Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
File:                     JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft (raw, json)
Hash identifier:          0i9stY2YmDyNTCnnxy93xpPifm/O4LGyWybzmanQ4ug=
Subject key identifier:   1D:F1:AD:3F:6A:EB:55:D3:EA:E6:8F:65:99:33:B6:30:82:22:18:4D
Authority key identifier: 25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
Certificate issuer:       /CN=F3646FFEAR/serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
Certificate serial:       0430
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
Manifest number:          042F
Signing time:             Fri 31 Jan 2025 02:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 02:00:31 +0000
Manifest next update:     Sun 02 Feb 2025 02:00:31 +0000
Files and hashes:         1: JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl (hash: L0AjizdcgLJ55ze4r0MoxGcFROwSA01I+wHmSDecU1E=)
                          2: 5C5FD3B8B1B811ECBE7762D35A40D577.roa (hash: vGmD4pROB8VFUopnGf6To3GzFkP29HGjp5Gl6MpnPn0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1072 (0x430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAR/serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
        Validity
            Not Before: Jan 31 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2025 GMT
        Subject: CN=679c2ebf-ad28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2a:e0:c3:52:33:ca:01:07:7f:42:26:56:b5:
                    69:03:ec:d2:5e:92:08:85:da:85:1a:38:57:35:4d:
                    cc:0d:da:ed:de:05:67:76:31:fd:55:b3:05:0a:48:
                    35:0c:24:43:e6:92:73:64:ca:02:09:be:00:77:5d:
                    e3:a5:a3:cd:f0:61:5f:2a:16:41:e1:5f:e6:27:9e:
                    15:fc:10:83:5b:a4:59:b1:9d:69:a1:88:68:f9:02:
                    d1:2f:82:e0:db:da:57:a9:82:17:81:e9:c2:7c:a9:
                    48:b3:94:28:14:e9:2e:07:5f:5e:e5:4f:11:ed:e9:
                    d4:dc:a4:f6:6a:c4:2d:eb:6e:cd:77:d2:35:fb:69:
                    59:f2:6a:83:fd:f6:28:75:fa:80:ab:32:24:7b:f1:
                    d2:1f:d3:aa:e6:d2:b7:00:de:86:70:52:6a:92:5c:
                    e0:0c:b3:4f:12:c7:99:1b:4d:63:98:72:9e:2c:33:
                    2d:84:b5:69:cd:82:ab:0c:6e:57:b5:08:45:62:e9:
                    7a:94:8f:09:57:6e:c4:de:58:6d:74:b2:22:6e:7a:
                    f6:81:3c:16:b3:3c:2d:ee:c4:7f:09:1e:64:85:54:
                    9b:0b:2c:58:b9:bb:c6:d9:48:33:87:a5:51:e2:c7:
                    f5:b5:9e:3e:a3:b8:66:df:45:98:d1:a5:2b:51:23:
                    d8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F1:AD:3F:6A:EB:55:D3:EA:E6:8F:65:99:33:B6:30:82:22:18:4D
            X509v3 Authority Key Identifier:
                keyid:25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:fd:a3:26:d3:78:b6:07:c2:74:75:c2:3b:5b:16:25:81:
         de:b5:72:d6:5c:1b:37:79:0b:db:00:d5:43:7b:9a:67:61:ca:
         2b:5e:cb:18:40:f7:cb:d6:34:76:22:ce:84:5d:c4:33:7f:ef:
         ba:7e:c8:a7:92:5d:1a:3f:a5:c1:48:3a:7b:6d:4f:67:cd:4e:
         ee:cf:8f:01:b0:19:df:c6:d2:1e:f1:d1:3d:9a:aa:39:02:8c:
         66:bb:b4:39:ad:34:15:a5:e0:f3:70:d6:c6:06:7e:7f:f6:27:
         f1:3d:9d:3c:59:09:12:c6:7d:48:d4:fb:99:7d:83:1d:0b:35:
         c6:d3:a9:51:92:34:c5:94:20:01:e1:6b:9c:31:cf:f3:55:52:
         66:c0:7a:9b:5e:f7:8c:17:c2:ce:3b:3a:bb:d7:d5:5b:17:1b:
         9e:49:63:8d:9f:c2:81:2b:73:76:64:a6:6c:32:5b:b8:be:cb:
         cc:f6:f9:c6:7b:96:e6:24:d4:dc:5e:32:9b:32:74:9d:f6:eb:
         91:89:4d:72:ba:bc:dd:8f:62:c1:e1:a9:8d:06:67:3a:d2:98:
         f7:9d:b0:a6:8c:29:19:69:72:30:fa:64:89:eb:94:ef:e5:b2:
         bd:33:12:c5:51:e9:b5:5e:b7:16:80:7c:5e:74:df:67:aa:31:
         77:b1:27:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:41:01 2025 by rpki-client