Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
File:                     oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json)
Hash identifier:          l7hppZzjRiNYQfe/kTt0yPuuW71C2MZCmx3x665+Hvg=
Subject key identifier:   80:7F:C3:68:22:7F:4E:38:B4:D0:CD:98:2E:60:44:A9:67:AE:F2:15
Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
Certificate issuer:       /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Certificate serial:       0CF7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
Manifest number:          0CF2
Signing time:             Fri 22 Nov 2024 00:46:16 +0000
Manifest this update:     Fri 22 Nov 2024 00:46:16 +0000
Manifest next update:     Sun 24 Nov 2024 00:46:16 +0000
Files and hashes:         1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: g5F+F21WHslQyJd8ObMe4mF4nCFPu2HLlB4KSw2CWjg=)
                          2: FE5120C28FC111EDA79FCAC6F1222468.roa (hash: lagFk2mFf27o4rt0Ohp9C1TojQSFtfsxgyTlz5cUfvY=)
                          3: 3C9EDFE23B6911EEA2301F794AD9E6FC.roa (hash: wWzG/QoAuMYgq7222Q1LjDeYdIF1ogj08piOCTP/j4s=)
                          4: 89433AF2042E11EBA6782612F8AEA228.roa (hash: fYVRQ0io2BTLFn2lqVJHMZb8a+nPwuovmeRLf5YAMDY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3319 (0xcf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
        Validity
            Not Before: Nov 22 00:46:16 2024 GMT
            Not After : Nov 24 00:46:16 2024 GMT
        Subject: CN=673fd458-5ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:0b:5e:c9:3d:04:33:e8:c3:e8:7b:db:87:
                    14:31:9c:c9:01:8d:38:95:b9:3a:85:a0:ff:9a:78:
                    bd:2b:71:7e:3d:fd:c1:bf:f3:90:d1:9a:30:c8:8e:
                    18:5f:80:b1:e7:fd:87:e1:2a:4a:66:a7:38:e5:e2:
                    39:3b:1d:4e:91:c6:3d:a8:77:72:30:89:74:0e:97:
                    d5:ab:b0:4c:49:94:e1:0a:b4:85:fa:70:b5:49:19:
                    9f:85:37:ca:89:f1:58:ad:e4:85:00:71:31:18:54:
                    e4:51:85:2e:df:13:b9:75:cc:ab:fa:7a:73:26:8f:
                    ca:ee:cc:85:8d:ab:09:c5:f0:c9:7b:77:8c:5a:4a:
                    09:2d:fc:f3:4c:ad:77:a3:a0:1a:1f:ca:ba:4c:c3:
                    0e:03:a2:ff:fe:1b:5e:f5:8d:ea:c9:01:72:88:c8:
                    cb:8f:4a:45:de:03:38:b8:aa:4e:42:e6:49:b7:c2:
                    bb:47:26:db:26:2b:c9:4d:0e:0f:8d:3a:5b:27:a0:
                    38:2f:d9:53:ad:c1:ff:14:07:ab:99:00:16:07:70:
                    0a:1b:1b:41:b9:79:e2:12:b0:be:87:fb:8f:16:59:
                    cf:cf:6c:7f:03:80:ec:97:ac:b7:a0:76:0a:a4:d3:
                    5d:2f:6f:f4:5e:45:ec:96:68:3c:68:dc:b6:e0:0e:
                    56:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7F:C3:68:22:7F:4E:38:B4:D0:CD:98:2E:60:44:A9:67:AE:F2:15
            X509v3 Authority Key Identifier:
                keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:d6:af:aa:44:a9:cd:21:18:c1:b6:a8:1c:39:cc:9a:32:
         43:a9:77:66:a6:4f:54:a6:92:b2:e5:71:74:b7:04:e4:0a:a3:
         a9:d1:1c:f2:89:5a:c3:c7:63:ff:ef:07:c4:5e:97:2a:d0:1b:
         a2:3e:21:70:ab:a5:b9:35:56:a3:ed:94:96:0d:57:29:76:61:
         57:0e:7a:fc:14:8f:ec:a2:24:0a:64:3c:d8:e6:e4:ec:1b:87:
         82:04:63:06:b1:30:75:64:37:fd:94:78:21:49:f5:4f:59:3f:
         8d:c1:8c:c5:17:16:5d:2a:d8:0f:e5:9a:41:ff:88:2d:a9:28:
         69:22:34:5d:8d:91:7d:a7:d0:bb:49:ed:80:d3:1f:77:0e:3c:
         8f:ce:a5:ee:79:4a:88:ee:87:b9:32:a9:7f:6a:2b:0b:a6:d5:
         5d:d6:b1:7d:1a:de:55:30:74:2f:fd:b0:f2:e2:c1:11:ca:e6:
         92:74:54:ea:9f:5a:e2:2d:3a:71:ec:09:51:86:d4:58:a0:62:
         41:30:e6:61:c1:a0:a4:c6:ad:65:56:30:19:83:22:5f:a9:f5:
         a9:2a:5a:d6:0b:88:74:b6:b7:b2:84:a8:db:cc:9d:a7:03:c0:
         87:a2:d8:8b:38:38:f7:bb:4c:b2:48:38:4d:43:1f:e8:12:32:
         33:90:a4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:13 2024 by rpki-client on console-fra.rpki-client.org