Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
File:                     ytp6EgVTRDeaE65t57onjrxRalg.mft (raw, json)
Hash identifier:          3ibhIXTMfcNuNG2yXRUuWDV1Gc0zsNUH8pkFYYVH8wo=
Subject key identifier:   DA:88:BA:92:BD:40:E2:AF:17:9E:EF:17:B9:1A:35:55:A9:FA:FF:3A
Authority key identifier: CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58
Certificate issuer:       /CN=F36C5A07AR/serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
Certificate serial:       03CB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
Manifest number:          03CA
Signing time:             Sat 04 May 2024 01:37:20 +0000
Manifest this update:     Sat 04 May 2024 01:37:20 +0000
Manifest next update:     Mon 06 May 2024 01:37:20 +0000
Files and hashes:         1: ytp6EgVTRDeaE65t57onjrxRalg.crl (hash: m3xgNcM/l/PD4OWG5v7OwoYnpsf9HNyzuWu9bPqV2Ug=)
                          2: D463691425AA11EC929C1A5AD8A014CE.roa (hash: zOn0KCR3WUQ3sl7nvMO+r6apzohvakNE95t03lLWHiA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                          rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5A07AR/serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
        Validity
            Not Before: May  4 01:37:20 2024 GMT
            Not After : May  6 01:37:20 2024 GMT
        Subject: CN=66359150-fcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:01:3d:08:9c:c5:c5:72:2a:39:19:b5:c1:
                    4f:2c:79:fb:2f:16:f7:57:94:31:90:5a:9e:fb:b9:
                    a9:96:e3:12:53:5a:05:2e:8e:9f:ad:db:58:2f:2a:
                    66:ac:29:7c:78:0c:f1:62:3c:a9:01:e2:44:0d:c2:
                    8e:d9:d1:cb:fc:5b:c5:3f:13:21:90:87:7a:86:22:
                    2b:f3:2d:f2:81:6c:a2:d8:93:73:ae:ef:ae:0e:b6:
                    92:d9:3c:5d:bb:ac:7a:45:05:67:97:49:32:93:e5:
                    d9:4d:89:90:45:f4:81:cf:dd:eb:b8:ce:fb:ce:be:
                    90:a1:03:be:5a:2b:9d:5c:e4:eb:a5:c8:ed:04:66:
                    bb:cc:4d:c8:6c:10:91:46:d4:7b:3e:3e:58:8a:46:
                    75:ef:50:6f:c4:b0:22:bf:12:7f:fa:85:94:83:75:
                    72:95:65:6e:a5:f1:3b:44:96:14:ba:75:12:62:5f:
                    d5:10:a5:3f:13:ca:c6:ee:4a:4a:54:d6:ea:8c:de:
                    8d:5e:8e:2a:59:94:be:ce:23:1b:65:33:5f:78:f3:
                    68:97:99:06:bb:36:73:cb:8d:02:09:24:6a:4f:f4:
                    77:41:75:aa:df:28:04:8e:a7:9e:23:6c:96:e1:79:
                    98:7e:73:52:df:2e:ea:96:e8:2c:15:52:21:d1:c1:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:88:BA:92:BD:40:E2:AF:17:9E:EF:17:B9:1A:35:55:A9:FA:FF:3A
            X509v3 Authority Key Identifier:
                keyid:CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ab:89:55:4c:ae:d1:f0:49:c0:05:0f:28:35:4a:e7:4b:8c:
         7f:8e:40:12:36:93:a3:bf:f8:f5:f8:ae:b9:42:38:8d:d7:06:
         09:7f:26:2f:86:b0:3d:1d:06:89:0d:c4:e5:15:95:8f:5e:17:
         7e:81:7e:54:92:88:3c:0a:3b:db:7f:c4:c1:38:11:dd:c4:01:
         2e:97:d6:1c:89:99:6e:59:43:e3:b2:ae:f7:a7:d5:19:fe:9c:
         0c:49:d3:c6:57:6a:c2:9e:94:49:e2:50:ea:d4:30:63:2a:59:
         44:c5:a6:83:2c:8d:66:62:2b:77:30:77:d8:3f:42:5d:d0:30:
         64:03:a3:cb:ad:67:06:8b:a9:f9:d2:23:1e:95:92:49:06:01:
         24:b8:2d:3d:23:cb:db:3d:64:33:08:c8:0b:2c:b9:4c:f5:c5:
         48:10:71:23:4f:f1:5a:bd:80:84:18:b2:46:8e:79:2c:db:f1:
         7a:87:e5:5d:3c:66:f1:11:39:58:33:5e:6a:87:11:54:82:6f:
         d1:01:7c:92:2f:d5:76:3e:50:29:bc:17:bd:89:dd:b6:9a:54:
         5e:03:43:19:34:16:87:24:cd:39:fa:c9:b6:5f:25:24:7f:9d:
         81:43:e1:ba:4d:e7:37:0d:58:a4:48:05:d5:5b:eb:ce:c2:4c:
         52:fc:25:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:59 2024 by rpki-client on console-fra.rpki-client.org