Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
File:                     3wZml7CgNZiMDvM7Qr7tfnClVUs.mft (raw, json)
Hash identifier:          oKVYGDyyt69zNgouspi9JP9v2CrF+5VM6jKLRf4/ojA=
Subject key identifier:   B1:EA:9F:16:57:90:AD:D2:80:22:56:83:E3:7E:F6:C2:58:89:38:DD
Authority key identifier: DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
Certificate issuer:       /CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Certificate serial:       04B3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
Manifest number:          04AF
Signing time:             Fri 31 Jan 2025 01:55:39 +0000
Manifest this update:     Fri 31 Jan 2025 01:55:39 +0000
Manifest next update:     Sun 02 Feb 2025 01:55:39 +0000
Files and hashes:         1: 3wZml7CgNZiMDvM7Qr7tfnClVUs.crl (hash: X60RgvMG42d/MBE0278MtWZtTIJojFBGvWJTY/zHuhs=)
                          2: 8065B86A532E11EC801D331CD8A014CE.roa (hash: F5eLw3Oa+DcohLxtO7dVJeRypNojvOsC5f+wTgH4pR0=)
                          3: 21625A96533111ECB2F6BE24D8A014CE.roa (hash: D7uWKw4MsAwTkL/YB/+bUaU6FUc2W7evgUV4IerLvVk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1203 (0x4b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
        Validity
            Not Before: Jan 31 01:55:39 2025 GMT
            Not After : Feb  2 01:55:39 2025 GMT
        Subject: CN=679c2d9b-4f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c5:a1:6a:41:04:66:42:e9:66:27:91:97:14:
                    f6:db:71:90:04:af:cf:d4:ab:e9:97:21:c8:06:4b:
                    e0:00:a3:08:15:37:b0:96:29:54:eb:a5:3e:bf:85:
                    82:f7:f7:f6:5a:0a:a9:d2:d0:32:88:f9:b6:77:77:
                    8a:5d:ea:92:a1:63:39:09:17:55:a3:75:5a:fd:77:
                    db:84:20:38:b8:6f:2f:a2:58:00:37:33:6a:5b:d8:
                    cf:5e:1c:7d:5a:c7:f3:02:54:6c:80:1c:63:47:07:
                    be:ac:1f:99:f6:25:9a:0b:1a:16:2a:a5:a8:4e:e3:
                    ff:9e:a4:54:93:f4:5c:d8:ba:e8:03:52:29:b2:40:
                    bf:cf:1d:cf:c6:19:4a:70:da:b0:94:6f:e0:ea:74:
                    49:e1:1e:2b:7a:6d:0b:6f:b5:7f:ae:a7:f4:45:43:
                    30:90:4b:a0:50:70:43:a9:42:33:b4:ea:31:e7:74:
                    2b:8f:37:a1:5e:fc:b2:fa:58:2c:07:d5:91:3c:5a:
                    ac:1e:a8:7a:14:66:69:c0:21:41:e7:cc:83:d2:a1:
                    04:88:89:9b:c9:44:f4:3d:0d:23:66:46:3f:e5:e7:
                    02:70:d8:24:6c:a1:21:65:60:08:74:f2:6e:f0:04:
                    43:d3:dc:6e:32:27:3e:2e:21:49:1a:cd:77:ad:d4:
                    4b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EA:9F:16:57:90:AD:D2:80:22:56:83:E3:7E:F6:C2:58:89:38:DD
            X509v3 Authority Key Identifier:
                keyid:DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6f:9a:01:90:16:32:4a:41:39:c8:64:1e:1c:6b:3b:2d:4d:
         1a:b8:04:f6:9a:6c:37:44:de:46:b3:96:a8:1a:37:e9:6b:f2:
         a0:e8:0b:93:57:36:d3:b1:02:de:f8:b1:e0:27:e2:95:71:2d:
         85:1f:0f:09:1b:14:70:7c:9e:d4:9b:cc:da:68:f3:eb:f4:50:
         e0:12:5e:e6:b9:d4:6c:ee:6d:6b:a5:31:68:df:ec:5b:6d:00:
         9c:8a:ad:55:65:12:ca:cd:8b:de:71:39:90:d6:d7:a9:8d:54:
         54:2a:35:20:e8:43:e5:e5:1e:82:d9:f7:a7:00:04:2e:12:39:
         de:ce:71:c4:33:48:b1:9f:60:4a:b0:af:ff:92:80:15:51:41:
         15:8f:52:ab:d9:7f:03:4a:70:e8:b5:77:30:25:87:7f:46:f0:
         4d:12:b4:cc:b0:39:ff:16:ee:b5:48:76:62:3b:b9:31:bb:90:
         ae:42:bb:24:04:57:c0:94:26:4d:21:58:fc:69:d9:4b:2e:46:
         c1:0f:12:5b:f3:e9:ea:54:6d:86:85:cb:11:cb:74:cf:a8:d2:
         8e:fd:a5:32:73:fc:a5:87:ca:83:6b:e3:e9:16:8d:5d:11:57:
         3e:f0:c5:09:8e:c5:50:9a:86:e6:6e:6a:57:7f:7b:f8:f0:7f:
         85:47:db:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----