Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
File:                     ebDAcmJ2iSrXTH0TD5nweuDmeko.mft (raw, json)
Hash identifier:          hiMsCKnTrkwFMS0L1IEbqfx+mbbB0Y2Xjnge6Z/o0+k=
Subject key identifier:   3C:82:3F:7C:60:CB:17:DF:AE:BF:29:A0:FA:C2:E6:55:BF:DA:77:66
Authority key identifier: 79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Certificate issuer:       /CN=F3625D4AAF/serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
Certificate serial:       017F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
Manifest number:          017E
Signing time:             Fri 31 Jan 2025 02:49:10 +0000
Manifest this update:     Fri 31 Jan 2025 02:49:10 +0000
Manifest next update:     Sun 02 Feb 2025 02:49:10 +0000
Files and hashes:         1: ebDAcmJ2iSrXTH0TD5nweuDmeko.crl (hash: VreKT5oc+RHZVTGhqDFxc/LrcExbJ6vJSOCEOcJfIVg=)
                          2: 12A49B4ABF4011EE82ABE755775412E6.roa (hash: A3SsXw/efK2b5GKmG8JZKrlc0wfhdO7VSwE2A7UfoRE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D4AAF/serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
        Validity
            Not Before: Jan 31 02:49:10 2025 GMT
            Not After : Feb  2 02:49:10 2025 GMT
        Subject: CN=679c3a26-8364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:51:18:70:c4:b7:a4:0b:36:18:07:71:93:
                    9d:8d:d3:0a:e4:f6:47:a0:37:a4:88:81:05:ba:33:
                    ce:e0:1c:f2:52:ac:c2:66:79:80:16:f0:f0:8b:80:
                    77:98:1f:25:76:66:23:89:b9:c6:1d:f5:68:27:92:
                    12:7e:f1:a2:32:2c:79:22:23:05:7b:3e:cf:c8:91:
                    50:b7:5c:f2:41:08:5a:bd:49:99:a4:f3:1c:77:b0:
                    00:54:0f:b1:82:d7:38:d0:4b:a8:16:2f:73:e8:be:
                    1f:8c:a9:e4:73:2e:65:24:54:c5:9c:38:c3:a2:75:
                    19:01:9f:a4:07:8d:bb:2e:3b:20:04:42:73:59:29:
                    c1:32:7e:1a:4b:7e:b1:e6:1a:65:e5:86:6b:db:7a:
                    01:c6:a1:ee:69:ac:38:44:bc:7c:b5:8f:9f:19:6c:
                    cc:67:6d:c4:c8:3f:24:5a:6e:52:66:03:d6:93:6b:
                    e8:a9:cb:cd:ce:94:0e:13:cc:bb:0a:39:86:f2:39:
                    ea:51:05:8a:2b:1a:30:c6:6f:aa:5a:83:48:03:81:
                    f6:d2:c3:1c:35:40:5b:83:99:8f:3a:62:da:59:d6:
                    d3:38:3b:9f:ae:37:5f:19:61:dc:72:9d:3b:f4:53:
                    3b:74:13:6a:dc:c6:3c:d0:33:7e:be:76:0e:a3:14:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:82:3F:7C:60:CB:17:DF:AE:BF:29:A0:FA:C2:E6:55:BF:DA:77:66
            X509v3 Authority Key Identifier:
                keyid:79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c1:61:3f:14:06:77:46:a2:d1:93:89:47:48:ec:11:d8:c1:
         1c:f5:bb:be:6a:f7:89:63:92:84:05:a2:47:f3:52:74:48:0f:
         0c:0b:be:c0:7e:5b:1a:33:98:45:79:fe:2c:ad:df:18:91:67:
         87:e9:12:06:b6:f5:6a:da:d1:46:a8:f2:58:05:31:3d:dd:00:
         63:d8:19:7b:24:37:e2:a7:74:6f:b6:e9:4b:44:ca:9b:68:b1:
         fb:df:21:6a:8c:f0:25:d1:5b:86:f8:68:8a:fb:66:0c:50:16:
         d8:d8:2f:86:58:43:31:35:9e:7d:f2:77:7b:2a:db:70:78:d9:
         31:95:a8:64:0c:4f:a5:5a:a5:e9:89:3a:0d:01:af:ec:b9:ba:
         82:d2:9b:5d:fa:a8:ec:2b:5f:61:33:ae:0f:bb:f3:09:ad:75:
         6b:43:10:b7:c5:7a:9d:52:53:4f:09:33:0b:75:ed:6e:0c:3b:
         b3:40:d5:97:be:79:0a:0e:bf:a7:45:46:03:6c:dc:ba:ad:e1:
         3c:4f:bc:9a:39:1d:98:19:e6:69:2f:b3:cf:6f:2a:6b:d6:7c:
         7f:d9:72:90:b0:40:55:a7:15:36:d1:b6:d5:1f:5c:b2:8a:de:
         a4:73:95:b2:98:5d:68:9b:a7:8a:28:a4:ff:3f:ae:5c:86:7c:
         3a:7f:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:35:03 2025 by rpki-client