Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
File:                     4qOmjo-ihl0uVH2MskMPqyH8oG0.mft (raw, json)
Hash identifier:          6Yjioy9Af/QHtiXAVx4o57J+e13d/Mdj6uvXAaqDWEM=
Subject key identifier:   CF:6D:EA:3F:F6:F9:41:D2:35:2C:C9:2E:59:13:E8:29:6A:71:1F:CB
Authority key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Certificate issuer:       /CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Certificate serial:       03E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
Manifest number:          03DD
Signing time:             Fri 31 Jan 2025 02:05:57 +0000
Manifest this update:     Fri 31 Jan 2025 02:05:56 +0000
Manifest next update:     Sun 02 Feb 2025 02:05:56 +0000
Files and hashes:         1: 4qOmjo-ihl0uVH2MskMPqyH8oG0.crl (hash: qIy30FLC/EfOGSGU3SnM8r2t2v4fhC9zQTFVH8bDHqI=)
                          2: B063A1E4F70C11EC941F0CB4F1222468.roa (hash: Pp0AH2ECom1pa7n5F8aA5h/FubB3+W9tB91zRCkX5hA=)
                          3: 38150926F61711EC9FF6E8AAF1222468.roa (hash: R4O17UWTwxmFzLEBa28mhDTCBi+yy6jmbDMn8Gh9fK0=)
                          4: C6B22452F70C11ECB35A5DB4F1222468.roa (hash: qE23fzU6w713psdmbvCNENyQme+t86q76CBB2jdDWu0=)
                          5: E8C1348EF70C11ECA5BCDAB4F1222468.roa (hash: sQtWx2Bv/Sqp8d9pEf9Jqmmnu5VfFPqFz45blSrAhD8=)
                          6: 507471B4F61711ECA8BD35ABF1222468.roa (hash: mftcHJVRxHtq4aPHGuWKQ475mDfq8IorWrPcZAJ1yKo=)
                          7: 105F0D40F70D11EC8E5663B5F1222468.roa (hash: mjO2Sp6OVpSiQ7xZGU3orqZpsq+WKN6CkJVcH0QEXeM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
        Validity
            Not Before: Jan 31 02:05:56 2025 GMT
            Not After : Feb  2 02:05:56 2025 GMT
        Subject: CN=679c3004-7c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:f7:1e:37:a1:af:b5:4f:d2:a2:71:e2:dd:
                    03:16:b9:51:cf:67:3b:25:8e:74:b9:7c:da:93:45:
                    b3:d7:89:f5:02:b1:5c:db:74:f6:35:f1:b4:0f:a5:
                    76:85:0b:d6:eb:92:bb:d0:7f:df:09:12:46:fb:02:
                    77:bb:fc:2d:02:e9:fe:2c:7c:24:75:8e:95:0f:19:
                    dc:9e:1c:b1:c7:d0:ec:a6:d4:41:7c:74:69:c9:30:
                    45:27:67:f2:7b:1b:3a:56:cb:1e:10:73:77:d5:3c:
                    c2:34:9b:f3:6d:6d:ed:a1:65:ff:25:16:9a:d3:23:
                    2f:59:ff:ef:9f:c1:e5:c5:1f:9b:fb:f6:cf:f9:7a:
                    28:5e:bf:95:40:5a:05:bf:61:72:3a:03:29:48:0c:
                    c0:62:1d:ca:16:3e:39:69:58:5f:5a:c1:a4:61:52:
                    54:51:50:42:e2:8f:d9:97:0a:36:f0:59:dd:f2:1e:
                    f3:ed:65:a6:17:97:01:7d:60:79:9d:98:c4:96:c6:
                    61:b1:24:ff:9e:57:c1:76:65:43:2e:aa:e2:b6:28:
                    95:1d:d8:75:e3:f4:60:cc:9a:3b:e0:d4:44:0b:1a:
                    8a:b5:a0:b9:53:cb:2d:98:9d:a0:75:90:38:c9:5a:
                    0d:b6:9b:b4:05:55:c5:f4:18:e9:a1:7d:25:03:a0:
                    cd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6D:EA:3F:F6:F9:41:D2:35:2C:C9:2E:59:13:E8:29:6A:71:1F:CB
            X509v3 Authority Key Identifier:
                keyid:E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ca:d0:db:05:1f:aa:32:47:d0:95:03:41:86:8f:bb:a4:b1:
         87:24:e4:65:07:e9:44:b8:7c:bc:ec:f1:3d:b0:6b:f8:66:cd:
         92:95:65:80:c0:87:27:c6:ba:d1:25:29:ea:ea:b2:d9:09:a5:
         1b:b4:b3:03:ab:26:72:66:eb:6f:6c:75:7a:96:ef:4c:17:88:
         74:6d:39:d4:b9:39:01:8e:df:c5:ae:5c:6b:6d:5e:7d:9c:24:
         a7:dc:b6:e9:3a:a7:7a:a2:e4:ce:17:a5:6e:9f:7c:02:21:ed:
         97:b8:6f:c3:1a:83:62:3a:e6:99:8d:68:90:5a:1f:1d:a7:f6:
         2d:36:7d:09:f7:9a:ee:83:bd:3a:d4:b8:c1:8b:27:3c:8a:de:
         a5:3f:8c:b0:4f:25:f4:28:35:d8:8a:08:35:e8:e3:79:05:1f:
         d0:8a:6f:e0:72:ec:f3:c0:3f:bb:1c:17:61:61:b4:a0:df:57:
         7d:d0:41:68:73:b2:fa:18:0c:94:9a:fe:b1:be:5c:be:16:de:
         bd:3f:dd:9b:d9:46:1d:d5:78:f5:ce:a8:c4:2d:e1:d6:22:c3:
         ad:64:92:eb:db:6b:f8:5a:b1:1e:7a:59:1d:f7:28:27:d3:8a:
         83:43:c6:e4:09:61:d7:fd:a2:a4:44:21:55:e0:f9:c2:7f:0e:
         f4:6b:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:35 2025 by rpki-client