Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
File:                     poVzBBtD85x4jvNbdksxjIhJyf4.mft (raw, json)
Hash identifier:          utTTfYR2CudyYhahK4LMd7Wrz+QkPk9vURpYueVih5s=
Subject key identifier:   B3:7B:AF:2F:3D:1F:3D:6D:C1:B6:F6:FE:7C:37:73:4A:29:86:1C:29
Authority key identifier: A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
Certificate issuer:       /CN=F3632159AF/serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
Certificate serial:       036A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
Manifest number:          036A
Signing time:             Fri 31 Jan 2025 02:14:34 +0000
Manifest this update:     Fri 31 Jan 2025 02:14:33 +0000
Manifest next update:     Sun 02 Feb 2025 02:14:33 +0000
Files and hashes:         1: poVzBBtD85x4jvNbdksxjIhJyf4.crl (hash: aBDr3Rb3Fi52aZgla2+uk8vsx8x9cIySHDcMwNZKbTY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874 (0x36a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AF/serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
        Validity
            Not Before: Jan 31 02:14:33 2025 GMT
            Not After : Feb  2 02:14:33 2025 GMT
        Subject: CN=679c3209-f667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f9:b9:4f:51:fa:08:b0:fa:35:c7:fc:63:65:
                    aa:4b:e6:11:61:e5:f9:99:95:d9:58:5a:d9:63:54:
                    8d:b8:c3:d8:01:ba:38:d3:70:8c:e4:13:6b:86:39:
                    00:89:c5:59:2e:58:48:72:5c:05:3d:f2:63:3c:1d:
                    b5:88:02:40:e8:4b:c2:6a:31:fd:8c:de:92:1c:6c:
                    b9:f8:37:a0:bb:3b:03:4f:18:b4:26:24:4a:be:be:
                    b6:e7:fc:2c:ef:75:cd:0b:fc:37:f5:36:d0:9a:6c:
                    02:a5:fd:43:ee:d6:ec:b9:82:30:fc:60:82:c0:f7:
                    27:78:3c:e8:ca:aa:c8:a8:77:d6:32:8e:7d:1b:25:
                    b9:e2:a3:83:94:b3:af:a9:e9:b5:f9:d4:d9:d0:26:
                    37:e5:32:cd:6c:37:3f:37:85:77:da:26:52:6f:60:
                    0b:e0:e4:bd:84:81:d8:66:d5:8d:f2:81:5d:3a:ed:
                    01:89:00:32:7c:32:db:6e:74:20:2b:bc:0d:24:be:
                    ac:1e:d9:aa:44:fc:5c:b1:1e:3f:cf:d0:f4:b2:cd:
                    4b:b4:d4:1f:bd:dc:88:d6:76:b9:80:96:47:ce:cc:
                    ad:90:0b:be:b8:f4:de:14:26:f4:9c:1c:67:c4:4d:
                    dd:48:ad:20:2a:3b:ee:b9:01:93:af:26:b3:84:14:
                    18:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7B:AF:2F:3D:1F:3D:6D:C1:B6:F6:FE:7C:37:73:4A:29:86:1C:29
            X509v3 Authority Key Identifier:
                keyid:A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f6:02:1e:8a:df:d1:78:72:50:44:b0:ff:1c:10:f9:53:f3:
         bd:f6:33:27:ed:c3:e9:f8:0b:01:64:f5:cc:fd:3f:18:5f:6f:
         0b:74:4b:db:bd:4b:c4:18:96:45:f5:39:83:c4:a2:a6:eb:1c:
         df:16:61:a9:c1:36:d5:1d:ee:9e:f5:4d:a7:bc:53:8d:a2:43:
         6e:78:3f:f8:98:fc:af:47:ad:fc:36:e4:c8:30:9a:36:01:42:
         b9:c8:50:0b:f1:91:75:81:58:f7:1d:a2:7d:4f:b4:05:bd:2a:
         70:a6:6c:c7:31:ef:59:63:ea:d6:4b:b7:40:dd:eb:bf:dc:4e:
         3c:92:d9:e8:32:7f:87:89:bb:9f:8b:5a:f4:36:44:10:76:d2:
         36:4b:57:cd:af:21:b8:7f:cc:18:a9:7a:e0:2e:24:da:49:fa:
         40:22:5c:44:5a:ab:40:b2:82:d3:d8:2e:e6:39:f8:d7:64:59:
         ce:1f:68:22:90:5e:c6:14:a9:61:ec:9f:e1:4f:cf:80:ef:22:
         3b:0e:7d:b1:d1:df:1b:b1:b6:7f:a7:b7:02:70:e4:44:74:45:
         d6:fc:9c:81:66:ae:9d:ea:89:56:02:88:0a:c2:e8:3b:56:ed:
         75:47:1a:fd:3b:de:68:f6:da:51:1a:e7:26:1b:ad:87:7c:bc:
         ae:cb:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:39:57 2025 by rpki-client