Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File:                     OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier:          0cos0qVQZvS5PZhwS6EqGJYdLwx0rCMaq/B5Y2VEf0c=
Subject key identifier:   61:5D:A7:52:FC:B2:B4:B2:4E:93:BB:25:2A:31:10:85:09:1D:A7:33
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer:       /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial:       0681
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number:          067B
Signing time:             Tue 04 Nov 2025 03:25:18 +0000
Manifest this update:     Tue 04 Nov 2025 03:25:17 +0000
Manifest next update:     Thu 06 Nov 2025 03:25:17 +0000
Files and hashes:         1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: CoR1e8M9rRKN9+qiCLhW4bUckkm6cUb6rPjaJs9duwQ=)
                          2: 5006E70E5E3611F0893678E9DAE4EC9C.roa (hash: +o+9Z0JPTJwXWASmZEn5sX4JUlRX+byFenFDA6I4P5g=)
                          3: 26D0B8E25E3611F0887D5CE9DAE4EC9C.roa (hash: 2tu3Ld1qF49GVl2mB5JFSgh0SJACUdEbR9uP9vjP6Xk=)
                          4: A42FDE0E5E3011F0B6CA0CC4DAE4EC9C.roa (hash: Ac2nu6upq7t1gl0xBIa3qrh3jUY/VotzPxg8MIknNhA=)
                          5: F426C5DA5E3511F08C38F3E8DAE4EC9C.roa (hash: 1sDWYH3f/HWstXqg5Qsn8hl+mqkD2R6cYH7ovhfNSnY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 03:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
        Validity
            Not Before: Nov  4 03:25:17 2025 GMT
            Not After : Nov  6 03:25:17 2025 GMT
        Subject: CN=6909721e-93c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:fd:2b:9c:d7:89:d5:07:66:ad:eb:5d:0c:
                    a8:c1:54:b5:03:eb:10:fd:5a:05:3d:d3:6d:d4:23:
                    1e:d2:de:66:ba:40:37:db:04:15:47:71:52:59:39:
                    a5:11:f2:de:f5:75:69:4b:bf:62:c0:ae:b3:d2:e3:
                    ac:05:a3:31:be:a3:ab:a9:d2:3a:57:e5:6f:cf:26:
                    68:d9:0e:f1:82:c4:14:04:ff:25:d6:7a:4f:a4:b5:
                    f0:8d:81:30:4c:d0:9d:db:2d:76:d0:75:a6:b5:c6:
                    da:af:11:4b:01:22:7c:b6:3f:ca:0f:44:64:3a:3a:
                    75:58:4b:74:29:ca:ff:bd:bc:1c:3e:e2:10:5f:1c:
                    60:33:7f:5a:89:e1:33:e1:cc:09:6b:bb:04:8d:44:
                    34:ec:e5:c2:67:24:b5:92:c2:a4:a9:2e:b2:d3:31:
                    ae:16:98:ea:c3:87:c1:ef:fe:22:cb:11:4e:5f:1f:
                    88:0e:1f:00:06:aa:d6:bd:8d:3f:50:e0:db:79:31:
                    bc:42:76:71:5c:5c:46:cc:be:a8:9c:fa:e9:da:54:
                    fd:68:6e:b7:be:dc:23:21:18:eb:a3:08:ec:aa:ee:
                    29:f4:54:36:61:00:df:d3:03:11:66:38:b9:e7:9f:
                    40:f2:15:2c:ac:e1:12:32:0a:67:1a:ae:9c:12:ec:
                    c3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5D:A7:52:FC:B2:B4:B2:4E:93:BB:25:2A:31:10:85:09:1D:A7:33
            X509v3 Authority Key Identifier:
                keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:02:94:fe:9e:5c:73:80:4f:69:50:14:a2:13:cc:d7:cb:d8:
         30:5b:70:dd:9a:b5:94:74:5e:fd:25:25:43:75:ba:17:64:13:
         96:22:e4:ca:27:50:88:55:37:ac:e9:cc:85:cc:5a:f3:2d:61:
         9b:11:57:73:b0:21:6e:66:da:d1:16:b6:a9:00:84:97:a8:19:
         d3:5a:0e:b0:a7:c4:a4:15:6b:c3:da:33:85:b7:ca:0b:22:2a:
         f4:7e:b4:b6:de:28:cb:0c:1e:b4:40:14:df:a3:cf:06:dc:43:
         69:33:f2:89:72:a0:6b:ae:75:38:66:d2:5a:da:91:da:1a:de:
         ef:3e:ec:93:39:28:be:93:3c:5d:27:a2:ab:fc:b0:95:e3:20:
         d1:cf:5a:df:ff:2a:b9:46:1b:17:d4:5c:1d:7c:1e:d8:0d:0e:
         2c:8d:06:03:e1:84:cc:e8:ad:0d:e3:37:55:53:76:d3:f0:65:
         d6:d6:9f:49:a9:07:15:ac:75:b1:e5:17:2b:01:cf:2a:45:84:
         64:3f:16:31:e6:71:6a:93:7a:8c:3f:2d:1b:57:73:63:30:86:
         c6:2d:86:8a:7d:1b:69:83:be:74:1e:5b:a2:3e:06:ba:ab:e7:
         cf:0e:8d:a9:b7:08:65:ba:13:d8:48:63:4c:2f:a9:eb:01:2f:
         60:a8:f7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:28 2025 by rpki-client