Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
File:                     osaoR7jzEgAwg0GHFH38ZcjulMA.mft (raw, json)
Hash identifier:          QS/6kGI3rOGDoCtT7AYTCN5Cb6F6gC6ykbjuvViSBVw=
Subject key identifier:   43:C3:A0:6D:73:1D:6F:9E:26:54:DF:3E:C7:B0:5E:5C:6A:51:E7:3E
Authority key identifier: A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
Certificate issuer:       /CN=F3627BD6AF/serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Certificate serial:       0CC3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
Manifest number:          0CB7
Signing time:             Fri 31 Jan 2025 00:57:11 +0000
Manifest this update:     Fri 31 Jan 2025 00:57:11 +0000
Manifest next update:     Sun 02 Feb 2025 00:57:11 +0000
Files and hashes:         1: osaoR7jzEgAwg0GHFH38ZcjulMA.crl (hash: 4/SuMdgnNgZ33pRwvXsnCFw1ywCY7MWC0e3pNBtEznE=)
                          2: 6C39EE98619B11ED8E8FD8D6F1222468.roa (hash: OETdohCk7q65gcL6uPq06Ta3ioOvQSD9Kn6gLq8PZ80=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3267 (0xcc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627BD6AF/serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
        Validity
            Not Before: Jan 31 00:57:11 2025 GMT
            Not After : Feb  2 00:57:11 2025 GMT
        Subject: CN=679c1fe7-8043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:99:44:6c:32:21:4d:41:36:99:24:77:64:
                    d9:17:41:cf:c2:32:da:dc:78:d9:dd:ef:aa:d3:33:
                    bf:2d:79:26:2e:99:4c:b1:9b:e4:32:83:a7:73:d8:
                    dc:b3:0c:eb:4c:33:61:b0:66:95:66:79:00:a7:f2:
                    60:d7:ec:10:cc:aa:8b:64:4f:1d:f3:d6:17:b0:41:
                    2e:8c:f1:9a:c3:c0:66:7a:7d:b1:7c:98:72:86:99:
                    8e:2b:f6:bc:92:49:1c:d3:b1:72:f8:b4:cf:bf:bb:
                    38:37:de:38:b1:07:97:99:77:10:08:1e:f8:f5:be:
                    98:77:06:12:8a:de:02:51:6d:2e:cf:ab:e6:9a:75:
                    c2:94:0f:ee:70:e5:fb:16:10:a9:9c:16:78:ba:6c:
                    51:d0:cb:75:0e:2e:20:0d:06:8b:80:28:66:9b:29:
                    f4:94:ea:67:87:1f:9b:83:3b:fa:57:8c:bf:60:87:
                    a9:0a:3e:7e:34:97:ee:6b:5c:a9:d5:2e:4d:c6:bd:
                    89:6d:59:1a:83:01:df:e2:7a:36:92:eb:5c:5a:4d:
                    3f:ed:b5:4a:7f:3f:3a:5d:6a:c9:11:14:fa:a8:a7:
                    6d:6a:e5:c6:fe:57:35:83:28:ff:43:96:8c:8a:11:
                    d2:02:b8:f7:aa:64:d5:f6:e8:cb:8d:0d:4f:49:26:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C3:A0:6D:73:1D:6F:9E:26:54:DF:3E:C7:B0:5E:5C:6A:51:E7:3E
            X509v3 Authority Key Identifier:
                keyid:A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:0c:ad:50:79:37:52:ee:65:d5:d4:3b:48:e9:54:f1:33:f4:
         9a:f2:35:a1:eb:b8:6a:20:3b:21:f4:3d:84:0a:ca:d3:6c:82:
         7a:95:23:c4:01:ad:e2:d5:5b:db:44:4d:b8:fb:25:36:d6:a5:
         76:4c:18:82:c7:2c:19:10:dd:0b:bb:48:40:e4:e3:ad:54:39:
         8e:03:e7:6a:d8:a4:c4:8d:fc:7b:c0:29:f8:74:e9:f1:de:4b:
         29:91:b0:ac:d2:20:08:c4:96:bb:60:95:c6:8e:6a:8f:b2:93:
         a0:14:17:57:ea:16:db:a6:f4:89:15:03:68:31:bb:74:e6:50:
         a5:2f:9b:8d:31:1b:57:1f:1d:68:5b:89:c6:a6:66:bf:96:0c:
         b8:78:4b:17:62:aa:a0:51:29:17:0f:b5:c7:48:2c:e8:77:bf:
         8a:48:93:9a:96:e3:84:10:5a:f6:18:11:24:ef:2f:1f:3b:be:
         a1:4d:97:ee:5f:fa:ed:74:5f:18:21:f2:f1:4b:bc:3d:80:18:
         ff:ff:c4:fd:86:f5:dc:8f:9a:16:8c:f9:07:9d:b0:b3:65:ae:
         15:5f:2b:9e:4a:11:f6:01:21:9f:c9:4a:ab:2c:11:7b:c7:82:
         b4:65:a6:44:14:26:45:53:52:7a:2d:b1:c1:07:b8:70:05:37:
         c4:3c:80:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:26:24 2025 by rpki-client