Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
File:                     x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft (raw, json)
Hash identifier:          2gTiy/m0klZozv4BM1WEOFyJOXmkfH6xsqzEFh90MuM=
Subject key identifier:   FA:1A:18:AD:E2:EA:AC:7E:54:F6:D7:97:E0:54:A9:B9:7E:D9:F6:B5
Authority key identifier: C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
Certificate issuer:       /CN=F36390A9AF/serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
Certificate serial:       7A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
Manifest number:          79
Signing time:             Fri 31 Jan 2025 03:11:18 +0000
Manifest this update:     Fri 31 Jan 2025 03:11:18 +0000
Manifest next update:     Sun 02 Feb 2025 03:11:18 +0000
Files and hashes:         1: x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl (hash: 0uWnH3ffPdi2Gz91j8ysGUYSJgjgikGrMDH/OmLyYIg=)
                          2: 2043601A871311EFAA833C47762E951A.roa (hash: 7V2EXwaz5iXOD12PTDbUdoIOuqdno8tko8fgycVsw+8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9AF/serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
        Validity
            Not Before: Jan 31 03:11:18 2025 GMT
            Not After : Feb  2 03:11:18 2025 GMT
        Subject: CN=679c3f56-631f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:32:22:6e:d4:0b:37:66:23:45:ed:fe:15:
                    f0:a3:51:2e:b7:7b:9f:86:2a:ef:53:e9:45:a2:6d:
                    98:93:4a:ee:fb:13:b3:e5:5a:04:91:41:71:15:17:
                    9d:4e:f3:f5:79:23:43:83:94:cd:93:4d:08:b6:4d:
                    1b:93:76:a5:7c:9d:43:62:24:41:0d:b2:54:f7:c1:
                    a0:fa:41:ee:5f:a8:8c:87:7c:53:c6:ba:3d:24:89:
                    e0:06:2f:13:09:f8:34:df:41:43:75:a0:2d:14:77:
                    c4:23:f1:ca:9c:f5:85:aa:9a:ad:7a:4c:cc:02:a4:
                    43:e4:5d:44:e3:44:15:b3:bf:38:44:9d:d0:39:6e:
                    31:56:c3:fa:65:ef:2e:af:76:ef:11:12:e5:e6:e3:
                    82:b1:17:df:b7:14:d1:ed:d6:9a:72:b4:31:4a:64:
                    1a:b6:39:08:63:f6:1a:d2:49:55:fc:50:61:81:d2:
                    c7:ca:15:28:1d:fa:62:50:ef:69:77:05:7c:e1:bb:
                    14:0d:7b:20:ee:57:a8:9e:f8:e1:1b:47:55:b3:fe:
                    00:f3:58:fd:5e:fc:5b:b0:96:9c:ba:87:10:e6:01:
                    9c:3f:95:27:6f:e2:b5:75:d8:74:16:75:5d:0c:14:
                    f2:69:5e:d6:ca:f2:10:88:44:9c:5a:af:63:b5:1d:
                    b1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1A:18:AD:E2:EA:AC:7E:54:F6:D7:97:E0:54:A9:B9:7E:D9:F6:B5
            X509v3 Authority Key Identifier:
                keyid:C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ac:70:91:a2:24:fe:0e:13:d6:10:f3:da:1e:74:b7:3d:9e:
         cf:b2:88:4e:7a:5f:a6:6e:46:a3:82:9f:49:c6:84:37:49:a9:
         9e:55:6b:a9:c8:5a:d7:fb:f6:eb:e7:21:eb:84:30:11:93:dd:
         b9:84:c6:53:7a:52:7d:79:9f:12:cf:39:87:74:f1:f7:c1:e9:
         a9:9a:12:3a:f4:3d:89:1a:04:ed:36:ee:23:ad:15:1e:17:2a:
         0d:bf:7e:b8:2e:d6:fe:bc:8f:ea:df:46:23:45:b7:59:3e:90:
         84:8f:b5:7a:8a:28:6e:3d:38:47:59:a0:8f:34:5a:9a:7b:c2:
         21:3e:30:5c:f2:70:d5:f3:c3:37:e5:cf:f8:8b:27:20:bd:2d:
         f8:e4:42:03:f3:ea:e8:7c:71:1e:62:88:41:2f:9a:fd:88:8a:
         b7:27:30:02:01:b7:aa:6c:01:bd:3a:ca:c5:b6:6c:8e:eb:26:
         b1:81:21:da:ae:0a:f9:ae:9b:75:4e:a3:2c:bf:3f:5d:23:aa:
         e1:e4:7f:42:9a:13:f0:67:10:4c:c8:bf:a6:70:f7:3e:2d:47:
         d2:b4:9f:67:95:b5:98:e1:6e:83:e2:98:e3:33:5c:7d:fe:5e:
         1f:be:4d:48:01:0b:26:4f:37:eb:ae:09:cc:d9:ea:08:31:b1:
         c7:5a:30:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:49:04 2025 by rpki-client