Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
File:                     74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft (raw, json)
Hash identifier:          OUkF7Y+Kg1wvsbThe8wwN3xcntAo7/SHLcCOdwfgwlk=
Subject key identifier:   F3:76:D8:C9:F3:13:4C:0A:44:B8:09:45:E2:57:81:45:AD:CD:C6:9A
Authority key identifier: EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
Certificate issuer:       /CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Certificate serial:       0502
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
Manifest number:          04F2
Signing time:             Fri 31 Jan 2025 01:53:20 +0000
Manifest this update:     Fri 31 Jan 2025 01:53:19 +0000
Manifest next update:     Sun 02 Feb 2025 01:53:19 +0000
Files and hashes:         1: 74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl (hash: OYpKB1U7u5yenTv/lpWNaEfAYVDX0hSAVIIxtloZ4fY=)
                          2: 945E7DD6C09411EEB7EE3CB6775412E6.roa (hash: tYOnT9BqjQytDTUPG0XkVhwFzA0iw870t7nSn78qeKY=)
                          3: FCC2B53CC09311EE973207B5775412E6.roa (hash: nXq9HLYp0GlNmQIEUdb1IZ99wB3H3x5IMG8Jb1p7VY4=)
                          4: 8569FFFEC09311EE82CC19B4775412E6.roa (hash: qk3Riga7xUPf3FLu17cWPMbk3RmFvo1KiRk9xRM0fy8=)
                          5: 53A66100C09411EEA90F91B5775412E6.roa (hash: +3UIXUyKPa3bDPDxQDj5kfU3yXkutIrwCuUhyp487Lg=)
                          6: D675B9C4C09311EE81BFE4B4775412E6.roa (hash: yeVSsCWEbMjwZK7TCJavELf3uC42giGMll3LnNn7b1U=)
                          7: 3029805EC09411EE8A964BB5775412E6.roa (hash: 1o3m2JRCddBtFM+D9ve2QUFy2WmECuUP1FMBaEt3CSw=)
                          8: A7408026C09311EE8AB05AB4775412E6.roa (hash: kQaIIUytQg6HwRLvbfsqiwa0mQhtFpbPcLNYzRGCaPQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1282 (0x502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
        Validity
            Not Before: Jan 31 01:53:19 2025 GMT
            Not After : Feb  2 01:53:19 2025 GMT
        Subject: CN=679c2d0f-056e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:3b:62:fe:2a:55:a7:4e:49:a4:f4:0a:05:
                    2b:10:5e:fe:e4:23:b7:51:c5:1e:ab:d2:67:22:1b:
                    32:e9:8e:99:17:66:00:d0:0f:28:41:4c:b5:fa:de:
                    63:b9:4c:cf:79:07:ad:f8:36:5c:f9:a1:5e:86:c8:
                    b4:24:da:ee:a4:77:13:98:97:17:d9:a2:72:41:cb:
                    09:47:e3:b6:ce:4f:e6:56:a7:74:c2:e1:a2:4c:5f:
                    16:ea:8b:a0:06:16:86:1f:87:5a:22:5f:73:e2:0c:
                    a5:0c:12:42:fa:f2:39:ee:e6:53:b9:af:7c:f5:4d:
                    8c:2f:4b:58:4f:b8:0e:10:59:16:6c:62:f4:27:e1:
                    cf:21:84:12:55:5d:05:30:39:9f:2a:9a:7f:7a:dd:
                    5b:c1:fe:a4:d7:52:d6:8b:6b:9a:32:11:43:a0:66:
                    d6:f1:63:7c:b4:61:0c:49:19:e4:ce:6b:df:c8:30:
                    ab:2a:29:b9:26:a6:41:23:24:dc:9b:1e:84:df:61:
                    b8:e3:08:2f:e7:e9:b3:c6:46:9f:c8:83:5b:62:a9:
                    a0:fe:df:37:b9:39:db:83:53:f3:89:bd:1d:04:59:
                    68:84:f3:8d:57:2c:6d:36:ea:73:29:79:68:bc:26:
                    1a:15:7f:18:7e:75:f8:71:e1:64:be:e2:c0:9e:99:
                    a6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:76:D8:C9:F3:13:4C:0A:44:B8:09:45:E2:57:81:45:AD:CD:C6:9A
            X509v3 Authority Key Identifier:
                keyid:EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3c:91:08:16:a3:05:86:ef:9e:07:b9:ae:11:da:1f:cc:dd:
         d3:7f:7d:da:22:3b:db:77:8d:e6:3e:45:b1:54:64:ee:55:a9:
         05:b0:c3:45:80:3c:80:e5:cc:02:e9:7c:db:c2:4a:79:3e:cb:
         00:db:1a:1c:b5:26:84:36:2d:25:e8:64:9f:16:15:ce:2c:07:
         84:5d:5d:67:ee:a0:fa:af:83:dc:25:22:9e:eb:e1:3d:f4:c1:
         71:62:e9:ef:7b:03:c3:85:ee:fb:ce:0c:7a:b4:d1:8e:61:ef:
         88:7f:59:ac:92:6b:7c:16:8b:2b:7d:46:53:ea:e9:7c:c7:55:
         db:86:77:38:ca:b2:0b:85:28:cd:d4:ae:4d:8f:17:22:30:49:
         3e:40:c2:47:af:af:9d:6e:30:dd:db:3e:95:5c:fb:cf:cd:c5:
         c6:c0:fc:c5:9d:76:81:e5:8b:20:7d:e5:92:bf:9b:9c:68:a7:
         02:6c:74:00:99:51:80:97:41:1d:7d:2c:6f:bd:59:f1:eb:d1:
         e5:bd:92:b8:37:5d:91:58:35:d0:36:c6:70:1b:5c:61:87:45:
         a5:1a:5b:92:31:d1:31:04:78:1e:e0:c0:05:c2:73:52:7a:b5:
         b6:44:10:52:6b:d8:47:a0:43:5f:81:8a:ee:08:42:30:42:bc:
         db:b7:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:35:58 2025 by rpki-client