Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
File:                     JfCxDKLk37Or6AFrgxnhVRHDOhw.mft (raw, json)
Hash identifier:          n42CKm1+pL/vriX+KaCuix8O/1rn0pelbiMT0pBGbUQ=
Subject key identifier:   95:9D:2D:6F:C6:C0:A3:B7:38:1F:8C:66:9A:05:A6:A2:F9:BB:1E:4C
Authority key identifier: 25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C
Certificate issuer:       /CN=F36374C9AF/serialNumber=25F0B10CA2E4DFB3ABE8016B8319E15511C33A1C
Certificate serial:       0D85
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
Manifest number:          0D82
Signing time:             Fri 31 Jan 2025 00:55:26 +0000
Manifest this update:     Fri 31 Jan 2025 00:55:26 +0000
Manifest next update:     Sun 02 Feb 2025 00:55:26 +0000
Files and hashes:         1: JfCxDKLk37Or6AFrgxnhVRHDOhw.crl (hash: E3pqIIjH8C8zq9FaVWfJFfMC4+h66nGMIT9fT68G+3o=)
                          2: 95B9A0DC542E11E68362481EF8AEA228.roa (hash: 8UoC48UqoDeH69RSkPNH1+FjRJDyG7fYrZ/nLYWEfIs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3461 (0xd85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36374C9AF/serialNumber=25F0B10CA2E4DFB3ABE8016B8319E15511C33A1C
        Validity
            Not Before: Jan 31 00:55:26 2025 GMT
            Not After : Feb  2 00:55:26 2025 GMT
        Subject: CN=679c1f7e-5663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b4:ff:1c:e3:8b:5e:20:b4:a9:63:1d:95:ae:
                    bb:dc:fe:21:9e:11:55:4d:70:2c:fa:7f:0d:cc:8f:
                    2f:b1:76:5b:b9:67:13:8a:1a:14:4a:80:59:63:99:
                    f6:f7:c2:18:1a:49:35:40:3e:56:a0:9f:90:60:61:
                    bf:3c:ea:55:37:da:3f:23:a2:99:9d:75:5c:5d:b4:
                    86:c6:6e:0f:37:0d:cb:a4:b8:7b:f0:b9:35:ec:59:
                    5e:b3:a0:ac:dd:44:15:b2:dd:cf:fe:d0:9f:39:2d:
                    af:1c:32:73:83:e1:5e:43:f4:05:97:69:83:99:91:
                    52:63:21:12:41:0b:68:57:0a:7c:c0:eb:ab:20:b0:
                    0a:d3:13:73:c1:27:26:a2:cc:99:d7:93:e9:e9:59:
                    af:f2:e7:e7:4c:9a:bf:5a:91:fc:24:45:0a:20:8c:
                    40:d4:3b:4e:82:83:fe:22:ec:42:ae:bc:5e:23:d8:
                    e6:fb:c8:d1:8e:44:c3:b3:c0:76:23:52:dc:fe:71:
                    3a:76:5e:71:72:c1:fa:dc:cd:fe:64:ef:a6:c9:02:
                    90:84:c8:78:03:1f:13:3e:c1:ed:74:36:3d:e5:41:
                    c1:85:f2:b1:0b:b5:70:5f:6e:1c:f9:f1:ca:c2:63:
                    77:cd:a2:be:f9:f2:4f:f8:c9:bd:cc:65:14:e0:64:
                    33:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9D:2D:6F:C6:C0:A3:B7:38:1F:8C:66:9A:05:A6:A2:F9:BB:1E:4C
            X509v3 Authority Key Identifier:
                keyid:25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5e:09:a8:b5:ad:ad:95:79:0c:15:80:0d:18:f5:1a:95:54:
         2e:12:03:38:08:59:f8:0f:e4:de:5f:89:62:ca:c9:69:3c:c9:
         bd:ae:76:96:71:f7:22:f4:18:6b:d3:ca:e5:32:b9:cf:3f:78:
         8f:e5:11:05:b9:23:c9:92:31:d8:2c:e4:71:26:77:a5:73:a3:
         ae:72:36:d4:46:03:0e:c1:0a:1a:e2:e0:4b:f6:19:2e:5c:ed:
         09:4c:12:b8:8f:57:b2:50:71:f6:6e:0f:99:f7:45:1b:59:34:
         ed:85:64:6e:a3:ff:21:03:35:62:d8:c6:c8:68:7e:51:40:04:
         0e:75:6a:69:a0:a3:43:c0:ef:84:a7:68:00:2e:b4:ba:20:b8:
         5f:fd:67:3c:3e:bc:c5:d1:ac:3a:29:33:1d:77:e3:e7:4d:4f:
         51:8f:ac:c9:ef:25:e4:86:40:86:2c:54:ba:5b:b9:1a:9b:78:
         5c:36:f2:7d:94:09:18:4e:0a:e2:b4:e7:88:a9:3b:ce:e5:68:
         72:19:cf:36:37:b8:4d:10:69:fc:1c:f0:d7:9c:13:95:26:7a:
         46:9b:f5:dd:8f:c2:f1:38:b9:46:68:2c:6c:a3:ce:90:1b:e1:
         1c:59:e1:3a:ae:f4:3e:59:f1:43:cb:0b:b4:d4:d1:57:c6:e1:
         ae:e4:5b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:41:09 2025 by rpki-client