Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
File:                     ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft (raw, json)
Hash identifier:          +wLVF8RPMfh7KV4Ry9K9bsqf7K3ztzTdgHkzfT+AIKQ=
Subject key identifier:   18:B6:8B:A3:AA:4B:B0:B4:E3:5E:68:14:78:89:6C:39:C4:F2:DD:47
Authority key identifier: 64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52
Certificate issuer:       /CN=F36185D8AF/serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
Certificate serial:       B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
Manifest number:          B1
Signing time:             Fri 31 Jan 2025 03:04:56 +0000
Manifest this update:     Fri 31 Jan 2025 03:04:56 +0000
Manifest next update:     Sun 02 Feb 2025 03:04:56 +0000
Files and hashes:         1: ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl (hash: ojwzrjTkhC/vUhZ50SBY2c/U4NqwSJCkR99qs2urYbo=)
                          2: 17AC05D05BD811EF91C62F65762E951A.roa (hash: pGO0PAidVvZBgK+RWqWHGbvgRG1IKwi6oTcbF8OQHYY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36185D8AF/serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
        Validity
            Not Before: Jan 31 03:04:56 2025 GMT
            Not After : Feb  2 03:04:56 2025 GMT
        Subject: CN=679c3dd8-1e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:c2:af:e1:e0:e2:50:d7:48:f6:7e:14:83:
                    2f:f4:c0:96:f2:01:0d:bf:e2:bb:2d:ff:f4:00:2d:
                    a7:ca:d7:97:bf:ed:a7:db:19:16:68:82:4b:6e:ca:
                    99:cb:d0:72:ce:71:be:41:e8:40:6f:88:33:5a:35:
                    c5:ee:a3:c3:e2:41:27:b2:2a:35:3e:e7:f8:27:ee:
                    8c:71:d4:f9:b9:49:cc:dd:0e:44:93:4d:34:fd:88:
                    3a:6a:ac:c0:b6:03:ec:fe:c9:5b:b3:fc:3e:ca:79:
                    8c:03:5c:d7:c4:8c:e0:c3:50:e4:a0:35:c6:9b:54:
                    c5:83:c9:c1:d2:89:a0:92:18:82:af:a5:10:5b:3a:
                    f1:81:2e:0c:5f:c8:23:a7:9c:a7:a3:e5:e9:e6:cd:
                    1d:0a:d8:15:c0:74:f3:ed:fe:3d:4a:5c:25:c4:2c:
                    3c:a4:f5:0f:8c:f0:e5:f6:21:29:43:8a:06:9f:0f:
                    65:24:7d:7b:1c:4b:12:ed:26:bd:53:38:30:11:d9:
                    35:7b:0f:26:ab:95:59:b5:d8:04:da:d6:00:07:30:
                    d0:88:10:91:a3:f3:fa:3a:21:a8:8c:98:1b:e1:e7:
                    b1:61:18:9d:d8:50:8e:28:e9:ae:20:a6:43:89:34:
                    f6:91:13:cc:b5:e8:01:15:47:a2:4e:42:c6:f1:0c:
                    33:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B6:8B:A3:AA:4B:B0:B4:E3:5E:68:14:78:89:6C:39:C4:F2:DD:47
            X509v3 Authority Key Identifier:
                keyid:64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:38:29:a5:fc:91:9b:67:00:45:55:e2:41:c8:35:6e:4f:f3:
         55:80:2a:a8:33:19:4a:0d:80:70:de:84:0b:56:e5:db:41:eb:
         2c:fb:85:de:70:e0:91:8d:2b:d3:d2:8f:90:30:f3:eb:14:89:
         eb:4b:58:fb:01:01:57:52:2c:a3:cd:6d:72:f8:bd:24:80:b3:
         ee:93:f9:ed:cc:9a:19:b0:4b:dc:03:13:18:fe:23:a9:90:a0:
         cb:f5:cf:6f:2d:db:94:6f:87:86:8e:80:a5:1a:c2:68:04:72:
         ea:64:bf:b4:cb:3d:d3:65:3a:42:1b:a8:d8:47:6d:38:48:00:
         a7:7b:1f:33:ac:89:de:d0:59:c0:3f:ab:f0:c2:93:6f:40:cf:
         fb:5d:92:b4:3f:2c:9a:c8:ec:6e:bc:f0:4e:a6:54:92:1e:89:
         3f:9b:bb:c1:93:86:c6:5a:4e:04:0f:be:32:4d:86:f8:9c:eb:
         1d:c7:f1:da:4c:c5:2a:d8:31:25:d0:af:d5:fc:b0:5b:fa:f6:
         5b:d2:84:3b:a3:f9:f5:39:ef:13:73:b0:4b:6e:d4:b7:74:c0:
         66:b5:e2:86:eb:8a:a2:ae:55:17:7a:12:6d:a4:ea:5b:b9:ec:
         65:5e:a2:69:be:14:7f:83:f6:9c:c0:94:46:92:15:07:71:c0:
         fc:8d:bb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----