Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File:                     ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier:          vXFD6mF7A8gNlQM6+tTi/DNkCvgoi/7Z6NWt1bcjSGY=
Subject key identifier:   CE:C0:A0:64:73:C8:C0:7B:BC:96:F3:10:5B:16:9D:34:75:E9:C3:5B
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer:       /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial:       16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number:          15
Signing time:             Fri 31 Jan 2025 03:16:25 +0000
Manifest this update:     Fri 31 Jan 2025 03:16:25 +0000
Manifest next update:     Sun 02 Feb 2025 03:16:25 +0000
Files and hashes:         1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: D+tzdMPPmQZ6hyzdEjMw85+HXLWLaJgbcOnWj5EU5WQ=)
                          2: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
        Validity
            Not Before: Jan 31 03:16:25 2025 GMT
            Not After : Feb  2 03:16:25 2025 GMT
        Subject: CN=679c4089-063d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:9e:78:04:86:6a:26:b5:12:58:c6:ef:0d:
                    3c:60:31:46:1e:fa:fc:b5:a0:2c:84:5f:bc:3b:b5:
                    60:e2:09:0e:e5:dd:49:4a:18:b5:bd:35:8f:06:1f:
                    6d:36:ab:6d:49:1e:17:71:28:89:d2:97:d6:9f:65:
                    b5:50:ee:85:e0:45:32:cc:89:f3:43:22:e0:66:ce:
                    83:ab:c4:b2:c5:64:ec:cd:61:69:46:de:d8:58:a0:
                    91:53:8a:46:d3:4c:1d:d2:fa:1f:03:13:eb:ad:d3:
                    82:63:f9:ab:c2:99:86:a6:40:a1:69:07:0c:44:4a:
                    6d:07:ed:48:0b:92:31:66:e7:57:dc:23:0e:9c:aa:
                    84:e0:c4:24:db:83:59:56:f7:20:87:e2:c0:a4:da:
                    fe:76:ad:1e:9d:45:3f:72:06:13:e9:74:85:95:47:
                    8f:3c:7a:46:3c:48:9f:b1:3e:b2:28:2e:dd:70:e9:
                    d6:9d:6c:ff:f4:e6:1f:93:29:b8:7a:6b:85:20:9f:
                    5d:7b:ae:0e:9e:d0:f8:43:29:18:f4:a8:5e:7b:71:
                    37:a6:42:d7:ff:ef:63:78:46:b0:71:de:b8:71:42:
                    16:22:b3:64:b2:70:9b:6f:b3:51:12:43:0a:e4:6c:
                    f9:9f:76:af:1d:c4:f8:26:f8:bc:1c:5f:34:8d:46:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C0:A0:64:73:C8:C0:7B:BC:96:F3:10:5B:16:9D:34:75:E9:C3:5B
            X509v3 Authority Key Identifier:
                keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:91:48:11:77:18:03:6e:7f:38:8d:71:98:f5:85:0c:9f:67:
         b7:c4:62:2b:6e:54:fe:2f:81:88:e6:f7:ba:86:17:8c:2b:71:
         9d:6e:a5:c2:68:48:5e:2a:b0:5a:c5:84:fd:e9:d2:93:bd:ac:
         f3:f2:ca:46:ee:57:8f:62:87:f4:e1:9f:c2:b9:80:f4:53:31:
         2c:a0:5a:00:12:bf:95:db:30:66:c9:a0:a1:1b:2c:e3:49:10:
         34:85:46:9b:f3:28:1c:e7:f5:0e:02:26:30:75:49:02:ca:99:
         b9:e4:19:2d:b7:5e:43:76:8e:8b:03:a8:a2:19:c0:79:f5:a5:
         34:f0:4f:1b:65:1b:9c:3c:95:b7:48:42:18:cb:9d:8a:7c:42:
         f6:5f:3d:df:66:20:47:3e:b7:5d:6a:27:36:37:37:0a:26:e5:
         64:dc:f9:ba:e0:cb:3a:85:c5:7a:40:ea:fe:0c:01:0c:5e:82:
         c4:09:86:45:f6:95:95:b4:cd:a4:2c:01:99:5d:8b:ce:f6:32:
         52:c9:ad:a8:cc:29:a6:b8:fa:01:33:e6:0b:5a:8b:7b:5a:e9:
         5c:88:29:12:e4:1a:cc:cc:41:b3:2f:e8:77:3b:a6:29:b9:eb:
         ce:ee:40:ec:13:82:7f:ff:10:ea:e3:b7:84:38:a8:61:3c:a4:
         3e:a8:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----