Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
File:                     oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json)
Hash identifier:          uNYqtB4QKJ3ygmWgBdXo3U4tdmBMHC3TpqPDcVMao2k=
Subject key identifier:   1D:B4:28:A2:12:13:89:CA:EF:2D:E3:F4:2E:C5:C7:9C:EC:9D:76:C9
Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
Certificate issuer:       /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Certificate serial:       0DC1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
Manifest number:          0DBC
Signing time:             Fri 06 Jun 2025 01:01:09 +0000
Manifest this update:     Fri 06 Jun 2025 01:01:08 +0000
Manifest next update:     Sun 08 Jun 2025 01:01:08 +0000
Files and hashes:         1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: Baq+6UtmzOtMYLkCr2eORr15B9U39IXMpdq3u9a5NOY=)
                          2: FE5120C28FC111EDA79FCAC6F1222468.roa (hash: lagFk2mFf27o4rt0Ohp9C1TojQSFtfsxgyTlz5cUfvY=)
                          3: 3C9EDFE23B6911EEA2301F794AD9E6FC.roa (hash: wWzG/QoAuMYgq7222Q1LjDeYdIF1ogj08piOCTP/j4s=)
                          4: 89433AF2042E11EBA6782612F8AEA228.roa (hash: fYVRQ0io2BTLFn2lqVJHMZb8a+nPwuovmeRLf5YAMDY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3521 (0xdc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAF, serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
        Validity
            Not Before: Jun  6 01:01:08 2025 GMT
            Not After : Jun  8 01:01:08 2025 GMT
        Subject: CN=68423dd4-9eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:3f:65:2d:46:a8:1c:d8:2d:5c:3c:43:cc:
                    f0:66:41:ab:81:6e:c5:cf:5f:90:74:c7:c5:0d:5d:
                    1d:15:5a:dc:4f:6c:85:53:15:85:ef:a7:5d:00:33:
                    d0:a7:cb:27:20:db:d0:f3:6c:9f:30:b3:52:86:56:
                    4c:2b:01:70:ea:2b:23:73:e8:d3:bc:a9:e9:6d:89:
                    fc:6a:cd:7b:a3:03:03:39:e7:90:c5:f8:8d:19:65:
                    86:e6:79:07:dd:38:4b:71:13:87:84:06:c2:5f:e5:
                    35:6e:f6:ee:6b:80:fc:7f:54:18:49:8c:79:b2:43:
                    2b:00:e0:81:d0:d8:17:26:53:d8:1a:1f:42:86:d6:
                    17:ad:36:b9:59:d5:bf:21:34:ed:61:da:d3:b0:ee:
                    16:94:f8:40:e8:ad:67:08:61:db:62:ab:ab:36:9a:
                    9e:72:77:f5:8e:64:bc:04:bf:33:a4:37:68:95:a0:
                    a0:9b:a9:cb:eb:9c:65:fd:c3:b2:07:ef:c4:ca:99:
                    08:a0:c3:9b:1e:18:2b:15:b7:4c:bb:eb:39:aa:91:
                    4d:da:8a:6e:5c:24:b1:d0:6a:64:ee:f3:0b:92:7e:
                    14:ca:2b:11:4a:32:42:86:76:84:cf:57:b4:2e:b0:
                    be:5f:9b:ff:2f:0e:dc:e5:51:b1:69:ea:80:52:a6:
                    0a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B4:28:A2:12:13:89:CA:EF:2D:E3:F4:2E:C5:C7:9C:EC:9D:76:C9
            X509v3 Authority Key Identifier:
                keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0e:dc:42:96:36:14:ab:87:29:14:06:b7:5f:90:3e:2d:87:
         a9:fe:05:22:1f:67:d9:61:6a:66:42:bb:9c:2a:bc:90:dc:ba:
         8e:4c:30:30:ed:80:f1:02:5d:e0:f0:61:29:ca:88:9e:26:45:
         1a:f7:82:3a:97:2b:67:5e:c3:c5:37:6c:e0:03:88:60:f1:61:
         b3:01:2a:76:65:7d:56:e4:02:f1:24:bb:99:30:70:4b:06:df:
         63:3a:8c:d8:d3:a1:5b:9d:25:d8:f6:97:68:37:2f:87:6b:72:
         fa:1a:86:e9:c2:30:49:04:a6:b1:0f:1e:45:c5:51:2e:c0:fb:
         63:60:cf:e0:7b:e1:97:37:4c:99:1b:49:83:ff:95:06:69:8b:
         fb:02:99:2f:f6:f2:14:68:a1:10:ef:bd:08:e0:a4:72:b2:72:
         55:f1:4a:ca:fc:5a:4e:90:b2:a3:91:b3:40:84:15:eb:af:ec:
         d0:c5:c0:1a:8b:78:f6:1d:e6:d4:18:4b:e6:b1:7b:cb:b6:45:
         19:9e:ed:9c:c8:1b:13:34:b0:60:26:85:21:c2:13:84:bd:3f:
         33:5a:2b:07:b1:3b:61:8b:42:80:41:79:6f:70:05:b1:5d:7c:
         e5:97:d8:40:64:a6:5b:0e:e9:a7:91:dc:2d:b2:b1:16:99:e1:
         fd:65:79:4d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTlCOEVBRjExMC8GA1UEBRMoQTEzNUUwMEI5OENCRjdEREY4QUFGMjYyMzg2RjhF
MTQwM0FBQzAxODAeFw0yNTA2MDYwMTAxMDhaFw0yNTA2MDgwMTAxMDhaMBgxFjAU
BgNVBAMTDTY4NDIzZGQ0LTllYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnDD9lLUaoHNgtXDxDzPBmQauBbsXPX5B0x8UNXR0VWtxPbIVTFYXvp10A
M9Cnyycg29DzbJ8ws1KGVkwrAXDqKyNz6NO8qeltifxqzXujAwM555DF+I0ZZYbm
eQfdOEtxE4eEBsJf5TVu9u5rgPx/VBhJjHmyQysA4IHQ2BcmU9gaH0KG1hetNrlZ
1b8hNO1h2tOw7haU+EDorWcIYdtiq6s2mp5yd/WOZLwEvzOkN2iVoKCbqcvrnGX9
w7IH78TKmQigw5seGCsVt0y76zmqkU3aim5cJLHQamTu8wuSfhTKKxFKMkKGdoTP
V7QusL5fm/8vDtzlUbFp6oBSpgqRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUHbQo
ohITicrvLeP0LsXHnOyddskwHwYDVR0jBBgwFoAUoTXgC5jL9934qvJiOG+OFAOq
wBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5QjhFL0ZFMjBEODIwQjEyMjExRTVCOTI5NEQ0QUY4QUVBMjI4L29UWGdD
NWpMOTkzNHF2SmlPRy1PRkFPcXdCZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29UWGdDNWpMOTkzNHF2SmlPRy1PRkFPcXdCZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTlCOEUvRkUyMEQ4MjBCMTIyMTFFNUI5Mjk0RDRBRjhB
RUEyMjgvb1RYZ0M1akw5OTM0cXZKaU9HLU9GQU9xd0JnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABDtxCljYUq4cpFAa3X5A+LYep/gUi
H2fZYWpmQrucKryQ3LqOTDAw7YDxAl3g8GEpyoieJkUa94I6lytnXsPFN2zgA4hg
8WGzASp2ZX1W5ALxJLuZMHBLBt9jOozY06FbnSXY9pdoNy+Ha3L6GobpwjBJBKax
Dx5FxVEuwPtjYM/ge+GXN0yZG0mD/5UGaYv7Apkv9vIUaKEQ770I4KRysnJV8UrK
/FpOkLKjkbNAhBXrr+zQxcAai3j2HebUGEvmsXvLtkUZnu2cyBsTNLBgJoUhwhOE
vT8zWisHsTthi0KAQXlvcAWxXXzll9hAZKZbDumnkdwtsrEWmeH9ZXlN
-----END CERTIFICATE-----
Generated at Fri Jun 6 12:33:54 2025 by rpki-client