Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
File:                     iO95xkHBXokYHnKdSKj-bnPOJac.mft (raw, json)
Hash identifier:          EPfFhj2c6+A7kuSdTv+jdaEqZXOGVwfGZGD1wC0OlXQ=
Subject key identifier:   12:58:2C:8F:B7:70:F8:DF:41:E2:5D:EC:59:46:D2:9E:F1:34:3A:86
Authority key identifier: 88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
Certificate issuer:       /CN=F363C396AF/serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Certificate serial:       0102
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
Manifest number:          0101
Signing time:             Fri 31 Jan 2025 02:57:48 +0000
Manifest this update:     Fri 31 Jan 2025 02:57:48 +0000
Manifest next update:     Sun 02 Feb 2025 02:57:48 +0000
Files and hashes:         1: iO95xkHBXokYHnKdSKj-bnPOJac.crl (hash: wUvRG+apoFh1Wye06Hp8+MziVCPI9f1lqZ3gXlynWRo=)
                          2: AB00E3321E9D11EFAD20E30A7DDC24C2.roa (hash: jczqBl4rLfWV3D8zqP6XHofdCAQZu3xZe0wHy+hc42o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C396AF/serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
        Validity
            Not Before: Jan 31 02:57:48 2025 GMT
            Not After : Feb  2 02:57:48 2025 GMT
        Subject: CN=679c3c2c-a1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:04:6d:95:85:53:c7:59:d8:9c:aa:e4:1d:9b:
                    cf:0d:9a:36:f7:49:3c:87:be:1c:7a:db:5d:ce:ed:
                    02:ae:27:b7:c8:5c:c4:12:db:60:ec:d1:e2:bd:65:
                    7a:8c:9b:95:1a:8d:63:85:ad:8d:b2:91:e6:ed:18:
                    0c:9c:93:4a:3a:a3:43:c1:90:14:8a:4c:dd:a0:4b:
                    ce:7b:e8:66:b3:3f:b0:24:02:24:9a:71:68:93:d5:
                    3b:10:5b:e7:37:96:e7:63:36:54:ae:de:00:38:97:
                    1b:81:92:2f:0a:e9:93:a4:05:5c:39:83:23:79:a5:
                    11:4a:f9:40:97:5b:a3:d6:64:67:7b:12:ca:52:d4:
                    b7:cd:fa:97:e1:83:3a:88:71:37:29:66:84:40:c7:
                    d9:7c:8e:27:b8:e2:77:ea:d2:35:4f:10:b9:1f:59:
                    12:a7:5a:52:33:8b:c4:a6:78:06:f7:92:d6:2a:d5:
                    a7:1d:dd:d3:1f:be:fe:bc:20:e5:93:35:8f:6a:ab:
                    82:58:10:94:bb:f2:34:e6:e5:43:c6:0f:6b:88:fc:
                    da:74:8c:95:3d:fb:aa:8a:a6:46:ef:1e:4f:45:36:
                    21:29:c8:c3:81:75:64:89:06:8f:9a:4f:3f:ba:80:
                    76:41:2f:15:7d:18:fe:93:cd:7e:07:9b:a3:03:45:
                    a5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:58:2C:8F:B7:70:F8:DF:41:E2:5D:EC:59:46:D2:9E:F1:34:3A:86
            X509v3 Authority Key Identifier:
                keyid:88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d7:74:3e:a1:93:0c:1c:07:e2:cc:7e:90:22:fe:86:fc:6a:
         21:9f:23:d3:fa:08:6e:cb:40:32:c2:2c:88:5b:49:89:18:bd:
         eb:af:54:2f:e0:f2:1c:8c:16:ce:6c:46:45:b9:4f:42:0a:6b:
         dc:1b:9b:71:be:a7:60:d2:8b:c7:b4:4e:6f:a7:ce:46:15:e5:
         ad:32:58:58:e1:99:52:bb:79:b1:ac:2b:63:95:9d:79:ff:ae:
         51:fa:73:05:81:31:2b:e7:79:31:b8:29:20:c5:73:65:30:a5:
         30:c1:47:70:92:3d:39:46:22:57:ae:43:fb:4b:82:5f:62:46:
         2b:9e:ac:22:fb:68:38:c6:41:b0:ad:2a:24:5a:bb:c4:a1:bd:
         17:76:99:57:3e:ff:b1:aa:16:6c:92:b7:ff:dd:af:d8:9b:16:
         6b:35:5e:a6:07:f6:17:9e:03:7a:1c:1a:95:1d:77:eb:f5:77:
         f7:b5:e0:ff:9c:51:8b:4d:3c:92:32:36:1f:f4:9b:fd:f3:e7:
         42:59:f2:c4:03:04:eb:2f:f1:58:cb:8b:07:f2:8d:20:5a:f1:
         c9:c4:4a:01:13:28:b9:ff:af:6b:82:cd:c2:63:9e:e6:a4:c1:
         fb:e5:3b:68:b0:96:c3:9d:fa:dc:87:92:51:ec:20:d2:0a:7a:
         02:c8:c8:e0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0MzOTZBRjExMC8GA1UEBRMoODhFRjc5QzY0MUMxNUU4OTE4MUU3MjlENDhBOEZF
NkU3M0NFMjVBNzAeFw0yNTAxMzEwMjU3NDhaFw0yNTAyMDIwMjU3NDhaMBgxFjAU
BgNVBAMTDTY3OWMzYzJjLWExY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdBG2VhVPHWdicquQdm88Nmjb3STyHvhx6213O7QKuJ7fIXMQS22Ds0eK9
ZXqMm5UajWOFrY2ykebtGAyck0o6o0PBkBSKTN2gS8576GazP7AkAiSacWiT1TsQ
W+c3ludjNlSu3gA4lxuBki8K6ZOkBVw5gyN5pRFK+UCXW6PWZGd7EspS1LfN+pfh
gzqIcTcpZoRAx9l8jie44nfq0jVPELkfWRKnWlIzi8SmeAb3ktYq1acd3dMfvv68
IOWTNY9qq4JYEJS78jTm5UPGD2uI/Np0jJU9+6qKpkbvHk9FNiEpyMOBdWSJBo+a
Tz+6gHZBLxV9GP6TzX4Hm6MDRaVDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUElgs
j7dw+N9B4l3sWUbSnvE0OoYwHwYDVR0jBBgwFoAUiO95xkHBXokYHnKdSKj+bnPO
JacwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNDMzk2L0NBRTBENEQ4MUU5QzExRUZCQ0ExQTQyMjdEREMyNEMyL2lPOTV4
a0hCWG9rWUhuS2RTS2otYm5QT0phYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2lPOTV4a0hCWG9rWUhuS2RTS2otYm5QT0phYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0MzOTYvQ0FFMEQ0RDgxRTlDMTFFRkJDQTFBNDIyN0RE
QzI0QzIvaU85NXhrSEJYb2tZSG5LZFNLai1iblBPSmFjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAI13Q+oZMMHAfizH6QIv6G/GohnyPT
+ghuy0AywiyIW0mJGL3rr1Qv4PIcjBbObEZFuU9CCmvcG5txvqdg0ovHtE5vp85G
FeWtMlhY4ZlSu3mxrCtjlZ15/65R+nMFgTEr53kxuCkgxXNlMKUwwUdwkj05RiJX
rkP7S4JfYkYrnqwi+2g4xkGwrSokWrvEob0XdplXPv+xqhZskrf/3a/YmxZrNV6m
B/YXngN6HBqVHXfr9Xf3teD/nFGLTTySMjYf9Jv98+dCWfLEAwTrL/FYy4sH8o0g
WvHJxEoBEyi5/69rgs3CY57mpMH75TtosJbDnfrch5JR7CDSCnoCyMjg
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:30:00 2025 by rpki-client