Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
File:                     oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json)
Hash identifier:          WOIMbE9FoAVLBcCs7HYmHbO2K4KtZQ08p6Gp7Z69Ra8=
Subject key identifier:   2F:83:E0:0C:4A:0C:8E:C2:08:E3:6E:B3:B1:AA:FF:11:67:8C:27:82
Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
Certificate issuer:       /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Certificate serial:       0C47
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
Manifest number:          0C42
Signing time:             Mon 03 Jun 2024 00:41:18 +0000
Manifest this update:     Mon 03 Jun 2024 00:41:18 +0000
Manifest next update:     Wed 05 Jun 2024 00:41:18 +0000
Files and hashes:         1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: SEPSLuGg8c8UZTlnPQrMuBIrdcieWBIoDVJomku/+xk=)
                          2: FE5120C28FC111EDA79FCAC6F1222468.roa (hash: lagFk2mFf27o4rt0Ohp9C1TojQSFtfsxgyTlz5cUfvY=)
                          3: 3C9EDFE23B6911EEA2301F794AD9E6FC.roa (hash: wWzG/QoAuMYgq7222Q1LjDeYdIF1ogj08piOCTP/j4s=)
                          4: 89433AF2042E11EBA6782612F8AEA228.roa (hash: fYVRQ0io2BTLFn2lqVJHMZb8a+nPwuovmeRLf5YAMDY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3143 (0xc47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
        Validity
            Not Before: Jun  3 00:41:18 2024 GMT
            Not After : Jun  5 00:41:18 2024 GMT
        Subject: CN=665d112e-027d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:33:56:44:1f:57:f7:fd:51:54:98:ca:12:
                    e7:e6:6d:c7:64:c4:dd:d1:2b:32:19:fa:e2:b8:21:
                    a2:0e:d5:ab:5b:c7:ae:f9:2a:e7:b7:d7:86:87:0b:
                    c1:ae:03:7c:30:14:60:34:2d:7d:fa:d4:ae:94:87:
                    23:d5:97:04:aa:ba:18:36:4b:56:c6:18:08:17:9f:
                    0f:8b:ac:82:87:23:56:7c:45:2a:4a:74:9e:92:3e:
                    96:4e:55:c9:a9:1f:46:75:ed:2b:79:b3:03:d2:c0:
                    16:66:10:61:d1:fe:24:ef:79:f9:0f:2b:50:d6:20:
                    8c:2e:b2:e2:be:fd:24:af:d5:60:de:8d:9d:2e:ab:
                    82:df:10:e2:2b:65:1d:16:ba:65:de:e4:ce:01:71:
                    7d:af:ba:53:d8:fa:fd:8c:11:09:d0:65:ee:51:cb:
                    b5:ee:4d:ad:d4:21:63:95:1e:12:8c:54:12:72:27:
                    b2:e7:7d:f3:c9:5d:21:c1:c1:f6:cf:4a:52:ed:04:
                    f0:fb:8d:d4:85:62:fb:fc:db:28:1a:5e:b1:68:ad:
                    7d:de:43:98:00:d5:9c:c8:cb:83:ec:1b:85:16:3f:
                    62:41:21:c3:35:cb:6c:f1:0c:32:e2:ff:a4:e0:78:
                    f6:e6:e6:61:b4:62:02:ab:db:0a:d3:f6:36:c4:4a:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:83:E0:0C:4A:0C:8E:C2:08:E3:6E:B3:B1:AA:FF:11:67:8C:27:82
            X509v3 Authority Key Identifier:
                keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fd:00:e7:50:82:35:e9:1b:1b:7a:7a:cd:94:e0:48:2a:37:
         ca:ee:fc:02:18:1a:13:f6:9b:40:aa:e0:04:71:4d:3d:ff:53:
         fa:27:e8:e2:3f:6a:5e:f3:8c:a2:f0:b3:e2:84:a4:e0:4a:33:
         60:f0:b2:a0:64:1c:24:b0:87:c3:f9:70:d0:28:6a:a7:48:48:
         40:89:e6:89:c8:36:74:60:53:fc:42:9f:d8:24:29:27:3b:29:
         ed:18:2b:5b:55:9f:2b:d3:7c:4d:8f:e5:6e:62:ea:fb:3d:fb:
         f2:d0:c1:54:f7:77:e1:2d:44:f8:fb:3f:c1:48:5c:b0:1b:9e:
         df:49:b1:a6:79:b0:ac:7e:b5:2b:c6:96:52:4a:38:5c:e3:32:
         7f:49:45:54:79:1c:79:fb:a3:75:af:ff:84:bf:da:03:00:6d:
         9e:37:88:ba:a7:45:56:12:26:27:28:6b:dc:9c:b7:87:10:7b:
         77:f6:b8:e2:e2:9e:8f:c9:f7:4e:74:30:b6:20:04:a0:a6:09:
         8f:5f:7a:36:1f:c0:92:75:3b:36:8b:34:c8:4a:2d:2e:bc:40:
         14:61:fd:98:08:87:e6:4a:1d:bc:37:1c:64:ac:dc:5f:34:df:
         37:ae:8e:18:5b:2b:8f:74:a5:56:ff:4f:72:d6:2e:95:79:13:
         b2:e7:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:23:38 2024 by rpki-client on console-fra.rpki-client.org