Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
File:                     oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json)
Hash identifier:          bvKbEe+B7oEvJ5ln3MKp1+mAK1PFkQRusEsDLLQZ28A=
Subject key identifier:   C1:2D:97:73:CA:AB:12:B1:4E:56:73:96:51:CB:E1:17:EA:4D:FA:77
Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
Certificate issuer:       /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Certificate serial:       0DDC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
Manifest number:          0DD7
Signing time:             Wed 02 Jul 2025 01:01:13 +0000
Manifest this update:     Wed 02 Jul 2025 01:01:12 +0000
Manifest next update:     Fri 04 Jul 2025 01:01:12 +0000
Files and hashes:         1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: MCUsVBViYB6hD0OO5F1XC5xz0yC9t5SyzivrIgrWJ9U=)
                          2: FE5120C28FC111EDA79FCAC6F1222468.roa (hash: lagFk2mFf27o4rt0Ohp9C1TojQSFtfsxgyTlz5cUfvY=)
                          3: 3C9EDFE23B6911EEA2301F794AD9E6FC.roa (hash: wWzG/QoAuMYgq7222Q1LjDeYdIF1ogj08piOCTP/j4s=)
                          4: 89433AF2042E11EBA6782612F8AEA228.roa (hash: fYVRQ0io2BTLFn2lqVJHMZb8a+nPwuovmeRLf5YAMDY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 11:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3548 (0xddc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAF, serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
        Validity
            Not Before: Jul  2 01:01:12 2025 GMT
            Not After : Jul  4 01:01:12 2025 GMT
        Subject: CN=686484d9-34fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:72:89:0b:04:fb:1d:9e:ec:61:df:53:bb:1d:
                    2a:8d:40:f0:6b:b4:9b:33:73:c6:7a:9d:15:54:af:
                    66:70:08:16:d7:36:53:ba:57:65:65:95:7d:82:0a:
                    a1:0e:71:08:bb:a4:83:38:cd:ec:b6:3d:91:5a:d8:
                    bf:ef:47:f5:a9:c1:45:c4:16:c4:68:51:e4:b2:54:
                    12:c1:c5:b1:be:ff:0a:f2:63:b6:1a:b9:c0:7f:c7:
                    ff:73:4a:6d:38:13:22:62:91:dc:42:06:5c:7d:09:
                    85:7c:74:be:07:7a:d8:cd:11:95:0c:e4:a8:fe:d0:
                    4f:0a:5f:0a:a8:89:60:fb:94:ce:1f:54:95:a0:75:
                    63:6d:3b:4c:be:c9:04:b0:bc:5a:ee:4b:24:e2:49:
                    a5:f1:31:39:64:14:ae:6e:87:f9:44:ff:1a:e5:42:
                    1c:44:0f:dd:27:4e:89:96:5f:96:65:1e:04:2c:01:
                    f3:9d:a1:f3:f4:ed:00:64:74:ac:d6:9e:a8:bc:90:
                    81:ab:bf:f0:0f:36:d1:04:42:ad:8f:0a:47:71:8c:
                    59:f5:25:bf:2a:f3:74:db:a1:73:b9:60:cc:9b:df:
                    eb:12:7f:bf:4a:af:f7:e3:26:49:fb:d2:52:73:74:
                    98:69:b4:67:8c:1c:34:2b:e1:bb:6c:12:69:b0:43:
                    0e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2D:97:73:CA:AB:12:B1:4E:56:73:96:51:CB:E1:17:EA:4D:FA:77
            X509v3 Authority Key Identifier:
                keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3f:f4:14:ba:e8:e1:55:a5:2b:8f:dc:fc:f5:4c:66:f4:6a:
         04:5c:bc:15:17:8f:33:10:dd:7f:07:2a:33:54:44:74:1c:4f:
         34:a0:cf:d7:8c:77:67:94:30:8a:de:45:5e:2b:68:bd:29:98:
         d0:f3:85:cc:f9:5d:38:1b:fc:70:c9:2c:c6:a3:81:98:3b:dc:
         6f:bf:c9:fa:95:25:33:c2:54:5e:7e:c6:1b:19:a6:b4:c7:56:
         7a:f7:c3:e0:89:54:03:ae:c1:82:93:a6:21:ec:c4:f3:2e:8d:
         81:8c:a3:5c:d2:02:49:c5:63:60:4b:3c:b0:c4:86:4a:48:67:
         fd:a4:4e:9f:c0:2e:25:f1:57:2c:53:9e:77:c6:cc:3b:28:e0:
         85:0f:ca:64:9e:4c:ca:b5:e6:bd:5d:66:45:55:81:a1:98:88:
         16:97:e5:4d:d6:1e:8f:f4:92:83:d5:93:f7:5c:74:5e:1e:dc:
         e4:f8:32:98:8e:96:04:bf:35:b1:30:fa:7e:90:4b:4b:81:80:
         7a:07:9b:bc:e1:08:86:5e:d2:06:d7:a7:38:dd:f9:0b:72:61:
         8b:e2:e4:ea:d5:31:d7:85:ed:66:92:2f:a4:b8:5b:4f:16:a2:
         b8:5d:82:52:29:25:3b:54:18:25:60:47:1e:6d:c8:48:58:89:
         eb:14:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:39:59 2025 by rpki-client