Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
File:                     Ho4GD8DqacvW-tSkvG7THSnI5Go.mft (raw, json)
Hash identifier:          gAcBY8JmVGzQ/UaSDrwr2qCLgP2Wl1MnYyyw+NfIdHU=
Subject key identifier:   81:3C:E0:8B:C6:1F:63:44:CB:B4:22:90:4A:5D:C2:CA:08:F7:FC:76
Authority key identifier: 1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A
Certificate issuer:       /CN=F363D435AF/serialNumber=1E8E060FC0EA69CBD6FAD4A4BC6ED31D29C8E46A
Certificate serial:       0408
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
Manifest number:          0407
Signing time:             Fri 31 Jan 2025 02:02:22 +0000
Manifest this update:     Fri 31 Jan 2025 02:02:21 +0000
Manifest next update:     Sun 02 Feb 2025 02:02:21 +0000
Files and hashes:         1: Ho4GD8DqacvW-tSkvG7THSnI5Go.crl (hash: rYDn7TNxNufgp4jo1VC9fRXWlkrqgCW41cwI+R/ziFc=)
                          2: 5C02D460D03F11EC9A4EAA89F1222468.roa (hash: F/9p11nL0wbGpBdREAn2qkEHpPq+G048kxKZo17dwn4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1032 (0x408)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363D435AF/serialNumber=1E8E060FC0EA69CBD6FAD4A4BC6ED31D29C8E46A
        Validity
            Not Before: Jan 31 02:02:21 2025 GMT
            Not After : Feb  2 02:02:21 2025 GMT
        Subject: CN=679c2f2e-78c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:44:d9:70:03:90:cc:56:8f:d9:1c:6b:0b:
                    a8:8a:69:a0:24:a1:a9:b9:55:34:68:c8:29:7b:a3:
                    24:5e:7c:a5:f5:6d:bc:d0:11:b9:94:73:31:6e:88:
                    de:d7:6c:86:90:c8:a7:c0:6b:44:ea:b6:09:ba:e6:
                    8f:d2:cc:90:90:60:91:ce:9c:de:d2:3f:d1:8a:ca:
                    2f:11:33:b0:ff:23:30:dd:a3:56:c1:a8:5f:b2:77:
                    36:da:9a:65:8a:e6:89:09:e6:21:8f:08:f7:da:61:
                    5f:f3:72:d3:47:48:b6:d0:fd:7f:e2:18:37:64:c6:
                    c5:3f:5f:13:b4:21:d7:f3:e4:7a:ef:7b:0b:05:bb:
                    84:92:4a:64:d5:46:ac:67:da:35:03:9c:89:ac:59:
                    26:96:63:15:1f:c6:d0:21:30:cd:09:0a:d6:eb:e2:
                    a8:d2:9c:cd:c7:cb:04:79:33:1a:de:1c:fc:6f:e7:
                    17:70:98:03:84:e3:02:50:34:a7:28:fa:ce:4a:cf:
                    f5:70:b9:2a:92:d6:a4:25:80:0f:9e:a7:b7:e6:b5:
                    29:79:e0:78:15:81:55:17:24:d5:b5:9d:28:55:52:
                    7b:fc:c6:b4:3c:31:d8:37:60:46:bb:8b:f6:8c:87:
                    08:f4:78:48:da:46:fc:fd:67:7c:b4:e0:5c:d3:51:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3C:E0:8B:C6:1F:63:44:CB:B4:22:90:4A:5D:C2:CA:08:F7:FC:76
            X509v3 Authority Key Identifier:
                keyid:1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b2:85:4d:9c:8d:1d:8f:c1:d7:be:95:ac:79:65:a4:bb:ed:
         f6:02:de:56:6c:49:26:11:80:5f:94:06:b7:62:ec:d1:33:6d:
         44:26:22:f7:79:d3:86:38:6b:47:e4:ef:98:32:f6:4f:52:44:
         83:08:a8:36:f3:0e:38:fe:04:bd:2d:3e:9e:fd:52:92:3d:c6:
         93:d8:78:99:eb:5e:37:6d:12:f6:b0:ef:be:47:6c:64:8b:50:
         13:fd:6e:2d:e0:a9:76:db:9d:6a:c6:d0:59:79:a7:09:5c:5e:
         e1:6f:21:bd:6c:23:3d:06:e8:b3:bc:ac:96:7d:31:db:a5:ab:
         38:37:95:99:57:30:9b:6e:52:5b:0b:02:09:20:70:97:1f:b9:
         58:0b:18:dc:0d:ea:99:9b:f6:86:f7:e5:3b:1c:52:07:30:99:
         1e:26:c6:d1:6d:c1:9c:5d:8c:ff:a8:40:d8:1c:d2:72:be:19:
         a3:c5:72:da:85:60:d0:66:77:82:49:ae:88:49:39:02:7f:5d:
         6f:54:4a:d9:de:44:cf:68:c8:07:5d:0a:f9:50:9e:cf:d1:03:
         00:75:06:6c:a4:71:a1:25:87:e3:53:33:d9:11:55:71:83:63:
         e9:64:c8:64:f5:8b:8b:93:0a:ff:e6:f1:5d:58:0d:30:4d:72:
         a0:54:5b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:11 2025 by rpki-client