Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
File:                     NewylCgvp6NUePgvkJSwP-Jgb7Y.mft (raw, json)
Hash identifier:          LimM+PrP04kqSSQgOncWO6I7kyDNzbedc1HlLi+y7B0=
Subject key identifier:   28:99:1C:96:F8:30:8A:F4:5F:51:12:0E:98:AE:29:BA:00:08:16:11
Authority key identifier: 35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6
Certificate issuer:       /CN=F36AB1CDAF/serialNumber=35EC3294282FA7A35478F82F9094B03FE2606FB6
Certificate serial:       07C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
Manifest number:          07C2
Signing time:             Thu 31 Jul 2025 01:53:21 +0000
Manifest this update:     Thu 31 Jul 2025 01:53:21 +0000
Manifest next update:     Sat 02 Aug 2025 01:53:21 +0000
Files and hashes:         1: NewylCgvp6NUePgvkJSwP-Jgb7Y.crl (hash: 3rZnS1uqr2j1qTdgMFwnu7eR9ZPlok2BCyZaCnM+OMM=)
                          2: 58CF41A4242311EFA6295A127DDC24C2.roa (hash: 9yt3mh2YCV1obwPNsEwKxTI4O8MtjgaSHUx+YACzWDs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991 (0x7c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AB1CDAF, serialNumber=35EC3294282FA7A35478F82F9094B03FE2606FB6
        Validity
            Not Before: Jul 31 01:53:21 2025 GMT
            Not After : Aug  2 01:53:21 2025 GMT
        Subject: CN=688acc91-d99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:f1:98:c8:ff:d5:ef:87:ea:84:68:6e:4b:
                    79:ca:b1:4b:62:f6:dd:64:41:e9:28:f3:f9:98:2f:
                    0f:9a:d7:cf:59:d3:53:88:3d:ae:09:5c:0f:5f:b0:
                    c9:53:49:54:09:7e:c4:22:88:ef:26:41:92:d3:d0:
                    e0:8f:f3:b0:1f:0c:9f:77:ce:59:4b:a2:69:a9:93:
                    ad:79:54:b3:98:fc:f2:13:6d:7a:e7:6b:6e:ee:c2:
                    53:71:cf:22:8d:9b:85:b2:36:7c:71:3d:8e:2c:63:
                    70:c6:0f:73:93:09:81:4f:df:28:4c:13:72:af:b5:
                    78:60:10:7f:f4:f7:bb:f9:a0:ab:5a:77:fe:2a:b7:
                    8c:fd:16:e0:f4:60:c2:ed:7f:05:a6:76:40:9b:cb:
                    5d:35:e8:0e:5c:85:ec:7f:0c:d2:07:69:41:f7:fb:
                    3f:db:bd:b5:b1:41:7c:bf:08:43:21:0e:c3:0a:23:
                    49:42:f5:f0:26:12:ac:cd:98:a0:2f:9c:d0:eb:c8:
                    9b:05:04:d5:13:90:ec:11:90:c8:de:d9:b4:43:fb:
                    7c:2b:2a:85:07:98:a2:51:8a:f9:b8:cf:e4:2a:6d:
                    5f:8c:77:d7:ba:26:1c:8c:7e:0f:7f:3d:64:5f:72:
                    46:df:8e:fc:65:8d:cb:17:ec:e0:8c:2e:45:f3:b2:
                    dd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:99:1C:96:F8:30:8A:F4:5F:51:12:0E:98:AE:29:BA:00:08:16:11
            X509v3 Authority Key Identifier:
                keyid:35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:88:a9:34:2f:70:74:8e:f8:55:bb:9e:13:75:c7:2e:31:
         04:a8:1d:b7:33:4b:4f:28:34:d9:ed:66:fa:8c:21:03:f4:9c:
         33:79:68:ad:bf:93:8f:85:00:a4:8c:0c:88:49:24:52:10:ad:
         b9:77:dc:a5:a0:b6:be:d0:14:52:36:e9:23:91:1c:ab:0d:50:
         5e:a9:22:51:bd:56:19:99:d3:e3:ef:8a:4f:fd:96:ae:7b:91:
         42:a8:6c:e8:b0:3b:c5:b0:2c:2b:53:44:2d:54:6f:95:9f:b3:
         0b:59:b6:45:2e:3b:ee:1f:dc:6d:0c:59:a3:73:5e:48:17:0b:
         2c:d9:9a:7d:02:93:7d:03:2b:e7:cc:c1:f9:9d:db:53:43:c9:
         94:b6:17:f0:8e:f9:93:d8:0e:5b:dd:28:7e:b9:ff:b6:f6:a1:
         b8:0d:67:6b:aa:16:eb:85:bc:3a:22:de:ab:58:3c:d2:82:a9:
         56:f8:f0:cb:55:3a:68:66:7c:1b:88:be:12:f9:85:80:79:8d:
         3e:46:46:9a:57:75:1b:9a:6f:cc:a9:5a:8b:69:42:31:02:19:
         40:bf:b2:74:7b:d2:68:68:42:c7:d8:62:92:e0:0c:12:df:5f:
         51:18:8e:e6:ab:ae:dd:80:2f:c6:98:33:7f:2b:a6:32:9b:90:
         96:df:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:21:53 2025 by rpki-client