Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
File:                     KIBrwzr6AQb7b4x0Keq3jBIBolk.mft (raw, json)
Hash identifier:          iHRyAJoul2J2d6/OG1sl4IakqXBo8qfUrPnmIQ45bvA=
Subject key identifier:   49:DD:CD:85:A9:81:84:05:6F:23:C6:5A:C3:A7:B8:06:83:5B:89:02
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Certificate issuer:       /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial:       0288
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
Manifest number:          0287
Signing time:             Wed 16 Apr 2025 03:58:19 +0000
Manifest this update:     Wed 16 Apr 2025 03:58:18 +0000
Manifest next update:     Fri 18 Apr 2025 03:58:18 +0000
Files and hashes:         1: KIBrwzr6AQb7b4x0Keq3jBIBolk.crl (hash: Udv0gJT3zj/HysTy6rMfTUU4uSHXQMyaY8ri/eteB1k=)
                          2: 12D945AE311311EEAFAB622D4AD9E6FC.roa (hash: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                          rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 18 Apr 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E201DAR, serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
        Validity
            Not Before: Apr 16 03:58:18 2025 GMT
            Not After : Apr 18 03:58:18 2025 GMT
        Subject: CN=67ff2adb-33d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:94:f7:71:09:08:2d:90:cc:61:45:14:6e:
                    5d:24:77:61:8a:90:8d:dc:1a:a3:7a:18:06:7a:2c:
                    fa:eb:4c:e0:09:e3:94:e1:d6:a1:17:6e:0f:97:78:
                    da:c4:dc:40:ad:a5:bf:ce:cd:68:10:d8:2b:fb:34:
                    5d:ca:15:1e:00:b0:02:bf:ae:d4:3f:93:af:1e:f1:
                    ee:cf:05:fb:2c:7a:99:7d:6d:12:40:55:d5:be:c7:
                    af:d8:69:de:64:1f:23:2b:9a:fc:bf:ec:f8:26:95:
                    81:e8:f8:63:87:76:2d:67:0e:f4:5a:49:57:97:34:
                    f1:3a:0f:76:c9:62:66:b9:d5:5c:e7:d3:56:35:e8:
                    de:18:0d:78:73:d4:9e:44:a9:0f:48:4f:03:54:e6:
                    fa:da:c9:97:11:5e:e8:16:f5:a6:bd:c4:c5:00:d4:
                    0b:d8:58:7b:b4:fc:14:38:85:06:6b:02:90:0f:3f:
                    7c:7d:dc:c1:84:ed:69:51:db:7a:11:87:c6:75:85:
                    69:68:2f:66:f7:72:5f:2b:e2:9f:58:11:ae:d6:01:
                    2b:87:98:9d:6a:0a:f0:f9:be:91:cf:24:08:c3:a0:
                    d5:54:56:93:68:02:0f:1a:4b:91:a6:4e:04:a8:60:
                    ca:ea:eb:ac:3a:30:7f:06:7d:1e:40:3b:38:81:fe:
                    04:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DD:CD:85:A9:81:84:05:6F:23:C6:5A:C3:A7:B8:06:83:5B:89:02
            X509v3 Authority Key Identifier:
                keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b4:12:2e:c1:a3:66:e1:d9:89:31:94:ca:87:09:b7:fd:7c:
         ec:1b:41:7a:00:cc:1e:3e:ca:11:df:ba:1c:b2:74:98:08:7b:
         39:f0:44:33:56:11:5a:f7:70:ff:31:bb:e1:f8:90:0d:75:47:
         04:d6:9b:ca:b3:13:ca:78:60:13:b7:e7:fe:25:46:e0:57:af:
         d3:38:ec:65:6c:07:fa:b9:c2:31:7f:fa:b6:36:33:36:50:85:
         90:79:b2:32:c1:a0:a5:7f:f9:d5:90:1d:00:55:ed:8d:5f:0b:
         f6:fb:a6:92:0f:00:6e:dd:38:8e:77:87:16:b3:4a:ec:ce:0d:
         f6:aa:f6:ea:58:ca:87:15:65:4d:d2:33:0e:7e:45:1b:b6:b8:
         fd:21:3e:96:c4:2e:d8:c1:14:f8:a1:33:f4:27:51:5b:c2:55:
         6b:bf:bf:78:f0:61:55:01:f6:e8:66:2d:ce:ed:cc:68:be:2f:
         7f:d2:52:04:14:c6:ac:08:02:6b:64:2c:fe:b9:33:b0:99:23:
         4b:65:39:f7:5c:3b:30:1d:4c:4e:5e:7d:5d:16:cf:25:84:f5:
         d3:6a:53:ec:00:e4:78:9c:85:47:12:31:e8:cb:55:07:c3:1f:
         0a:f8:09:02:7c:5d:49:0e:06:ab:2c:55:4e:cf:1e:f8:e5:bb:
         86:4a:a4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:50:10 2025 by rpki-client