Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
File:                     oTaOi_yA9OpasJcW0lchGTYYKFE.mft (raw, json)
Hash identifier:          GmyEuYs4gLwlQLdS/xe9SpHnlWJLTVutdB3Sl60UlDI=
Subject key identifier:   48:7B:8F:C3:66:70:F1:B6:A7:73:E4:BF:48:6D:A4:5E:D5:6C:84:4A
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Certificate issuer:       /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial:       0D58
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
Manifest number:          0D17
Signing time:             Thu 19 Jun 2025 01:06:02 +0000
Manifest this update:     Thu 19 Jun 2025 01:06:01 +0000
Manifest next update:     Sat 21 Jun 2025 01:06:01 +0000
Files and hashes:         1: oTaOi_yA9OpasJcW0lchGTYYKFE.crl (hash: M35xKb225MKTFDpcxXGPRV+h5WADhYrVBzgHAwy5kGc=)
                          2: 688FF63C70EA11EBB58E686CF8AEA228.roa (hash: mnhwlEYLBW14RTC3favyxPOzROufnwHo5mG4Z0mXmcE=)
                          3: 316A8CAAEAD711EBBF227926D8A014CE.roa (hash: yxveE6pApv0ntB+dr/mwCV5WzRHfetSEdQFEmXgoicI=)
                          4: 7454200CCAC611EB8443867EF8AEA228.roa (hash: hzz/vJ+aqnVoQNL7Q9fjlul0hrPt6hbCLM46iL+BL7I=)
                          5: 48EF3A4CCAC511EBA25AC67CF8AEA228.roa (hash: akzUSGdVFPvN0ulPbNTi4W3s+HlY+6W8WohYYTP53AQ=)
                          6: 604112CC46C411F0BB8EB378DAE4EC9C.roa (hash: oScXiYHUFpyKfI5HMFQh9nsi/SHG0VE3rIhh+0Ip3Q0=)
                          7: A50DC96846C411F0942BA07ADAE4EC9C.roa (hash: sHNAOfb/q+PcCzpw6rvPqasqMwLSMx1FINw08PTtxic=)
                          8: 0B623002CAC611EBA5FDE97DF8AEA228.roa (hash: 7vqWPa/FVhwLVFvDKi4nljJ6iFh6Jfsi7spX+XnzJ70=)
                          9: 4E58D686CAC611EB9365587EF8AEA228.roa (hash: 4ThPqE6/bQdWLeN6MKhRWORK90ZVKeZ9eefEc7xOcFU=)
                          10: 89672DF86D9011EEB83415874AD9E6FC.roa (hash: GCv1qnJWw7EowPAn9i0uz0mqCeC5AHRLSdr3MuuzS/U=)
                          11: 97B6F442464111ECBD1F4A20D8A014CE.roa (hash: WFh81Czx23ss3LjWPFRZ0ox6H/FOzyhXrzAkY9AMcyE=)
                          12: 81BE337A46C511F0BFE7DC7FDAE4EC9C.roa (hash: pVcKVq48gEV8Go0LDZVguyDOkfFxzydQPYrOqsO5Mxs=)
                          13: FBDC85FE280211EFA2470CDD7CDC24C2.roa (hash: N2LzgJndLmvz3cDIsfFkVtUTemoZkwL0xxlWsp4hwb0=)
                          14: 6023B6466D9011EEB59691864AD9E6FC.roa (hash: 8Vfkb/3Ajxlzq/FEl75zlD6gPZ0n60l+v2tc/Wmueqg=)
                          15: 3FFE158246C411F0B4746278DAE4EC9C.roa (hash: JSi407PI78anMYfv+AOzcoeUknjbbweW9RVZYH6HG+Q=)
                          16: 3730DFCE0B1F11F08F24969D762E951A.roa (hash: M4evIqnQ83xbCnZoy0k3D9VPp29Fp6WHTYW6UjV2Hb8=)
                          17: 0D7A512846C611F0B4EAD183DAE4EC9C.roa (hash: +ER0d9RIe4bpJeWakTcMzMs/D2X/K+RHUk8EHXUsSzI=)
                          18: 2A6685A046C511F0B86F727DDAE4EC9C.roa (hash: HCT4XLH64I5ImsqzEiVDAlrxg3B90jJrq1xSnA/3dFo=)
                          19: B1D3717646C311F0BC7CC5F2DAE4EC9C.roa (hash: 9gcYwTjOWCFIZzi9rrNFrBl+xybAESXQxu1TkihsHTc=)
                          20: FF8AE3A2D27511EBA434AC13F8AEA228.roa (hash: 5+HC4jv4qZLLiwXnjuwHxqCdddSlDf0nEOGWfUV5PQQ=)
                          21: 717250DC0B1F11F0979AD09D762E951A.roa (hash: EIY2uiwrUgRTGGH5CKTX60VMZhCwzhDQZwIzPuQyzLk=)
                          22: 2A0F92DAF65311EABA5EBE2FF8AEA228.roa (hash: THMJd5DgFhWv0Jk+1OcRnImey6Na8xQ3AsnqGvmdW70=)
                          23: 1B68AA0C46C411F0AE592FF5DAE4EC9C.roa (hash: QPJ/pgy5MDLWjEUGppoWDCqEirKoVOtAK5W3WyI3dAw=)
                          24: 0A71212446C511F0B3816D7DDAE4EC9C.roa (hash: lv7fLpV1Z39qFrGvYE0On9CzDUQDfcH7arejVv2X+68=)
                          25: ADF5650846C511F0973FEB81DAE4EC9C.roa (hash: 7CYfsacbUXhjLqOsEIQOYe+QrprQCfUiJVwPCRh/kdM=)
                          26: C0A9CF84CAC511EBAD8F747DF8AEA228.roa (hash: 32bh8lnMpMvqyS9cax+2bQBhBK15D7Xt6pmKKyWGT1I=)
                          27: 8E9FB58ACAC511EB9B981F7DF8AEA228.roa (hash: i2XbNZNySL6bjfPeeqcwKUmZc1PB1OXmHSBcuRJ9wok=)
                          28: E931058846C411F0A1757E7BDAE4EC9C.roa (hash: EayQcb/gQt7YJ6Dhe3VUfGA8I0JKQX96b3m2dF4aJWU=)
                          29: E631424846C511F0802C0082DAE4EC9C.roa (hash: XDAB5XeuUP/8wavFXKpAQBTJhSuFwoK6JGeU6nezG7o=)
                          30: 4EA8246E46C511F089D87F7DDAE4EC9C.roa (hash: qjyPFtl59ffxyefqLmWJlRsBfN31sPgRtcOSrX+rkQE=)
                          31: 7A55532C46C311F0A855E5F0DAE4EC9C.roa (hash: rHdSgUS+SlwggCoWJZgjF6rhTUxpB3fhFGFetcNmcsE=)
                          32: 6EE63CF0CAC511EBB74A097DF8AEA228.roa (hash: WPe/RcweAEsw7x1mmDsXfOpYOObfldXDxTckbMWoLT4=)
                          33: F2BA97A6CAC511EBB828B97DF8AEA228.roa (hash: MND7CmipLpfeKz1+bS7srpKpnj7/a7fnv2q2oc1dXDk=)
                          34: DACADA1046C311F086D2CAF2DAE4EC9C.roa (hash: cCmcwJlgiJprQTyGetPh+w7SGAOJEFqm9EdH0ShanAk=)
                          35: 9474CF86ED9E11EA9B405A41F8AEA228.roa (hash: 1ODaBYEbZc5lz2DA8RW3VSuCv0cfBzMfZN9Q4vPucaM=)
                          36: FCB7B1FC46C311F0AF749CF4DAE4EC9C.roa (hash: bSmxkooizIHzzHtegnD2xMlI/oPcsLP2bS8+oceldxA=)
                          37: C3C3FC5646C411F0957A397BDAE4EC9C.roa (hash: 6TBdH95t3nXF10Bz+Ap697yfZQbWnupWY7c4A0SeikU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Jun 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3416 (0xd58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
        Validity
            Not Before: Jun 19 01:06:01 2025 GMT
            Not After : Jun 21 01:06:01 2025 GMT
        Subject: CN=6853627a-5901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:bb:3a:b5:16:cb:13:46:a5:47:25:2a:98:
                    15:d3:d9:cb:73:7e:5a:87:cf:b5:cd:5f:7d:29:e6:
                    e6:d5:bc:3c:55:ad:81:7d:df:a9:90:30:b3:43:80:
                    51:b5:46:24:e3:6f:82:08:33:22:5a:1d:ad:ce:fb:
                    d0:f2:db:64:74:2a:9a:49:17:53:e2:32:46:d9:5a:
                    a7:6e:8b:96:e2:b0:28:18:0a:30:2c:eb:c2:af:23:
                    04:12:af:2e:b8:d0:c9:16:cc:b5:03:7a:2c:42:fd:
                    8a:89:05:e3:d3:c3:5e:43:12:21:ab:14:a0:a0:64:
                    3c:7f:fe:4d:f5:76:20:ff:8e:c7:a8:95:0f:cf:74:
                    76:84:39:a1:1c:e2:45:85:5e:b7:b7:55:c8:21:58:
                    7c:f2:84:58:71:1d:3f:f7:27:a4:3c:30:e2:d5:8e:
                    16:38:b8:ac:3f:d5:8c:bb:e3:46:c1:c1:44:57:c0:
                    4b:d7:f4:3c:ac:56:2f:26:12:0b:c3:46:7a:3f:e1:
                    29:4e:7c:d3:07:bd:3d:8d:41:7e:3d:7a:0e:02:78:
                    d4:30:a9:97:57:85:44:45:07:1c:30:6b:ea:b3:20:
                    52:eb:4e:4d:ac:10:6e:57:61:fc:63:32:1c:c2:70:
                    c6:90:da:e2:7e:d2:60:c5:17:77:ca:88:f8:12:4e:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7B:8F:C3:66:70:F1:B6:A7:73:E4:BF:48:6D:A4:5E:D5:6C:84:4A
            X509v3 Authority Key Identifier:
                keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:69:27:40:36:17:da:c8:47:e2:3f:b8:53:e8:ab:13:c3:
         2c:14:9e:e2:4e:53:57:d1:c0:09:4b:ca:16:1c:08:9d:49:5e:
         75:27:20:6f:9f:76:a5:2b:e6:97:f1:5b:79:07:4e:1b:7e:ba:
         e5:2d:af:63:10:c7:c7:52:cc:7b:4e:e2:ff:80:16:84:e1:15:
         eb:dd:cb:f9:8a:7f:23:40:2b:6f:21:7a:ca:b1:db:52:d1:28:
         67:9a:59:30:11:e2:7a:78:f0:0b:1c:63:39:53:e7:28:85:b2:
         6d:dd:69:61:d0:ff:06:02:66:e1:90:5c:73:a7:10:0a:bd:0a:
         77:5d:f8:01:a5:c5:00:76:ae:e6:8d:8a:52:89:a6:b6:01:a6:
         ce:02:f2:9d:3d:fd:a9:c9:4c:ae:bb:0b:4a:41:b8:60:4f:f6:
         58:ec:ea:14:d1:8a:77:68:c7:8a:ea:0d:97:5d:50:d0:74:38:
         55:b7:bb:e4:d1:92:23:df:1f:60:47:08:ea:fb:97:8f:b7:a8:
         24:18:ff:31:fa:48:03:e0:20:1f:33:10:c2:c7:3b:36:5e:57:
         25:cc:9d:6b:58:3a:29:33:e3:28:16:70:6a:1f:ad:6c:67:71:
         ca:2e:4d:83:ac:55:3b:8c:c5:30:08:b1:87:f5:f8:fa:57:c1:
         7a:5b:2c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:18:09 2025 by rpki-client