Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
File:                     oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json)
Hash identifier:          hkSihHrR431ZoTdA7z8xW8llUrZzdpSCFrYRpcDc47c=
Subject key identifier:   C7:EE:B4:E1:2D:CF:2A:25:65:62:34:E1:E1:97:D6:66:62:88:42:E1
Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
Certificate issuer:       /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Certificate serial:       0C2A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
Manifest number:          0C25
Signing time:             Sat 04 May 2024 00:41:29 +0000
Manifest this update:     Sat 04 May 2024 00:41:28 +0000
Manifest next update:     Mon 06 May 2024 00:41:28 +0000
Files and hashes:         1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: 9QDfMAAeiwmYmv228nsNOWoIHNXE72LrDaeszPvyfB0=)
                          2: FE5120C28FC111EDA79FCAC6F1222468.roa (hash: lagFk2mFf27o4rt0Ohp9C1TojQSFtfsxgyTlz5cUfvY=)
                          3: 3C9EDFE23B6911EEA2301F794AD9E6FC.roa (hash: wWzG/QoAuMYgq7222Q1LjDeYdIF1ogj08piOCTP/j4s=)
                          4: 89433AF2042E11EBA6782612F8AEA228.roa (hash: fYVRQ0io2BTLFn2lqVJHMZb8a+nPwuovmeRLf5YAMDY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3114 (0xc2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
        Validity
            Not Before: May  4 00:41:28 2024 GMT
            Not After : May  6 00:41:28 2024 GMT
        Subject: CN=66358439-1f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:b2:87:32:92:81:95:6c:c2:1a:64:65:4c:
                    ea:f1:7d:ca:7a:f2:97:71:7e:23:a8:13:26:a6:5c:
                    58:00:2d:c6:23:8a:d1:36:26:04:b5:79:d0:90:28:
                    44:56:41:19:4d:b4:c7:6b:20:ec:a6:70:d0:05:b8:
                    8f:8c:11:3b:d1:c9:a4:22:d4:c2:fe:35:95:d4:bd:
                    10:7c:1b:50:f2:97:ea:2c:32:aa:45:18:0a:d6:a4:
                    bb:e7:f7:d6:63:71:9f:63:cf:ec:6f:17:85:6e:67:
                    3c:74:a6:49:0b:82:02:f9:f9:f6:a7:f4:38:db:fb:
                    b4:bf:17:23:b5:0a:09:4f:68:e4:ce:87:46:91:f6:
                    7b:0f:a2:d1:6f:cc:d2:84:83:c4:0a:0b:73:90:c4:
                    e6:d3:dc:af:bf:35:a4:ef:6c:74:5e:d8:fe:99:74:
                    f9:03:59:20:5b:ff:5e:1d:7f:d8:37:58:de:08:83:
                    7a:42:b4:8e:18:28:28:51:00:30:59:ff:6f:1c:94:
                    07:8c:86:16:aa:ef:54:fe:e9:80:3c:57:cd:d7:f9:
                    dc:ed:ec:94:1f:2c:e1:5d:c8:50:d1:24:f0:b4:fa:
                    b2:40:61:48:25:3c:2b:36:65:34:62:36:66:c6:9f:
                    cf:61:50:7d:67:b4:27:8f:79:a3:2c:e2:72:9c:2f:
                    bd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EE:B4:E1:2D:CF:2A:25:65:62:34:E1:E1:97:D6:66:62:88:42:E1
            X509v3 Authority Key Identifier:
                keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:82:d3:ed:08:a4:0e:71:bf:10:25:17:e6:0c:6a:68:45:c6:
         38:6a:f6:52:d7:ee:d9:55:b5:a8:a9:14:2a:12:89:71:4a:33:
         0f:ad:23:b6:d6:a9:fd:e6:59:53:bf:95:f9:78:f3:09:ac:3a:
         9d:56:c6:5d:c9:2d:f0:86:0b:2f:20:a9:d8:51:cf:d5:b9:10:
         cf:97:0e:fa:4c:cc:97:e6:ef:24:38:5b:92:b2:66:93:9b:f8:
         a3:bd:fd:6b:9a:e0:cd:a0:29:f6:40:17:79:eb:35:4a:84:5e:
         8b:ff:c7:89:ff:40:40:4b:d1:42:90:44:bf:14:c7:3c:61:73:
         1f:1c:6d:fd:de:ad:0d:31:7b:c8:a0:46:22:08:c0:09:5e:b1:
         22:c4:15:1c:bc:50:78:ef:66:99:b4:5e:bb:72:27:8e:86:9e:
         f3:63:7e:9e:00:92:ac:7d:56:d0:d4:cf:8c:72:68:7c:10:b5:
         ba:25:a2:e5:46:67:ba:83:d7:b8:31:dc:dc:fd:a3:04:8c:a5:
         66:57:92:33:d1:83:76:ea:96:6d:5f:a8:61:d4:36:21:91:ae:
         c5:e1:d1:ec:0f:b4:c5:6d:02:64:a0:12:77:71:5f:3e:dd:c8:
         31:6d:2b:61:3f:47:12:1e:e9:05:66:da:76:0f:bb:a4:5c:4a:
         81:93:98:f2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDCowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTlCOEVBRjExMC8GA1UEBRMoQTEzNUUwMEI5OENCRjdEREY4QUFGMjYyMzg2RjhF
MTQwM0FBQzAxODAeFw0yNDA1MDQwMDQxMjhaFw0yNDA1MDYwMDQxMjhaMBgxFjAU
BgNVBAMTDTY2MzU4NDM5LTFmNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDR27KHMpKBlWzCGmRlTOrxfcp68pdxfiOoEyamXFgALcYjitE2JgS1edCQ
KERWQRlNtMdrIOymcNAFuI+METvRyaQi1ML+NZXUvRB8G1Dyl+osMqpFGArWpLvn
99ZjcZ9jz+xvF4VuZzx0pkkLggL5+fan9Djb+7S/FyO1CglPaOTOh0aR9nsPotFv
zNKEg8QKC3OQxObT3K+/NaTvbHRe2P6ZdPkDWSBb/14df9g3WN4Ig3pCtI4YKChR
ADBZ/28clAeMhhaq71T+6YA8V83X+dzt7JQfLOFdyFDRJPC0+rJAYUglPCs2ZTRi
NmbGn89hUH1ntCePeaMs4nKcL73JAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUx+60
4S3PKiVlYjTh4ZfWZmKIQuEwHwYDVR0jBBgwFoAUoTXgC5jL9934qvJiOG+OFAOq
wBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5QjhFL0ZFMjBEODIwQjEyMjExRTVCOTI5NEQ0QUY4QUVBMjI4L29UWGdD
NWpMOTkzNHF2SmlPRy1PRkFPcXdCZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29UWGdDNWpMOTkzNHF2SmlPRy1PRkFPcXdCZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTlCOEUvRkUyMEQ4MjBCMTIyMTFFNUI5Mjk0RDRBRjhB
RUEyMjgvb1RYZ0M1akw5OTM0cXZKaU9HLU9GQU9xd0JnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2gtPtCKQOcb8QJRfmDGpoRcY4avZS
1+7ZVbWoqRQqEolxSjMPrSO21qn95llTv5X5ePMJrDqdVsZdyS3whgsvIKnYUc/V
uRDPlw76TMyX5u8kOFuSsmaTm/ijvf1rmuDNoCn2QBd56zVKhF6L/8eJ/0BAS9FC
kES/FMc8YXMfHG393q0NMXvIoEYiCMAJXrEixBUcvFB472aZtF67cieOhp7zY36e
AJKsfVbQ1M+Mcmh8ELW6JaLlRme6g9e4Mdzc/aMEjKVmV5Iz0YN26pZtX6hh1DYh
ka7F4dHsD7TFbQJkoBJ3cV8+3cgxbSthP0cSHukFZtp2D7ukXEqBk5jy
-----END CERTIFICATE-----
Generated at Sat May 4 01:53:09 2024 by rpki-client on console-ams.rpki-client.org