Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
File:                     kkLGCS_iI5rNMMSPNawbxN313L4.mft (raw, json)
Hash identifier:          XhXdz5LCYiH+ZOYkQHFJgTLlXZ3lCJel11nqtiiB9z4=
Subject key identifier:   36:5D:1C:07:6E:06:76:4D:FA:7A:D0:7B:C9:B7:5D:08:4E:FE:C8:BF
Authority key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Certificate issuer:       /CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Certificate serial:       01D9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
Manifest number:          01D8
Signing time:             Thu 02 May 2024 02:04:54 +0000
Manifest this update:     Thu 02 May 2024 02:04:53 +0000
Manifest next update:     Sat 04 May 2024 02:04:53 +0000
Files and hashes:         1: kkLGCS_iI5rNMMSPNawbxN313L4.crl (hash: PC+j+tIp4safuhFWPYl/FwL920CmXFIuo9TEVvo7Uxw=)
                          2: 77776CF68DDF11EE9554951A4AD9E6FC.roa (hash: P/s62KTUxEoG/rgkYrfYli6201mLv2NV6jxtdASDzgE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                          rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
        Validity
            Not Before: May  2 02:04:53 2024 GMT
            Not After : May  4 02:04:53 2024 GMT
        Subject: CN=6632f4c6-1ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fc:3a:d2:55:e2:c3:fd:27:41:49:f2:39:4a:
                    38:79:a4:57:5f:a2:6c:bb:72:e8:b2:5c:37:34:d3:
                    e9:29:5c:a1:68:28:6d:a1:65:e7:4c:e0:26:02:b4:
                    93:ae:d5:73:90:ca:50:86:11:31:2a:c5:21:0a:be:
                    a8:0f:47:c6:ee:64:7d:d6:3c:70:06:a2:38:b3:ec:
                    c0:01:a9:21:c8:e4:a0:e9:52:1e:51:6c:e1:02:80:
                    17:5e:e9:eb:eb:78:65:97:c1:74:9a:6a:8d:8d:5c:
                    e2:83:64:88:21:c5:1b:d3:ed:c1:ac:42:0b:3e:6d:
                    9b:8d:d4:10:39:65:3f:2f:9e:cb:fd:cd:58:62:79:
                    7a:c2:50:aa:82:e9:47:ad:37:9f:e5:ca:b7:1b:42:
                    ce:50:4d:0b:8f:f4:fb:cf:45:b1:a0:91:87:e1:b9:
                    34:ad:70:67:38:09:a9:ef:02:2e:a4:21:8d:fd:4b:
                    8c:9b:d6:59:8c:4d:29:25:88:ea:43:26:d5:73:a1:
                    77:6b:ae:64:7a:a6:6d:0d:58:a2:e3:76:5d:22:18:
                    d4:5a:54:60:e3:d4:2f:df:bb:28:7d:c0:05:ef:e1:
                    b9:e1:a8:b8:db:a9:63:1d:ca:70:7a:98:cb:56:11:
                    08:fd:af:2a:17:82:9d:33:7b:88:d8:b3:e1:ce:3e:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5D:1C:07:6E:06:76:4D:FA:7A:D0:7B:C9:B7:5D:08:4E:FE:C8:BF
            X509v3 Authority Key Identifier:
                keyid:92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:85:1b:c3:6f:4c:f0:c8:d7:ce:aa:30:0e:93:f4:47:33:0f:
         4d:73:9c:46:3f:49:23:75:5c:5b:ed:f5:7c:9f:23:c1:2c:28:
         4f:d2:c5:6e:06:e4:c6:be:15:d4:7d:27:36:ff:c3:1f:3a:ee:
         fb:96:d7:28:c4:93:b7:5c:bc:f2:ec:cb:38:12:13:a7:ad:28:
         5f:27:9b:ce:d8:d8:51:c9:ed:a5:28:12:7e:07:d5:52:ed:b0:
         54:4f:24:c9:6b:01:36:28:8c:22:11:94:d4:7a:96:91:12:90:
         ac:90:95:b5:a5:2a:fb:13:c6:89:91:15:1a:f4:54:ab:32:51:
         72:1f:48:ed:e0:38:02:f9:31:4a:5f:97:a3:80:ab:85:fd:45:
         6d:c8:c4:d2:56:0c:14:95:cf:52:bd:e9:53:ee:74:30:3c:7d:
         af:8d:2b:7e:8e:34:97:4d:fd:43:76:ab:82:63:83:22:37:48:
         95:21:2c:47:58:e2:f6:c5:f9:f0:0d:1e:ef:ca:66:19:08:72:
         8f:3e:8a:35:45:52:89:49:47:31:e1:c4:4e:ee:0a:40:65:58:
         d2:33:38:a9:83:d2:2c:fb:06:c8:3b:aa:b8:3b:af:7e:bb:8b:
         72:f1:c6:eb:42:06:40:4c:e3:d5:47:88:18:20:0f:ce:e7:c6:
         91:de:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:52 2024 by rpki-client on console-ams.rpki-client.org