Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
File:                     oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json)
Hash identifier:          iikAVWL52ZlDvud7iIHmTAPpjAO116QakQAzrcfd5Mg=
Subject key identifier:   4D:9D:0A:57:F0:2E:5E:52:F8:4C:54:77:DF:B9:42:35:BC:41:B1:21
Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
Certificate issuer:       /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Certificate serial:       0DF1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
Manifest number:          0DEC
Signing time:             Wed 23 Jul 2025 01:01:17 +0000
Manifest this update:     Wed 23 Jul 2025 01:01:16 +0000
Manifest next update:     Fri 25 Jul 2025 01:01:16 +0000
Files and hashes:         1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: QGMVqRJZgujXy6kttO127skvzDrfy2zjEpS4NU6fKEk=)
                          2: FE5120C28FC111EDA79FCAC6F1222468.roa (hash: lagFk2mFf27o4rt0Ohp9C1TojQSFtfsxgyTlz5cUfvY=)
                          3: 3C9EDFE23B6911EEA2301F794AD9E6FC.roa (hash: wWzG/QoAuMYgq7222Q1LjDeYdIF1ogj08piOCTP/j4s=)
                          4: 89433AF2042E11EBA6782612F8AEA228.roa (hash: fYVRQ0io2BTLFn2lqVJHMZb8a+nPwuovmeRLf5YAMDY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Jul 2025 00:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3569 (0xdf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAF, serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
        Validity
            Not Before: Jul 23 01:01:16 2025 GMT
            Not After : Jul 25 01:01:16 2025 GMT
        Subject: CN=6880345d-d201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:55:94:3d:13:83:b6:2b:e9:a1:63:4c:d2:
                    08:93:87:0c:b1:ef:a4:d7:8c:e8:0f:0e:71:d5:00:
                    76:94:75:6d:4d:72:88:27:6c:dc:71:e8:df:e6:c0:
                    86:d0:bb:ef:6c:d0:c9:cd:4d:67:ef:95:7f:74:d5:
                    01:a6:08:90:03:a8:81:4e:9c:fa:4c:00:85:36:fb:
                    a4:9a:c5:ba:1c:7e:bb:9d:37:de:cd:3f:79:0b:95:
                    39:5c:6a:f5:a0:6e:fc:c9:d6:26:1f:b7:cc:d9:a5:
                    32:ec:bd:3d:54:57:e6:ea:1b:68:ef:69:9c:a3:8f:
                    26:75:42:40:2e:bd:ce:0e:1a:8f:55:2c:e9:62:7e:
                    62:0b:d5:cb:10:0e:77:5f:26:ff:85:29:04:1e:ff:
                    d1:a2:2e:2f:35:b6:89:96:68:0a:43:2d:b2:ce:9f:
                    e3:a9:62:5e:89:f7:55:a2:fe:91:de:8b:40:ea:09:
                    0f:cb:ff:fd:ab:92:0a:d3:31:4b:7e:e7:20:31:4a:
                    ee:82:0d:92:54:00:93:3f:2a:be:38:a5:52:94:57:
                    e9:26:98:de:87:a8:46:e7:4b:3d:33:8b:59:2f:2b:
                    91:c8:b6:dd:86:18:0d:b0:12:ac:7d:38:28:af:e7:
                    08:7b:e8:37:3d:2f:84:9d:bf:84:b4:b1:30:bb:bf:
                    06:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9D:0A:57:F0:2E:5E:52:F8:4C:54:77:DF:B9:42:35:BC:41:B1:21
            X509v3 Authority Key Identifier:
                keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:14:c2:b8:6a:63:a2:3f:20:10:e6:ff:92:11:2f:95:a0:19:
         6a:6d:c0:62:57:b6:be:de:e1:30:de:3d:c4:df:22:27:70:a2:
         dc:26:cd:54:19:8e:18:0b:1a:6c:6f:e9:2c:0a:3e:2c:44:91:
         5a:17:52:45:45:ea:68:c4:24:e5:37:b3:85:47:51:84:56:28:
         2d:85:6a:09:83:be:89:1c:7f:87:46:f6:90:cc:87:1b:93:2e:
         3c:f3:b6:1f:c1:fd:3c:85:1e:64:18:e6:ad:f4:b6:ef:e4:c7:
         5c:b0:c8:81:f5:bb:f2:ac:b3:96:43:93:6c:71:a0:d9:6e:23:
         d7:07:4b:a9:2f:4f:65:74:41:08:ef:76:2c:47:aa:1c:ef:0b:
         28:bf:ce:31:0a:9e:a8:23:be:55:2b:93:07:16:de:47:fd:34:
         30:7e:88:1d:e0:65:43:a7:ba:56:31:f8:ce:00:17:90:cb:9b:
         d0:d1:22:72:29:99:99:c8:20:c0:6e:e5:7d:85:3f:39:08:e4:
         48:00:6e:3d:4e:dd:6b:83:6e:e1:e1:c3:16:6f:41:1f:ec:04:
         0e:d6:26:f1:fd:aa:4c:07:0f:b2:df:8e:77:94:ef:06:f4:cb:
         91:fd:b0:04:29:19:51:8e:6a:2f:ad:e1:6e:80:38:41:5f:0c:
         4c:d8:52:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:58:13 2025 by rpki-client