Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
File:                     WIdwDF8kkPVYQ4L55-dSatZVSLM.mft (raw, json)
Hash identifier:          w+e4eBHFejQo82A8JoRku1a8BQrNJNd1ShfdklGGUvU=
Subject key identifier:   BC:96:44:0D:31:EB:C5:84:E2:64:FC:18:C8:D7:07:72:24:59:15:CD
Authority key identifier: 58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
Certificate issuer:       /CN=F3620ACFAR/serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
Certificate serial:       0573
Authority info access:    rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
Manifest number:          0570
Signing time:             Fri 31 Jan 2025 01:42:32 +0000
Manifest this update:     Fri 31 Jan 2025 01:42:31 +0000
Manifest next update:     Sun 02 Feb 2025 01:42:31 +0000
Files and hashes:         1: WIdwDF8kkPVYQ4L55-dSatZVSLM.crl (hash: 3DojKPMwDOgkYWjs8vZNUJXhm4tPvV8gR5gDGT3F8bw=)
                          2: 8B60EA52155611EC8AC0712FD8A014CE.roa (hash: ufx3nbeHn5LIxNhzFCsFv+TFwX/35OEeaIqSDK5cW6k=)
                          3: 459695BAD4DF11EB8D761947F8AEA228.roa (hash: V+fApY3tgq+qpHqlmWamZgFjrncOkO2wIFJyIOrmaiA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395 (0x573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620ACFAR/serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
        Validity
            Not Before: Jan 31 01:42:31 2025 GMT
            Not After : Feb  2 01:42:31 2025 GMT
        Subject: CN=679c2a88-2bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:bf:a7:8d:46:39:9e:e7:a8:bc:c3:3e:b8:
                    c1:8c:6a:01:80:f6:41:c1:3d:37:c9:df:cb:26:f6:
                    21:3c:e2:0e:83:6e:af:a6:13:00:5b:17:51:66:25:
                    d4:a2:9d:5e:43:92:43:a2:dd:c8:4e:4e:76:34:64:
                    56:d3:c6:72:30:c7:cf:0b:c0:ea:14:a9:fd:41:b3:
                    29:d2:a7:5e:38:48:6d:00:3c:7f:92:df:39:0b:f4:
                    b4:a3:5e:be:5f:0d:be:f0:51:57:ed:c7:85:10:4d:
                    d6:1b:2c:d7:8b:3e:10:64:e8:ae:1c:9b:8d:bf:a2:
                    e7:7e:e4:83:2f:e7:35:11:9e:39:ae:94:92:63:24:
                    37:24:f9:93:32:41:50:1a:8c:e4:56:52:79:f3:00:
                    0b:7e:ab:c6:86:32:82:e0:73:91:32:47:27:6a:4f:
                    80:22:40:e1:58:6d:00:ed:94:34:21:34:99:32:e1:
                    aa:d3:9a:99:cb:42:8d:c4:22:24:b5:52:bb:07:a1:
                    4e:57:ba:0f:a7:84:41:68:b7:2e:2d:f7:b4:99:3e:
                    f2:6a:a8:1b:88:4f:1a:5e:a6:5c:74:36:51:b7:97:
                    64:29:a3:0e:7c:0f:b3:f7:03:8f:9e:16:fb:69:94:
                    3f:d6:ad:3d:80:f0:6a:c6:6d:29:54:0e:61:16:a3:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:96:44:0D:31:EB:C5:84:E2:64:FC:18:C8:D7:07:72:24:59:15:CD
            X509v3 Authority Key Identifier:
                keyid:58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:56:8d:b4:7b:7c:21:43:c6:cf:d6:a2:e5:48:8e:25:4d:a6:
         e9:a6:8c:21:b2:36:bf:52:d1:e3:06:2e:51:d1:b2:37:7b:73:
         f4:f4:76:e7:69:57:a1:51:7f:52:f9:02:36:b0:7a:48:45:43:
         4a:dd:e4:30:a6:f8:ae:d1:65:43:ad:37:e9:54:35:f0:e4:d4:
         86:35:46:57:53:7d:92:af:e0:d4:4f:a4:24:4d:97:5f:e7:a2:
         92:82:f8:61:2c:0a:02:81:b9:c1:70:ab:63:e9:8f:95:25:9c:
         fe:15:13:dd:f1:f6:dd:58:c1:da:88:f0:f4:eb:09:ff:a0:52:
         42:fd:2d:db:95:af:b7:30:f1:dd:37:97:d8:c6:d1:f7:5d:43:
         d9:69:fa:83:8b:fe:93:5f:7a:0e:56:9c:b1:fb:40:99:1d:cf:
         32:8f:e7:79:7d:21:54:da:3e:64:32:41:e3:19:24:d0:ca:c6:
         ed:4b:39:0a:11:e1:67:e7:24:b6:10:6e:4f:3b:b0:5a:91:46:
         78:17:fe:c9:e2:8a:fe:b5:89:c0:c2:6f:b0:08:ee:76:2c:17:
         d4:56:12:a9:3a:e3:d8:cc:31:fe:3b:91:33:f2:ee:b3:df:e6:
         ed:de:08:01:af:45:03:72:da:0a:29:50:1c:95:ea:e3:2f:6e:
         36:1a:02:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:55 2025 by rpki-client