Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
File:                     kkLGCS_iI5rNMMSPNawbxN313L4.mft (raw, json)
Hash identifier:          nP2MqDqUFEetETgDLjoAQqyBbT7hd60vbH11ByVRHeI=
Subject key identifier:   19:80:8E:18:61:33:75:20:7A:6D:D5:A0:9F:95:39:1E:F0:5B:77:BC
Authority key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Certificate issuer:       /CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Certificate serial:       02A8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
Manifest number:          02A7
Signing time:             Thu 21 Nov 2024 02:08:06 +0000
Manifest this update:     Thu 21 Nov 2024 02:08:06 +0000
Manifest next update:     Sat 23 Nov 2024 02:08:06 +0000
Files and hashes:         1: kkLGCS_iI5rNMMSPNawbxN313L4.crl (hash: u3hKQ8/gVnqzlK0mym6d5T5j3RK1LNcv0O+1jIbQvrc=)
                          2: 77776CF68DDF11EE9554951A4AD9E6FC.roa (hash: P/s62KTUxEoG/rgkYrfYli6201mLv2NV6jxtdASDzgE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                          rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
        Validity
            Not Before: Nov 21 02:08:06 2024 GMT
            Not After : Nov 23 02:08:06 2024 GMT
        Subject: CN=673e9606-eadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:af:c6:b7:8b:d7:e8:9a:e1:7f:80:43:96:
                    5d:63:d8:5e:69:a8:97:72:eb:9d:e8:c9:3a:41:38:
                    94:08:0f:7c:48:13:a5:37:14:f9:67:3b:1e:71:0a:
                    5f:e6:3c:0b:a7:ae:1f:49:7a:94:af:bb:66:48:9a:
                    ba:d2:25:08:9a:7d:bd:ac:5a:ea:aa:c7:ae:1e:f4:
                    6e:a5:1f:7a:e7:8e:55:2a:cd:20:f3:81:f2:8a:84:
                    e1:12:41:a2:b1:2d:44:0b:90:7f:fc:3a:52:13:7d:
                    1b:8b:d9:0f:6e:d1:b5:9d:0d:5f:66:71:74:1d:c4:
                    b3:c6:4f:d6:bd:45:55:ff:be:72:6d:3d:a1:24:6b:
                    a3:3b:98:4d:16:c1:00:d9:8b:cb:45:a8:a2:e4:49:
                    12:60:4f:4c:e3:ae:d5:79:31:49:c4:6a:35:1e:78:
                    7e:10:5f:b2:31:26:14:1a:e0:c5:03:c9:8c:f0:ba:
                    e0:ae:bb:21:5a:59:76:59:31:38:d8:df:36:ef:6f:
                    f9:07:7f:59:48:03:4d:f2:51:5e:5b:00:66:ce:3f:
                    2b:90:8a:6e:31:6b:e5:7f:ba:fa:03:28:b2:47:c1:
                    f8:92:4f:33:fb:84:ff:e3:66:02:eb:0c:15:fb:5e:
                    6e:16:3a:9a:1c:a9:2d:fb:e0:5a:46:d6:57:e9:f1:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:80:8E:18:61:33:75:20:7A:6D:D5:A0:9F:95:39:1E:F0:5B:77:BC
            X509v3 Authority Key Identifier:
                keyid:92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:a5:87:d2:aa:ce:47:3b:07:a7:f4:28:5f:db:85:b2:e9:6d:
         3f:3a:da:b6:97:9d:57:06:3f:93:4a:e6:91:2f:19:f8:d2:cc:
         42:22:5b:a7:f2:f2:73:76:2d:43:9f:58:5a:23:98:9d:72:c6:
         1e:c2:25:6b:20:5c:88:16:46:ec:a0:4d:f2:3c:94:08:69:b0:
         e4:0b:f0:c2:f3:7e:8e:e1:c2:45:d2:b2:7c:20:80:87:14:f2:
         ba:5e:b0:32:cd:76:9d:42:59:c1:fc:29:b0:14:7e:b6:3b:ff:
         d5:7b:c5:21:d3:db:f5:26:ca:70:ea:74:7c:70:61:77:b4:f9:
         85:05:93:84:ed:b2:46:b7:b8:aa:0c:18:ed:07:22:e9:9e:39:
         4a:67:b7:b0:d2:16:0b:9c:67:bd:79:81:ec:a8:45:dc:a1:d1:
         60:cb:d8:6d:c8:31:d9:55:0c:7c:9a:0d:3f:17:98:32:9b:ef:
         2a:45:d1:42:36:21:84:26:b2:30:c1:12:24:34:ff:69:a3:0e:
         5c:9a:53:77:37:8f:84:47:62:fd:e9:e8:46:21:81:fe:95:02:
         ad:d6:7b:97:82:aa:11:7f:41:a1:45:72:ac:5b:90:af:19:5e:
         65:24:6a:f0:a2:e6:5c:b9:be:e6:4b:f8:a2:07:fa:b1:0c:78:
         97:75:1d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:21:26 2024 by rpki-client on console-ams.rpki-client.org