Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
File:                     h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft (raw, json)
Hash identifier:          IH5VEVv6mQ3cvbcMabE0C0hs/QVuVmB4yzQYrxIl4xw=
Subject key identifier:   E7:1A:A1:24:06:60:15:83:6F:1C:F3:4A:B4:0F:98:D5:F0:0A:8E:99
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Certificate issuer:       /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial:       03F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
Manifest number:          03EB
Signing time:             Fri 25 Apr 2025 03:12:17 +0000
Manifest this update:     Fri 25 Apr 2025 03:12:16 +0000
Manifest next update:     Sun 27 Apr 2025 03:12:16 +0000
Files and hashes:         1: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl (hash: 84baLS9oYG0MQeymnxip4Z3XLnnj08UhdX00Ib14syg=)
                          2: 05B9E9DAD17D11EF95C142AC762E951A.roa (hash: Q5K3U35zeD2bPxUENFXhYZ30yazfguSFLvJ7/QgC/Ko=)
                          3: 23ABB3A2D17C11EFB156ACA7762E951A.roa (hash: JnjC+h0l3NXiTvyHQEAdv5zJ5PF/QKPMrh4aJd626Kc=)
                          4: 9D138D4CD17B11EF890791A3762E951A.roa (hash: YtOzzIAfQEjwyVcS0gx7UZKyYqAnn55LoVoqNlpKMPw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1012 (0x3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
        Validity
            Not Before: Apr 25 03:12:16 2025 GMT
            Not After : Apr 27 03:12:16 2025 GMT
        Subject: CN=680afd91-84ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:4f:0b:2b:0f:5e:89:b2:85:c5:55:d1:7a:
                    bd:25:74:7b:6c:b1:b8:a6:64:6b:70:69:f4:db:b8:
                    86:2c:2e:4a:5b:2d:fd:22:d6:92:8e:9f:24:e5:fb:
                    0f:c5:c0:4a:c9:95:3e:d0:a9:40:cd:cb:59:e0:68:
                    b0:94:cd:21:84:36:f0:04:b5:93:c4:23:b0:1a:8a:
                    80:7a:de:6a:0a:0c:37:03:9f:0b:81:72:69:c4:1b:
                    1b:1e:8f:d0:22:6c:cd:d8:1e:95:a0:0f:76:59:8a:
                    66:ee:5c:f2:f8:08:a1:11:a2:40:43:ea:fa:3f:c4:
                    2f:57:a6:57:3e:98:a9:0d:22:c7:ea:93:43:a9:12:
                    e5:d5:54:d6:54:af:ff:13:34:24:bf:96:c2:e6:0b:
                    2a:09:aa:cd:e8:45:56:b9:42:a4:d1:c0:b2:82:1b:
                    da:30:b5:57:e9:07:82:89:a9:98:a7:77:66:cb:40:
                    bc:e8:83:f5:42:be:b2:cb:b4:b7:4f:fd:4d:25:52:
                    3e:1a:bd:64:51:5f:2c:21:d8:44:94:a4:a1:83:1a:
                    53:01:63:86:fb:b7:d4:f5:c9:65:f0:78:41:62:35:
                    01:44:8b:fe:b6:45:86:ad:8b:3a:96:a4:94:5e:7d:
                    d7:ff:28:c3:d9:ab:21:10:1f:5c:05:ae:ba:ba:1f:
                    a2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1A:A1:24:06:60:15:83:6F:1C:F3:4A:B4:0F:98:D5:F0:0A:8E:99
            X509v3 Authority Key Identifier:
                keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:17:bb:34:05:a0:74:d4:13:78:73:fd:a1:40:03:d2:73:7b:
         3f:f7:0a:b0:b4:22:4b:63:df:38:ae:9f:b4:d4:04:3a:71:b8:
         52:85:a1:db:31:ff:8c:38:33:5c:bf:a0:45:f3:76:a2:62:63:
         54:a4:21:68:de:60:18:67:f1:5a:9e:8f:d0:00:a4:a6:bb:25:
         69:18:3f:61:52:4e:a5:fc:7d:b1:80:a6:f8:e0:c0:5c:b0:94:
         38:1c:f0:7c:14:b0:6d:3e:9f:6c:59:d4:15:bb:ac:03:e7:4e:
         70:38:d9:33:7b:93:1e:28:f4:aa:38:7c:c6:a4:3e:53:2a:d1:
         ba:e4:2a:60:db:93:55:b7:4a:28:24:d1:10:8f:9b:43:0b:c5:
         d4:77:e1:ee:72:4a:62:3d:29:9f:3a:55:53:17:92:8b:a0:6c:
         d9:5d:23:89:cf:99:18:c5:28:33:b6:aa:8b:47:32:93:1c:da:
         89:b5:b6:6c:ef:1a:5d:68:9b:8e:f4:be:76:f6:70:e6:1a:35:
         1b:35:43:4d:d4:82:a2:57:fc:a9:7f:ea:7d:33:9c:17:60:bd:
         07:64:aa:41:ae:5a:ac:b1:01:c2:90:c9:df:c6:5c:53:56:6b:
         b6:73:1e:e0:41:31:af:66:47:7c:d7:52:e1:3d:de:de:54:7d:
         e0:07:7c:84
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA/QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU3MjFBRjExMC8GA1UEBRMoODdGM0FEQzNBNTBBNzc3NjM4MzZBRThFMzdGNUQ5
Mzg2OTU3MTFDQTAeFw0yNTA0MjUwMzEyMTZaFw0yNTA0MjcwMzEyMTZaMBgxFjAU
BgNVBAMTDTY4MGFmZDkxLTg0YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHXk8LKw9eibKFxVXRer0ldHtssbimZGtwafTbuIYsLkpbLf0i1pKOnyTl
+w/FwErJlT7QqUDNy1ngaLCUzSGENvAEtZPEI7AaioB63moKDDcDnwuBcmnEGxse
j9AibM3YHpWgD3ZZimbuXPL4CKERokBD6vo/xC9Xplc+mKkNIsfqk0OpEuXVVNZU
r/8TNCS/lsLmCyoJqs3oRVa5QqTRwLKCG9owtVfpB4KJqZind2bLQLzog/VCvrLL
tLdP/U0lUj4avWRRXywh2ESUpKGDGlMBY4b7t9T1yWXweEFiNQFEi/62RYatizqW
pJRefdf/KMPZqyEQH1wFrrq6H6JlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5xqh
JAZgFYNvHPNKtA+Y1fAKjpkwHwYDVR0jBBgwFoAUh/Otw6UKd3Y4Nq6ON/XZOGlX
EcowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NzIxLzREODU3OEUwMzdGRDExRURCOEEyQURGOUYxMjIyNDY4L2hfT3R3
NlVLZDNZNE5xNk9OX1haT0dsWEVjby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hfT3R3NlVLZDNZNE5xNk9OX1haT0dsWEVjby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDU3MjEvNEQ4NTc4RTAzN0ZEMTFFREI4QTJBREY5RjEy
MjI0NjgvaF9PdHc2VUtkM1k0TnE2T05fWFpPR2xYRWNvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0F7s0BaB01BN4c/2hQAPSc3s/9wqw
tCJLY984rp+01AQ6cbhShaHbMf+MODNcv6BF83aiYmNUpCFo3mAYZ/Fano/QAKSm
uyVpGD9hUk6l/H2xgKb44MBcsJQ4HPB8FLBtPp9sWdQVu6wD505wONkze5MeKPSq
OHzGpD5TKtG65Cpg25NVt0ooJNEQj5tDC8XUd+HuckpiPSmfOlVTF5KLoGzZXSOJ
z5kYxSgztqqLRzKTHNqJtbZs7xpdaJuO9L529nDmGjUbNUNN1IKiV/ypf+p9M5wX
YL0HZKpBrlqssQHCkMnfxlxTVmu2cx7gQTGvZkd811LhPd7eVH3gB3yE
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:08 2025 by rpki-client on console.sobornost.net