Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
File:                     Vgq77plEvBY3TSi-TCYHISxchBo.mft (raw, json)
Hash identifier:          E6PIfrkh2M9qwBWZ4IAckGXHlA5dOLA+Qy5d5ATPcoA=
Subject key identifier:   05:88:82:B8:D9:C6:9C:97:DB:81:57:C1:7A:34:D1:85:3E:BB:6B:BA
Authority key identifier: 56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A
Certificate issuer:       /CN=F3624E32AR/serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
Certificate serial:       0291
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
Manifest number:          0290
Signing time:             Fri 31 Jan 2025 02:28:07 +0000
Manifest this update:     Fri 31 Jan 2025 02:28:07 +0000
Manifest next update:     Sun 02 Feb 2025 02:28:07 +0000
Files and hashes:         1: Vgq77plEvBY3TSi-TCYHISxchBo.crl (hash: H3YLdCIWVcK9W7DGgzgC5nfZaLqgF7ENWN2AIUyJzDA=)
                          2: 5CEB9A26EE7311EDAE92A5174AD9E6FC.roa (hash: rLtmy6+gg/x50UbRPkkqh7K/Hhi9wWQKPE+ocVnJ+7I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AR/serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
        Validity
            Not Before: Jan 31 02:28:07 2025 GMT
            Not After : Feb  2 02:28:07 2025 GMT
        Subject: CN=679c3537-940c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:91:ab:8b:fc:38:ac:b9:70:f3:e9:76:b3:
                    f9:c9:11:96:12:c8:d1:ea:4f:35:82:96:59:6a:de:
                    a0:fa:86:64:83:32:cc:72:6d:eb:60:d8:85:37:6c:
                    e6:9d:d3:a0:cd:65:11:3e:e9:3d:77:55:c6:db:b0:
                    44:f2:30:e7:5b:cc:36:7d:61:85:84:85:47:90:14:
                    15:73:df:20:05:47:50:1c:97:fd:8b:2a:1d:db:ad:
                    2c:ec:d1:5b:7a:96:34:8d:70:f6:ca:be:95:97:2a:
                    94:e0:36:1f:17:e3:6e:04:9d:ba:33:ca:bf:36:68:
                    2a:1e:41:2a:32:a7:df:fe:17:20:4f:60:c0:e3:aa:
                    e7:95:82:23:60:23:e4:c3:41:43:b9:01:5a:13:58:
                    8b:71:7b:a7:68:23:e5:21:c1:17:d4:52:17:ae:29:
                    d0:dc:29:dc:a7:3c:29:a7:17:63:02:cf:9c:53:b9:
                    9a:1c:e8:f8:b0:c4:22:0c:b6:a4:4c:bf:6a:84:c3:
                    2c:52:fa:88:31:1a:c5:3c:1e:c7:65:8f:ae:05:02:
                    72:53:31:45:25:53:49:15:9a:35:30:1e:2c:87:bc:
                    de:90:e4:ef:e6:f3:25:43:7c:8b:03:42:40:8a:aa:
                    e5:d1:40:0b:52:39:98:d4:a4:ef:5b:cb:45:37:cb:
                    b0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:88:82:B8:D9:C6:9C:97:DB:81:57:C1:7A:34:D1:85:3E:BB:6B:BA
            X509v3 Authority Key Identifier:
                keyid:56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:90:86:56:f3:2f:fa:f1:31:9b:d7:4b:83:13:25:3a:38:39:
         8f:57:3c:8c:8b:3e:77:5e:7c:f5:78:85:3c:db:25:0c:a1:5e:
         0b:f9:fd:da:a6:97:af:da:c5:2f:86:c5:90:b2:01:e7:51:a1:
         55:d1:dc:c1:84:8a:a2:c7:b9:20:c2:1d:ce:df:9f:db:18:69:
         40:d3:4b:b2:17:11:52:30:8b:04:a9:c4:9c:e9:dc:f8:8f:23:
         fb:1f:78:ae:fc:75:7f:51:89:a5:e4:a5:09:d0:9a:6c:83:f0:
         61:22:3a:fe:2e:c9:42:8a:d4:d4:f6:9e:b3:36:3d:36:d5:45:
         6d:57:c1:20:61:08:ca:5e:90:f1:f6:96:56:4c:e2:14:4c:44:
         ed:de:0a:10:29:22:6b:5b:c9:d4:01:1f:83:71:7f:f4:f9:8a:
         2e:83:f9:b3:51:1a:13:09:3d:97:35:7a:84:30:b5:83:91:0b:
         3b:92:f6:40:e3:5b:7b:44:37:3c:94:ad:b9:ac:ad:df:7a:84:
         7a:f8:bd:41:13:c3:81:f0:3f:47:cb:89:f0:4a:7d:6a:c4:ad:
         82:0f:f9:d5:41:f3:b0:5f:63:7d:fb:7e:a1:61:53:af:03:5a:
         c5:06:00:e1:ea:36:b3:eb:ed:d2:56:3b:c3:15:a3:32:37:f9:
         bb:dc:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----