Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
File:                     NewylCgvp6NUePgvkJSwP-Jgb7Y.mft (raw, json)
Hash identifier:          ryeVX9x990kieavO9KhwOHK0Op12huqlLa79orXVDGQ=
Subject key identifier:   E5:74:91:13:87:B1:28:D6:E4:90:02:BB:C2:DF:52:70:B2:07:8A:61
Authority key identifier: 35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6
Certificate issuer:       /CN=F36AB1CDAF/serialNumber=35EC3294282FA7A35478F82F9094B03FE2606FB6
Certificate serial:       05F6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
Manifest number:          05F2
Signing time:             Mon 06 May 2024 01:10:48 +0000
Manifest this update:     Mon 06 May 2024 01:10:47 +0000
Manifest next update:     Wed 08 May 2024 01:10:47 +0000
Files and hashes:         1: NewylCgvp6NUePgvkJSwP-Jgb7Y.crl (hash: LRwNC5vkcJSj3zrFMm1ihrwhdfw1kvBsWhCLYkEQ2H0=)
                          2: C23A27E6584E11ED9522D6D5F1222468.roa (hash: PY5TzDSQBaRMC5x6uYvJXsZ6g3nVVH+L/3M7MZBvDFU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1526 (0x5f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AB1CDAF/serialNumber=35EC3294282FA7A35478F82F9094B03FE2606FB6
        Validity
            Not Before: May  6 01:10:47 2024 GMT
            Not After : May  8 01:10:47 2024 GMT
        Subject: CN=66382e18-e618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:5e:84:b1:10:59:07:a6:65:b9:8c:69:92:
                    1e:a5:36:5e:1e:a9:fe:a6:da:9d:0a:2c:13:89:33:
                    fa:c9:85:81:0a:53:5d:9e:86:4f:e3:67:68:8a:20:
                    c1:df:2b:66:a3:db:78:70:40:55:94:ab:0b:13:66:
                    d4:06:40:7d:14:b3:9a:9e:a6:44:a6:30:34:3e:7b:
                    8e:d8:ad:76:54:43:34:9b:b9:26:ce:e9:7a:57:49:
                    0e:83:eb:f0:4d:fc:50:2a:fe:98:fd:58:d1:a9:a7:
                    be:6e:8e:dd:5e:7f:36:d4:cc:1a:a4:54:cf:91:3f:
                    43:dd:e8:ed:38:b9:35:e3:f9:84:33:f2:6d:0c:1b:
                    53:ba:b7:55:a9:77:a7:45:32:a6:34:72:07:b3:f5:
                    be:3e:87:6b:f7:b1:ab:32:20:87:7c:fe:af:14:cc:
                    e1:58:39:39:3e:78:ac:81:55:16:b9:70:a5:43:b4:
                    45:92:8c:10:6f:fa:49:d1:ea:0f:9a:16:19:50:ec:
                    f0:c8:7b:55:12:a5:4d:bc:e7:1b:dc:19:65:56:71:
                    3f:48:19:ab:8b:b5:43:01:9c:52:76:e2:74:63:28:
                    0c:3b:65:ad:ef:43:2c:04:56:53:8b:17:6c:99:08:
                    32:70:60:65:04:fe:b3:8e:6c:43:8d:08:c8:97:43:
                    21:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:74:91:13:87:B1:28:D6:E4:90:02:BB:C2:DF:52:70:B2:07:8A:61
            X509v3 Authority Key Identifier:
                keyid:35:EC:32:94:28:2F:A7:A3:54:78:F8:2F:90:94:B0:3F:E2:60:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NewylCgvp6NUePgvkJSwP-Jgb7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB1CD/9D49B92681BC11EA92D8485EF8AEA228/NewylCgvp6NUePgvkJSwP-Jgb7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:55:00:b6:67:b0:dc:08:7d:21:49:08:88:80:ce:23:71:78:
         6c:ea:8e:e3:a7:fd:fe:b7:5d:41:29:46:82:75:51:34:85:60:
         64:64:c9:57:87:9d:41:5a:4a:cf:4d:df:d7:b1:17:54:b7:30:
         74:f9:52:9e:28:03:c5:db:ed:e0:fc:c3:ed:85:0b:8d:2c:e7:
         ba:e9:42:b7:41:05:da:cc:19:a4:64:ac:f0:33:7b:83:1c:72:
         fe:71:7f:0f:e0:f0:78:6f:c3:95:03:9f:7c:30:5e:57:8b:5a:
         b9:28:8d:77:50:fb:1c:9c:b2:c1:d7:55:59:95:13:45:db:55:
         44:96:62:26:ad:ad:8e:7d:8c:c1:be:f9:14:69:a8:4c:84:c2:
         48:2a:2f:6c:c6:9d:6f:50:e1:81:af:34:6d:ea:03:4d:6b:62:
         38:3c:2c:3e:ce:5f:c4:31:b7:80:30:7b:75:25:dd:a3:85:3c:
         72:ea:b5:cb:b2:7e:a9:1b:91:1e:b7:82:05:41:0f:11:85:02:
         0f:d9:aa:04:24:09:67:66:6c:92:ab:d3:36:ff:7a:66:6a:e1:
         59:be:2f:cc:cb:a5:06:f6:97:2c:7d:94:f5:29:c0:d0:6e:2c:
         87:55:0a:93:a5:98:9d:85:e7:ea:0f:4b:20:e2:10:5e:29:66:
         88:f9:be:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:48:34 2024 by rpki-client on console-fra.rpki-client.org