Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
File:                     fU328vfdsHN-2q2EhSP4cXbnzoE.mft (raw, json)
Hash identifier:          uUTwB5b9bP3lefTu2FLupqEb4UGwU5R4t/TZL0IVi7g=
Subject key identifier:   02:60:F6:4C:A0:BE:DC:A7:3C:87:65:F7:13:D1:4F:C8:B3:0A:5E:5E
Authority key identifier: 7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81
Certificate issuer:       /CN=F3640C3CAF/serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
Certificate serial:       15
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
Manifest number:          14
Signing time:             Fri 31 Jan 2025 03:16:47 +0000
Manifest this update:     Fri 31 Jan 2025 03:16:47 +0000
Manifest next update:     Sun 02 Feb 2025 03:16:47 +0000
Files and hashes:         1: fU328vfdsHN-2q2EhSP4cXbnzoE.crl (hash: ZubsqXIkNp6tcxqmIsBB4BMp3DraoivHDNqL3vrd/F4=)
                          2: 9E9AD310D2BF11EFBBD01F9D762E951A.roa (hash: sKmiIxBHJPr3OGeB7htmDk2gGj7RAu5zKpegjCoJFAY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640C3CAF/serialNumber=7D4DF6F2F7DDB0737EDAAD848523F87176E7CE81
        Validity
            Not Before: Jan 31 03:16:47 2025 GMT
            Not After : Feb  2 03:16:47 2025 GMT
        Subject: CN=679c409f-af8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:10:76:42:9d:f0:cb:91:cb:42:78:d3:35:
                    06:4e:bd:ee:a4:51:c1:59:26:9e:f9:44:3c:c1:fa:
                    d5:de:16:5b:ed:16:f4:da:73:3e:5d:41:e8:3c:13:
                    ae:88:04:de:ea:06:fa:37:c6:2d:27:6d:05:d7:95:
                    30:db:fc:05:0e:30:be:1c:5f:cc:a3:35:6e:e1:c5:
                    3e:52:1f:9c:bf:09:df:63:dc:e1:77:d1:47:40:ee:
                    42:cf:71:3a:50:70:87:9c:9e:8b:1c:53:a4:5a:33:
                    e4:e3:08:86:86:73:ac:17:7a:dc:e6:8c:66:92:84:
                    8e:db:cb:3c:55:a1:58:29:d1:45:d1:9b:65:15:1b:
                    89:a5:d1:0f:1a:c7:4e:21:98:3e:5a:b2:24:9a:78:
                    50:95:45:32:71:db:bc:ed:4e:88:3e:d1:2a:70:d2:
                    0f:21:b2:f1:73:ef:d2:c0:83:04:e0:fe:86:72:cf:
                    7a:80:fd:91:87:9e:05:a6:6e:6b:e6:a5:80:b9:0f:
                    ae:50:9e:2f:6f:88:1d:8b:f5:0c:d9:bc:02:00:10:
                    bc:d3:16:a6:6a:7c:10:55:4f:54:24:4e:e7:55:91:
                    40:c5:61:e1:d8:04:b4:37:94:57:03:05:0a:6c:c2:
                    a7:df:09:5e:cc:97:c5:22:2c:6a:14:30:17:30:dc:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:60:F6:4C:A0:BE:DC:A7:3C:87:65:F7:13:D1:4F:C8:B3:0A:5E:5E
            X509v3 Authority Key Identifier:
                keyid:7D:4D:F6:F2:F7:DD:B0:73:7E:DA:AD:84:85:23:F8:71:76:E7:CE:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fU328vfdsHN-2q2EhSP4cXbnzoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640C3C/C5A61844D2BE11EFAD56CC98762E951A/fU328vfdsHN-2q2EhSP4cXbnzoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c6:41:25:52:fd:09:43:b2:58:d1:a4:02:23:11:cf:d0:9d:
         87:9d:d2:43:f4:2d:48:73:69:74:da:82:7f:fd:d6:9e:86:99:
         d8:9e:0c:c4:9e:84:c9:9b:d2:97:84:38:35:a7:6b:b2:ff:ea:
         58:ac:94:fd:7b:78:56:19:55:bd:09:19:2f:40:bd:0f:29:a2:
         3b:3e:27:68:fa:ca:c6:e3:31:c5:5d:06:17:d6:25:06:85:cb:
         f8:40:b1:2a:85:34:98:99:c3:ea:57:31:55:5c:e4:49:a5:cc:
         cc:d1:19:17:af:1e:df:ed:af:77:7a:45:cb:f2:d1:f3:e5:17:
         c2:c6:ac:08:1b:5d:63:97:86:47:55:aa:10:aa:0f:27:d7:5f:
         24:27:22:d8:5b:30:57:c0:38:64:6d:e5:5e:0d:99:32:fa:b4:
         a8:00:8d:52:34:19:00:ee:85:e1:e0:95:eb:03:e8:d5:6d:17:
         68:f6:59:ee:ab:db:1a:3b:b2:29:7b:cd:6d:77:49:ca:5d:21:
         7c:a2:94:d8:1c:0c:20:57:76:64:4e:53:82:ad:d0:5e:81:d3:
         24:8a:b3:4c:d1:e1:d5:20:2a:d0:d1:bf:59:59:7d:43:9c:d9:
         19:96:32:4f:fe:b2:89:cb:44:71:66:ac:f8:e8:f7:3e:27:57:
         67:af:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:48:46 2025 by rpki-client