Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
File:                     pfjRvVkiC4dTo3nUoz0jv0IysTY.mft (raw, json)
Hash identifier:          0lfyaEtFLsoSsEEgQ9PxXlCJC4zk5yVmkHbCzfRDIxI=
Subject key identifier:   2B:79:0C:4D:46:99:96:1B:3E:80:E0:47:B8:FE:93:FE:8E:E2:99:AD
Authority key identifier: A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36
Certificate issuer:       /CN=F362B5D1AF/serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
Certificate serial:       0575
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
Manifest number:          0571
Signing time:             Fri 31 Jan 2025 01:43:05 +0000
Manifest this update:     Fri 31 Jan 2025 01:43:04 +0000
Manifest next update:     Sun 02 Feb 2025 01:43:04 +0000
Files and hashes:         1: pfjRvVkiC4dTo3nUoz0jv0IysTY.crl (hash: Fr1kGxd48BUNaitJlnWZNIDC291QLh4OnmGoF6fHI0A=)
                          2: AE758D00D4CD11EB8D9EBF2EF8AEA228.roa (hash: AOBdcxlDhMloECpYuyvumc0EXau1j2QFtzwgu7UYQFA=)
                          3: 59B094CCD4CD11EBB5CE312EF8AEA228.roa (hash: WZXnDXOTSBrcGjPAB+W4tlPrl63sGMKab4xVa7Dl5+c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397 (0x575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B5D1AF/serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
        Validity
            Not Before: Jan 31 01:43:04 2025 GMT
            Not After : Feb  2 01:43:04 2025 GMT
        Subject: CN=679c2aa9-2d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:10:b1:d8:0d:86:08:2e:c6:12:e2:9b:8e:82:
                    32:dd:cd:03:e6:6c:cd:86:bd:3d:95:3a:d0:28:72:
                    7a:95:62:85:55:ed:fc:0d:da:7b:2f:b8:aa:5b:1a:
                    2f:fd:9d:e6:e2:6a:ef:7d:53:26:48:b0:8d:de:0c:
                    1e:b8:3d:63:ee:e5:73:56:17:db:fd:d1:49:d9:f8:
                    f9:85:8d:98:24:1a:e1:f2:c2:bc:c7:ee:a0:99:04:
                    08:d9:b2:16:95:16:ab:44:ab:a8:3d:96:0b:88:9f:
                    db:1f:ea:94:de:f3:6b:4e:28:af:ca:bb:64:76:28:
                    a4:9a:64:21:f5:79:06:6c:a6:2c:6f:0d:da:0a:2d:
                    f0:cc:99:3f:aa:4d:bc:66:93:9a:35:ab:6f:b9:0f:
                    14:10:ec:a1:c0:c3:aa:7c:52:56:d9:70:f1:22:c4:
                    7f:24:7b:cc:f7:85:92:15:37:aa:87:e5:e8:81:07:
                    d1:24:f6:51:93:e3:a3:9b:bd:3f:32:eb:a8:75:b9:
                    aa:25:4e:22:72:28:ba:4e:18:3f:7c:af:71:b1:3c:
                    fb:f3:e8:bf:10:77:e7:89:8d:0c:0b:68:35:a4:58:
                    4c:bd:a7:81:b0:2b:99:a7:17:1e:e4:c9:2a:f9:f2:
                    50:01:60:41:48:7e:21:25:a7:1f:6b:c1:02:ed:1b:
                    59:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:79:0C:4D:46:99:96:1B:3E:80:E0:47:B8:FE:93:FE:8E:E2:99:AD
            X509v3 Authority Key Identifier:
                keyid:A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:09:97:6a:5f:f7:7e:67:b3:2a:e4:56:7c:3e:83:54:92:5a:
         13:9f:51:72:63:4f:a3:8a:ee:bb:83:78:03:60:01:ff:e0:68:
         65:b6:0a:82:45:00:01:ce:65:2f:90:95:f7:d2:b4:4b:c6:81:
         d8:db:24:5e:f5:0e:b1:fa:68:07:55:1f:75:75:83:2e:94:b2:
         95:79:97:cf:cd:41:31:7e:61:44:a5:54:e2:3d:c5:30:a5:5d:
         9b:e5:ff:ff:35:e6:54:de:0c:4c:d5:c2:66:92:4a:3c:19:ec:
         aa:a6:dc:28:b0:fa:85:cd:47:8c:fc:4b:c3:ba:0d:50:b7:8a:
         b7:2e:c4:d0:60:82:87:4b:67:2e:55:e0:62:fe:db:32:81:08:
         a7:17:28:94:43:6f:fe:e7:21:6e:e9:b8:89:72:8b:20:b5:96:
         e5:90:c8:be:d8:16:9c:3e:83:82:58:c2:69:a1:3d:68:99:38:
         51:42:68:ca:8e:22:b5:14:74:dd:48:0c:6f:2a:91:be:3e:71:
         b8:d5:b0:4e:95:dd:d4:0d:72:64:c6:39:4e:55:78:07:55:a9:
         1e:eb:3d:38:2e:d3:1c:b4:c3:11:4a:49:45:f2:51:1a:e5:ad:
         e6:d5:83:f6:12:08:3a:80:79:30:2a:cc:e4:22:d3:13:49:80:
         a8:06:51:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:24 2025 by rpki-client