Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
File:                     l9Y19-2_mFQOYSLJxsIL43gotSY.mft (raw, json)
Hash identifier:          fv6AA9UGyU72zuz7cbxQDf1tOWwM3A6jcoAFv7Ymk0o=
Subject key identifier:   5D:15:9E:B4:96:85:54:63:C8:EA:95:8C:4C:A9:88:21:5A:2A:47:6E
Authority key identifier: 97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
Certificate issuer:       /CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Certificate serial:       0187
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
Manifest number:          0186
Signing time:             Sun 19 May 2024 02:10:59 +0000
Manifest this update:     Sun 19 May 2024 02:10:58 +0000
Manifest next update:     Tue 21 May 2024 02:10:58 +0000
Files and hashes:         1: l9Y19-2_mFQOYSLJxsIL43gotSY.crl (hash: aAjl4tQBRUZMaZNGmZgHj1/Nmh0unAvgC/Qi6lTAcEo=)
                          2: 60A3BEAAEE7311EDBF3DAE174AD9E6FC.roa (hash: QNrfzd3ARf2QVpOaSCByjJBaaDBdSWDu5u6B8Hs+BLk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
        Validity
            Not Before: May 19 02:10:58 2024 GMT
            Not After : May 21 02:10:58 2024 GMT
        Subject: CN=66495fb3-bd46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:2b:dc:9b:d4:9a:c7:90:8a:e8:28:1c:f9:
                    be:2b:49:da:d6:43:8b:3f:4f:6e:e5:2d:3e:23:32:
                    b0:b3:89:de:35:be:74:a5:04:0b:f6:7b:80:85:03:
                    10:a7:11:98:d8:d0:e6:0f:14:10:ff:e4:72:da:a7:
                    8b:51:af:96:0f:95:6e:10:38:19:d0:4c:c2:3c:7d:
                    be:b4:16:7b:56:57:7d:4c:21:6e:3f:1f:0a:e5:43:
                    09:90:da:4d:25:a9:45:69:53:da:ba:33:9c:73:ee:
                    42:db:2c:62:76:b7:47:3f:e1:2d:27:99:94:e5:ca:
                    99:a3:56:1c:2d:d3:5b:69:f1:63:2e:25:6a:87:aa:
                    e3:89:6e:71:75:24:c8:46:d6:3c:17:04:23:02:98:
                    cb:ec:a6:83:69:f6:e3:36:ed:b9:68:0b:bb:14:7b:
                    f5:1a:87:e9:2d:0d:88:63:5e:e7:10:d9:f7:15:31:
                    10:72:b2:b9:55:a8:00:35:3e:2c:65:00:c0:0d:09:
                    26:22:f4:d9:04:7a:94:75:a5:94:3a:d1:92:e6:dd:
                    12:c0:ff:f1:8f:55:87:7e:ed:20:76:73:cf:90:5a:
                    c0:7d:3a:5b:c9:2f:d2:0d:69:0d:73:32:de:d1:b0:
                    7b:52:42:78:bc:db:f2:b2:64:82:39:b0:11:16:86:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:15:9E:B4:96:85:54:63:C8:EA:95:8C:4C:A9:88:21:5A:2A:47:6E
            X509v3 Authority Key Identifier:
                keyid:97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:05:f6:57:db:24:5b:a0:56:6d:24:ab:d1:71:a5:e8:5b:9a:
         b7:56:52:03:5a:76:c7:d1:81:04:02:88:bb:7a:53:26:15:fe:
         20:6f:96:72:7b:7c:0b:c1:20:78:01:d1:bc:7f:99:45:f0:81:
         79:16:b0:95:04:b4:5f:a8:04:a5:1b:1f:c9:37:cf:5d:d1:72:
         35:63:27:19:22:4e:12:2c:0a:0a:f3:5e:19:4c:e3:08:63:e1:
         4b:be:f6:5e:a2:9e:9b:a1:28:0f:d9:dd:d2:1c:44:53:ca:16:
         47:9a:8e:c1:a4:af:fa:89:c0:0a:9b:89:53:fb:85:c8:bd:a8:
         9c:a1:99:d9:4a:a9:9c:54:0d:50:83:13:67:0f:d8:cd:0f:de:
         87:c1:0c:45:f4:69:bd:45:04:db:37:09:2d:1d:b1:2d:8e:33:
         6a:de:11:fb:74:f1:4f:7d:b9:fa:6b:1d:df:4b:d8:a7:87:57:
         3e:52:e1:86:63:90:fb:c1:ca:7d:5f:9b:4b:5a:eb:79:bb:33:
         f4:2d:a5:25:41:d4:44:4a:2b:14:24:1f:76:f0:22:58:0d:2b:
         6d:35:dc:fb:18:cf:93:2a:2c:f0:bc:5e:c6:31:db:3f:2e:35:
         85:fc:fa:14:a1:7f:a0:c1:e8:8a:5d:fe:a0:1f:69:29:29:38:
         93:9d:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:29 2024 by rpki-client on console-fra.rpki-client.org