Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft
File:                     rSMXDJgzsl2HE6A3DEhgcko8h-o.mft (raw, json)
Hash identifier:          CAwRsZRK+QLkIyNScKlEJJxplpoxGmLhOF4jkXih98U=
Subject key identifier:   F9:11:22:A5:63:43:4A:CB:E7:40:A9:3B:37:09:D3:A3:F0:2B:66:7F
Authority key identifier: AD:23:17:0C:98:33:B2:5D:87:13:A0:37:0C:48:60:72:4A:3C:87:EA
Certificate issuer:       /CN=F362B8A8AR/serialNumber=AD23170C9833B25D8713A0370C4860724A3C87EA
Certificate serial:       05A4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rSMXDJgzsl2HE6A3DEhgcko8h-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft
Manifest number:          05A3
Signing time:             Fri 31 Jan 2025 01:38:59 +0000
Manifest this update:     Fri 31 Jan 2025 01:38:58 +0000
Manifest next update:     Sun 02 Feb 2025 01:38:58 +0000
Files and hashes:         1: rSMXDJgzsl2HE6A3DEhgcko8h-o.crl (hash: nmRAc5synJpWwwzwLIe4LFgs+gwI8AWPIhSWHbSk6cs=)
                          2: AE53A0009EA911EB9AC82A41F8AEA228.roa (hash: 1bd0I/6rZsKsWNhyL71qhITbxUZVlPI0gALS+mourjE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B8A8AR/serialNumber=AD23170C9833B25D8713A0370C4860724A3C87EA
        Validity
            Not Before: Jan 31 01:38:58 2025 GMT
            Not After : Feb  2 01:38:58 2025 GMT
        Subject: CN=679c29b3-1de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:76:7b:05:b9:b0:6e:ff:c0:bd:6c:8a:09:4e:
                    e6:1d:52:a3:78:49:b4:1d:23:dd:19:34:16:bc:c5:
                    55:37:2c:af:70:e4:f4:c5:15:be:a2:6f:cc:18:ae:
                    11:f3:7a:90:e1:60:c6:fa:a2:f9:ae:e4:8c:d2:d5:
                    63:25:c8:21:1a:00:90:7d:a7:e4:62:fa:08:8f:a1:
                    df:a8:33:99:06:9b:38:61:9c:c7:89:c9:e7:a6:ac:
                    4d:3f:18:25:19:df:41:2e:c8:50:dc:72:b1:c0:77:
                    2c:ca:70:59:44:1f:ce:b4:73:9a:77:b5:01:a1:f9:
                    27:1e:35:0b:b4:d9:f8:4f:1b:17:a4:ce:12:37:88:
                    ee:64:b6:4d:bd:88:96:12:cd:98:ef:f4:27:cb:0a:
                    98:f1:60:22:05:68:10:0c:a4:1e:1e:48:6c:ef:44:
                    92:6c:2a:7d:5b:b3:ae:e7:48:a7:1f:96:57:58:84:
                    77:d7:ac:8e:03:e7:75:85:7f:22:a5:6a:b9:c1:1b:
                    f8:34:05:34:74:1f:2b:04:b3:d7:78:e0:0d:d2:a9:
                    5c:7b:d6:61:4b:12:c0:a9:fd:4a:10:e6:1d:91:c1:
                    e9:8b:a0:87:e6:6e:ea:4b:68:5b:12:fc:39:c6:37:
                    f7:0b:ac:eb:19:ff:b8:d6:51:04:36:a3:a7:69:32:
                    40:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:11:22:A5:63:43:4A:CB:E7:40:A9:3B:37:09:D3:A3:F0:2B:66:7F
            X509v3 Authority Key Identifier:
                keyid:AD:23:17:0C:98:33:B2:5D:87:13:A0:37:0C:48:60:72:4A:3C:87:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rSMXDJgzsl2HE6A3DEhgcko8h-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e5:09:29:8e:e9:33:1c:b9:cb:c5:28:5e:3b:17:b0:b6:74:
         06:88:20:f0:1a:4f:9f:6e:1b:35:dd:a8:c7:a3:9d:73:2f:02:
         47:e4:a8:ed:74:f1:c8:ee:c8:3f:41:2b:db:09:d2:ed:80:b8:
         6c:f3:6f:a1:7f:a2:8a:5d:8a:0f:11:c2:24:a2:85:ff:07:5f:
         88:0d:d7:5a:de:97:e1:1e:37:3b:bd:8c:11:17:4d:3b:52:14:
         1e:85:b4:c3:f2:a6:10:b3:fa:36:24:11:54:c3:6c:7c:08:01:
         93:e7:05:f8:ac:19:ec:f8:7f:ea:31:c1:d5:e6:57:cf:ce:65:
         de:cb:db:02:27:67:4d:88:f0:3b:1a:3b:5a:09:86:58:12:37:
         d7:91:22:57:d9:0d:7e:ed:59:4f:9f:01:bf:c9:ab:f4:38:62:
         8b:a0:1b:fd:25:ac:ad:c5:1e:6c:4f:ae:7b:c8:72:5d:d0:11:
         70:e2:62:cb:a9:78:90:71:ce:53:3c:b1:0f:f9:eb:a7:1d:fa:
         77:05:88:06:6a:d5:7c:b0:af:11:33:b0:93:52:fb:29:be:d7:
         bb:94:aa:d5:9f:08:0e:bb:d9:cd:24:94:45:00:17:7b:72:e9:
         f6:9f:32:f9:62:ae:71:26:e6:ba:2d:c1:ae:80:cf:c9:17:b3:
         2c:3c:14:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:59 2025 by rpki-client