Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
File:                     DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft (raw, json)
Hash identifier:          iwG9K6G5fOBAGiHHccnBodKoYW+ZfIApBJkL/cVK/Vc=
Subject key identifier:   2A:D1:59:50:9F:99:75:90:1E:5C:83:36:C9:15:2C:60:A8:43:E2:99
Authority key identifier: 0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9
Certificate issuer:       /CN=F3639A71AR/serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
Certificate serial:       0196
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
Manifest number:          0195
Signing time:             Fri 31 Jan 2025 02:47:29 +0000
Manifest this update:     Fri 31 Jan 2025 02:47:29 +0000
Manifest next update:     Sun 02 Feb 2025 02:47:29 +0000
Files and hashes:         1: DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl (hash: WQqm7Y9atuhmYcjncCuUsWJvv+sahBH01oM878fyt68=)
                          2: CE2F2690AD5311EE8E27B3B1775412E6.roa (hash: 8IJ5uu88BzDrvRLts60KNKjSTABo8XS/43EbjaMJPDo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AR/serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
        Validity
            Not Before: Jan 31 02:47:29 2025 GMT
            Not After : Feb  2 02:47:29 2025 GMT
        Subject: CN=679c39c1-f5f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:68:0f:ed:41:1d:ac:ee:ab:a5:d4:f0:6b:2a:
                    44:b0:7d:b3:6b:fc:52:45:d6:82:ba:4c:67:38:c2:
                    46:be:29:dc:3c:aa:f3:db:2d:aa:79:ed:68:90:03:
                    47:07:f0:eb:b2:8d:b1:28:fd:27:86:8d:0f:1d:46:
                    ec:05:27:a2:0d:72:ed:fe:42:0e:b7:78:39:7e:cc:
                    f8:31:49:26:2b:aa:7e:f3:54:d9:12:79:f4:16:da:
                    65:d2:a8:5c:25:30:58:0b:dc:4d:dc:fc:5a:3f:0e:
                    cd:ca:02:66:20:97:b8:21:98:36:1d:28:92:f7:7a:
                    aa:b0:6f:61:4d:ad:47:7b:aa:ef:bf:92:d2:2c:57:
                    4c:42:2b:64:22:3a:b6:cb:eb:2e:c8:f5:be:30:b4:
                    29:63:3b:7d:c3:7e:5d:97:24:49:00:05:f2:b1:c7:
                    79:fe:91:9d:59:d2:f7:0e:b1:38:56:c1:b9:fa:e7:
                    ca:c2:5b:e8:03:bf:c7:54:f4:dd:42:f0:47:65:22:
                    74:fd:d0:dc:7c:be:ea:ad:b1:23:c0:5f:b7:89:1c:
                    23:3f:b3:8a:b4:15:f8:93:34:1b:3e:a9:f3:e9:3a:
                    ee:98:d8:d3:a7:4c:fc:3d:03:e9:8f:6c:1a:5e:e7:
                    cd:96:50:de:85:c4:0d:3e:ac:fe:9a:21:fa:e5:a6:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D1:59:50:9F:99:75:90:1E:5C:83:36:C9:15:2C:60:A8:43:E2:99
            X509v3 Authority Key Identifier:
                keyid:0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c5:c5:1f:f8:60:a6:1d:d9:12:b1:6f:0a:c4:a3:42:50:23:
         6b:e7:3d:55:1b:04:6d:49:4d:a7:0a:7e:40:17:0c:ea:70:0e:
         1f:df:27:95:6d:3b:ae:4b:0b:cc:f5:08:03:69:61:62:59:53:
         42:7e:44:0b:99:e3:b8:8d:9f:9b:1c:ac:48:26:42:5c:db:54:
         9b:08:08:18:99:9a:1d:6e:cc:f4:88:2d:6e:73:91:48:b8:4f:
         d0:29:b1:d6:d8:14:5a:91:cb:b1:6a:6a:9c:a2:39:39:e1:30:
         c4:a4:fd:11:41:20:e1:7d:10:f2:e7:fe:5f:cf:55:6f:c6:4c:
         b3:a6:19:e5:43:cc:ce:4f:4e:6d:78:38:6e:47:37:90:cf:0d:
         7e:7a:b0:f6:f3:87:dc:40:a5:ab:d3:c8:b7:70:5e:fa:52:3f:
         f0:1d:15:0e:56:50:1b:59:d5:d3:3b:df:45:3d:69:d0:6a:d3:
         13:39:00:d6:a7:bc:59:7d:d8:23:2b:46:31:d2:fb:0f:f0:84:
         5a:77:03:33:85:35:4e:b4:c9:97:0e:b8:ac:39:99:63:6f:ec:
         92:d3:27:72:13:22:72:70:c2:09:a8:86:cf:37:9c:47:26:f6:
         67:21:cb:20:f5:e6:c7:08:f2:3a:c9:94:65:70:6d:b4:93:42:
         0e:36:35:60
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzlBNzFBUjExMC8GA1UEBRMoMENERTBCN0U2NzhGRkVBOUUzQUUwNTc5RkVFMTg0
Nzc2MTJFNEZFOTAeFw0yNTAxMzEwMjQ3MjlaFw0yNTAyMDIwMjQ3MjlaMBgxFjAU
BgNVBAMTDTY3OWMzOWMxLWY1ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDWaA/tQR2s7qul1PBrKkSwfbNr/FJF1oK6TGc4wka+Kdw8qvPbLap57WiQ
A0cH8OuyjbEo/SeGjQ8dRuwFJ6INcu3+Qg63eDl+zPgxSSYrqn7zVNkSefQW2mXS
qFwlMFgL3E3c/Fo/Ds3KAmYgl7ghmDYdKJL3eqqwb2FNrUd7qu+/ktIsV0xCK2Qi
OrbL6y7I9b4wtCljO33Dfl2XJEkABfKxx3n+kZ1Z0vcOsThWwbn658rCW+gDv8dU
9N1C8EdlInT90Nx8vuqtsSPAX7eJHCM/s4q0FfiTNBs+qfPpOu6Y2NOnTPw9A+mP
bBpe582WUN6FxA0+rP6aIfrlprkLAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUKtFZ
UJ+ZdZAeXIM2yRUsYKhD4pkwHwYDVR0jBBgwFoAUDN4LfmeP/qnjrgV5/uGEd2Eu
T+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM5QTcxLzMxMUU1MDJBQUQ1MjExRUU4MkYwOTNBRTc3NTQxMkU2L0RONExm
bWVQX3FuanJnVjVfdUdFZDJFdVQtay5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0RONExmbWVQX3FuanJnVjVfdUdFZDJFdVQtay5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MzlBNzEvMzExRTUwMkFBRDUyMTFFRTgyRjA5M0FFNzc1NDEy
RTYvRE40TGZtZVBfcW5qcmdWNV91R0VkMkV1VC1rLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/xcUf+GCmHdkSsW8KxKNCUCNr5z1VGwRt
SU2nCn5AFwzqcA4f3yeVbTuuSwvM9QgDaWFiWVNCfkQLmeO4jZ+bHKxIJkJc21Sb
CAgYmZodbsz0iC1uc5FIuE/QKbHW2BRakcuxamqcojk54TDEpP0RQSDhfRDy5/5f
z1VvxkyzphnlQ8zOT05teDhuRzeQzw1+erD284fcQKWr08i3cF76Uj/wHRUOVlAb
WdXTO99FPWnQatMTOQDWp7xZfdgjK0Yx0vsP8IRadwMzhTVOtMmXDrisOZljb+yS
0ydyEyJycMIJqIbPN5xHJvZnIcsg9ebHCPI6yZRlcG20k0IONjVg
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:37:04 2025 by rpki-client