Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
File:                     oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json)
Hash identifier:          +jCoYvFubz6GIOXJw2RoRz3miCCgihxhYcOaQLak+8U=
Subject key identifier:   4D:E4:EE:7B:22:52:7F:83:A2:A6:96:2B:0F:5D:30:8E:2D:31:75:26
Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
Certificate issuer:       /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Certificate serial:       0E01
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
Manifest number:          0DFC
Signing time:             Fri 08 Aug 2025 01:01:08 +0000
Manifest this update:     Fri 08 Aug 2025 01:01:08 +0000
Manifest next update:     Sun 10 Aug 2025 01:01:08 +0000
Files and hashes:         1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: J7uXARpv4DM4mCsW9ovYgimhSfkpwx+taMTawo3/3WQ=)
                          2: FE5120C28FC111EDA79FCAC6F1222468.roa (hash: lagFk2mFf27o4rt0Ohp9C1TojQSFtfsxgyTlz5cUfvY=)
                          3: 3C9EDFE23B6911EEA2301F794AD9E6FC.roa (hash: wWzG/QoAuMYgq7222Q1LjDeYdIF1ogj08piOCTP/j4s=)
                          4: 89433AF2042E11EBA6782612F8AEA228.roa (hash: fYVRQ0io2BTLFn2lqVJHMZb8a+nPwuovmeRLf5YAMDY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 10 Aug 2025 00:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3585 (0xe01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAF, serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
        Validity
            Not Before: Aug  8 01:01:08 2025 GMT
            Not After : Aug 10 01:01:08 2025 GMT
        Subject: CN=68954c54-ad7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:23:4f:54:43:55:4f:1f:9d:b4:f7:26:27:
                    02:99:3a:1c:f0:96:b8:e1:43:8e:7f:99:53:69:97:
                    37:1c:8a:b9:a2:00:3d:33:9c:45:86:98:7a:d7:08:
                    21:c6:c1:27:b7:b6:b6:65:dd:1f:51:f2:14:f4:98:
                    56:b6:20:f4:0f:3a:4f:2c:0d:c7:b7:ee:93:bb:c9:
                    57:69:18:46:cf:f5:84:07:31:b8:cf:08:0d:d2:00:
                    ae:00:44:94:29:3c:57:37:d5:22:ae:67:9d:e8:8a:
                    74:e5:89:23:d4:0c:0c:aa:86:89:b1:e3:7c:26:6c:
                    e1:10:24:95:c4:43:17:17:1d:74:92:18:b2:f1:a8:
                    af:6a:e8:f3:83:fa:8c:5e:52:f1:89:43:44:bd:e9:
                    8d:d9:05:05:a5:80:fd:62:e4:70:ea:e7:0e:cb:b0:
                    19:91:a1:4b:57:ec:1b:fc:11:94:61:17:af:ec:99:
                    9e:74:92:9f:b7:e9:db:42:56:d9:a0:0a:c1:e7:3e:
                    37:3d:bf:21:5b:a1:f5:5d:e6:02:e2:71:09:c8:cd:
                    9d:61:54:57:33:4b:ef:e9:f4:3a:f9:64:39:9a:9e:
                    7c:40:7e:a8:85:29:d7:d1:6f:ff:72:3b:e2:6e:39:
                    d0:e3:d9:25:4d:fb:0e:f2:48:cf:8c:c1:8d:c9:84:
                    32:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E4:EE:7B:22:52:7F:83:A2:A6:96:2B:0F:5D:30:8E:2D:31:75:26
            X509v3 Authority Key Identifier:
                keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e4:6f:a0:3e:49:01:43:27:54:ff:28:91:00:9f:a7:ad:ba:
         19:ad:ba:74:db:67:9d:f0:9f:88:14:13:7c:07:f2:3a:20:97:
         db:ae:b8:93:13:d8:3f:4a:cc:df:7c:37:c0:fb:36:28:24:f3:
         64:0d:76:8a:89:8a:19:a3:6d:04:9c:92:f1:ae:d8:00:37:d4:
         1d:34:ea:ba:36:45:f0:a3:e0:1f:3d:7e:2a:4e:56:5d:06:fe:
         16:5b:0d:a6:f6:c4:3a:96:46:d3:30:0b:bc:d3:c2:31:58:19:
         49:6b:5c:4a:26:11:22:27:51:b7:4f:6c:29:8e:8d:ed:8a:54:
         3e:76:12:b6:6b:3b:68:8a:74:80:94:b1:65:03:e6:fc:af:a2:
         51:ef:98:68:93:16:b7:0a:a9:8d:ae:30:71:77:ef:c7:e3:7e:
         bd:cd:1b:5d:4e:69:35:a2:43:ee:23:71:04:4c:70:42:05:c3:
         d7:c4:7a:1e:e4:54:ff:ae:c6:a0:1c:0b:45:5c:a1:b8:b2:03:
         ec:a9:54:f0:4b:ee:76:46:fe:3d:09:07:c7:4f:9d:99:7b:f1:
         4d:94:bc:b5:8c:2d:a4:4e:39:85:db:ab:9a:1e:ec:bd:49:86:
         87:c5:18:33:84:e7:43:56:91:22:3e:d1:41:8e:7c:70:c8:39:
         b8:d1:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:54:29 2025 by rpki-client