Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
File:                     tqq1AixPm4Kp_ukaPUxdheRtiR8.mft (raw, json)
Hash identifier:          2y1A8LjLzbD9MJfQV3hTaiyYv47QfFatQpWLufGTN+U=
Subject key identifier:   1B:B8:6E:2C:D1:B7:9B:3C:FE:98:27:36:66:A1:DA:C0:21:1A:F3:92
Authority key identifier: B6:AA:B5:02:2C:4F:9B:82:A9:FE:E9:1A:3D:4C:5D:85:E4:6D:89:1F
Certificate issuer:       /CN=F3644FCCAF/serialNumber=B6AAB5022C4F9B82A9FEE91A3D4C5D85E46D891F
Certificate serial:       0406
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
Manifest number:          0406
Signing time:             Fri 31 Jan 2025 02:02:43 +0000
Manifest this update:     Fri 31 Jan 2025 02:02:43 +0000
Manifest next update:     Sun 02 Feb 2025 02:02:43 +0000
Files and hashes:         1: tqq1AixPm4Kp_ukaPUxdheRtiR8.crl (hash: WlTP3nwOlIj9AT5w3fiaZoB6e1cmwHWFdMrYyA1JKVo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FCCAF/serialNumber=B6AAB5022C4F9B82A9FEE91A3D4C5D85E46D891F
        Validity
            Not Before: Jan 31 02:02:43 2025 GMT
            Not After : Feb  2 02:02:43 2025 GMT
        Subject: CN=679c2f43-f321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:b7:ca:da:6b:f6:e2:aa:5d:b8:04:15:18:
                    c8:c3:fc:0b:0a:7b:e8:0e:e3:9b:a1:ee:4c:60:75:
                    e9:bb:d5:df:60:00:35:2b:42:66:60:e8:b2:6b:8b:
                    58:c8:d4:b6:03:07:d0:93:5c:ea:c3:a5:e8:0a:3a:
                    fb:44:96:a8:a6:7d:e6:6f:15:d4:3e:58:d4:b4:40:
                    02:8f:c4:ad:d9:80:73:38:32:06:59:f2:53:c7:d4:
                    3a:d4:3c:1c:f6:3d:b1:33:84:24:b2:fc:ce:67:a6:
                    bd:7e:3d:52:b2:1e:80:76:ad:f8:b1:e9:ab:f8:24:
                    40:17:69:e9:ac:2a:f0:ac:22:67:27:36:04:4b:55:
                    96:98:c4:75:38:be:0b:af:9a:26:33:29:92:7b:46:
                    42:fb:c8:c1:61:6f:83:17:ad:a3:3d:f2:f7:98:7a:
                    f8:25:09:61:53:15:46:97:4d:e4:cc:d3:ed:5b:69:
                    fc:2a:7c:c8:87:48:56:ac:a9:2c:93:88:7c:cf:62:
                    b1:03:54:d0:f3:50:71:03:aa:00:b5:fd:58:40:d0:
                    31:79:3c:46:4b:88:8b:03:0c:c5:ca:15:b4:16:31:
                    1f:7f:af:a1:f8:f5:c1:88:d6:14:4e:f0:bf:04:2a:
                    b8:01:40:f1:15:af:cc:10:d9:9a:c9:0b:1e:f0:40:
                    61:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B8:6E:2C:D1:B7:9B:3C:FE:98:27:36:66:A1:DA:C0:21:1A:F3:92
            X509v3 Authority Key Identifier:
                keyid:B6:AA:B5:02:2C:4F:9B:82:A9:FE:E9:1A:3D:4C:5D:85:E4:6D:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:86:41:46:e9:4d:ad:c8:fe:f2:f2:01:33:fb:8d:fc:86:f2:
         27:bd:f3:bc:6b:4d:55:ca:68:d9:74:c4:a2:d5:cf:04:df:cd:
         a2:35:73:b4:ca:06:be:c4:2b:3a:5c:b3:c1:4d:e8:f0:59:dc:
         e1:53:c6:77:c3:4b:e5:f8:c9:b1:17:b9:1f:75:b2:98:b9:de:
         86:4b:97:92:eb:1a:63:30:0a:80:46:b4:cf:53:8b:e2:cb:cb:
         dd:06:6c:42:15:2f:d7:b5:c1:d6:64:83:23:b7:75:6a:21:47:
         a9:4a:40:ab:8c:dc:9c:34:6f:3c:6b:16:36:3d:86:c9:af:3a:
         62:d7:89:ba:f8:22:84:2f:8f:08:0d:85:9f:ce:71:f5:76:ca:
         ed:57:f2:40:ad:6f:aa:29:1d:c7:7d:a2:47:df:37:5b:99:e8:
         57:2d:e8:a3:c6:21:47:6e:0a:4d:4e:80:0e:9d:f0:a8:a2:60:
         44:99:40:c8:ea:d1:24:fe:a2:f1:58:03:7f:46:14:bc:59:74:
         0d:f7:c8:cc:68:c5:21:1d:fe:a6:9c:3e:21:bf:42:72:6a:7e:
         2e:43:e2:2d:b0:f0:27:43:11:8f:ab:24:c7:ff:bd:8f:a8:3a:
         b2:d4:39:dc:ea:bd:ef:2b:1e:37:b0:a3:d1:6a:d4:68:e4:8f:
         d3:10:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:53 2025 by rpki-client