75:b2:fa:c5:fa:83:95:aa:44:04:d5:37:
         71:fa:96:30:cf:75:48:18:0d:69:a4:21:04:8b:9f:bd:09:75:
         66:eb:ca:52:32:93:39:d3:2d:fe:bd:4a:60:4e:26:f6:04:c2:
         58:3a:47:4f:77:65:36:da:d9:8e:39:34:21:c3:d9:d4:17:46:
         8c:ef:96:76:31:66:28:c3:00:d2:de:98:5d:1c:3d:32:3c:8a:
         2f:29:db:3e:71:7b:d1:43:b6:7b:21:02:b7:27:01:5c:9d:8e:
         52:4f:50:c1:92:55:4b:3c:7d:9a:c7:1e:0d:46:16:40:cb:a6:
         1c:f3:32:36:f7:1d:99:fc:a2:8b:48:87:e3:ca:ea:c0:01:06:
         a0:04:1e:3e:35:36:80:16:c5:3a:32:99:23:6b:82:bd:9b:41:
         bc:ca:be:90:e6:f8:22:35:d1:7c:9f:d0:e8:cb:b8:4e:0c:49:
         bf:f6:27:51:8c:07:06:f6:7a:f6:c4:1d:52:c8:9e:8e:3d:29:
         52:cb:dc:38:74:7d:7c:44:f2:db:8f:76:0d:b7:6c:fe:f7:81:
         f4:03:19:e4:3d:f8:b8:e1:78:98:40:56:74:07:e0:bd:ac:0c:
         ba:b3:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:27:18 2025 by rpki-client