Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
File:                     nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft (raw, json)
Hash identifier:          7eFmjzJhLz1dV8wAK249mL2Hy+WTkE6AA6rNlXPpQ+s=
Subject key identifier:   66:E2:E6:0A:6C:AF:E1:46:0D:58:82:04:38:4D:58:0C:B2:0F:A6:8B
Authority key identifier: 9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20
Certificate issuer:       /CN=F3623AE4AF/serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
Certificate serial:       41
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
Manifest number:          40
Signing time:             Fri 31 Jan 2025 03:15:12 +0000
Manifest this update:     Fri 31 Jan 2025 03:15:11 +0000
Manifest next update:     Sun 02 Feb 2025 03:15:11 +0000
Files and hashes:         1: nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl (hash: VELg/Eh9UjO2ROz0GXX3jWzyBKBtFX1iPYQG1NhIxI4=)
                          2: 0CBAC432B27111EF99B95144762E951A.roa (hash: gmMvunoj5KNwjAHQwXEB9NQDDcCeTBCj9SxbM2LLQYk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623AE4AF/serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
        Validity
            Not Before: Jan 31 03:15:11 2025 GMT
            Not After : Feb  2 03:15:11 2025 GMT
        Subject: CN=679c403f-6b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:52:c9:36:04:4e:24:2a:e6:48:33:68:20:
                    2f:33:cc:16:b9:39:d6:8e:c3:83:56:7d:89:20:05:
                    8e:27:e5:37:7c:6b:ec:7b:9c:ae:bf:63:65:31:66:
                    a5:f5:0c:62:a3:f4:21:fa:d5:a2:25:5f:59:ba:c1:
                    22:4d:fb:2f:00:b4:d2:a2:79:44:7b:7a:cd:ac:a7:
                    89:f2:fb:8f:3f:cc:90:99:06:89:94:61:1d:e0:af:
                    34:d1:07:ba:10:1a:80:3a:d3:d3:f4:b5:6e:ea:db:
                    81:cf:9e:ad:d7:f6:96:89:e2:0d:61:53:07:26:b9:
                    42:bc:de:67:6d:ff:39:8d:fa:d8:eb:11:b2:f6:1a:
                    8a:44:6d:7d:5d:cc:74:14:04:8b:8c:00:e9:de:41:
                    8a:be:29:9f:5c:de:1f:17:5b:a4:21:c9:56:f6:e4:
                    ad:39:92:c6:48:f7:08:bf:95:53:41:a2:01:6c:ab:
                    01:24:b9:2d:3e:e4:4a:8f:a1:9a:2a:71:93:f7:13:
                    57:8b:65:cd:96:b3:c0:89:5c:04:9c:fb:37:91:a3:
                    44:f5:db:52:4a:e8:08:0a:63:af:38:03:7a:15:1a:
                    73:b2:3e:3a:c6:80:6a:cf:b0:33:ad:9c:79:34:18:
                    63:fb:6e:4a:84:4c:36:d2:3f:b7:2f:d5:0d:80:39:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E2:E6:0A:6C:AF:E1:46:0D:58:82:04:38:4D:58:0C:B2:0F:A6:8B
            X509v3 Authority Key Identifier:
                keyid:9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f9:5f:e8:b6:a2:32:67:cb:0b:f8:c5:4c:29:63:84:c1:75:
         ae:21:0d:b9:b8:09:22:38:b6:c5:71:7b:fe:75:8c:66:fa:99:
         47:30:18:d4:96:3e:5c:bb:e5:92:1a:8d:64:2f:04:c1:b0:fb:
         bf:9a:d0:dd:ca:4e:93:fd:1c:7d:bd:4e:31:dc:43:32:b5:f0:
         2b:a1:45:66:93:39:f9:37:a1:f8:6d:c2:8b:47:06:90:6b:16:
         1a:59:2f:ef:e7:c1:f4:d9:2e:1e:85:50:de:06:f0:d4:a6:af:
         aa:83:85:44:7c:49:22:59:92:62:46:85:f4:67:3b:e6:06:85:
         ea:61:39:fb:8b:1b:c8:af:7f:7e:2f:7f:b9:02:f9:92:c6:05:
         28:17:55:fa:c1:ad:de:89:cf:39:4e:02:d6:f9:a0:b7:48:16:
         5f:f9:25:6e:a7:36:52:fe:98:0c:a4:ef:0b:9d:db:0a:6a:9e:
         2e:e1:d2:6d:e3:27:7a:93:d5:20:2b:8a:58:41:f6:9e:28:71:
         c3:21:79:68:be:b6:28:b1:eb:96:d1:ce:42:29:24:08:04:bb:
         b1:f6:27:88:6e:6c:56:12:95:2a:1b:ec:5f:06:97:cd:e4:d8:
         0f:45:8c:26:a7:86:3c:81:63:93:83:36:84:ce:3a:1d:64:a5:
         c0:e4:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:25 2025 by rpki-client