Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
File:                     nLoUINchzAMCPFAG0iUcILr0yII.mft (raw, json)
Hash identifier:          UyKaO466I4Xzas6+DGrW/U+4mJ/rxvrXG4YECymxJ4s=
Subject key identifier:   CD:1C:C0:F4:1A:A1:96:40:CF:76:FE:41:84:BB:63:B0:93:35:F7:A9
Authority key identifier: 9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82
Certificate issuer:       /CN=F3651E73AR/serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
Certificate serial:       0C56
Authority info access:    rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
Manifest number:          0C51
Signing time:             Fri 31 Jan 2025 00:58:24 +0000
Manifest this update:     Fri 31 Jan 2025 00:58:23 +0000
Manifest next update:     Sun 02 Feb 2025 00:58:23 +0000
Files and hashes:         1: nLoUINchzAMCPFAG0iUcILr0yII.crl (hash: 5BU63Zz4rp+7Kb/kAu1IYZqbpAYUk/rFo8AQxskx3Ck=)
                          2: 35AAF9269B8511EC9C57BEA05A40D577.roa (hash: IkRiEA4+pjihvXLHrg2ngxaBC/GnITy6qHEusBSCBlo=)
                          3: FE7EF4DEA9A011EA8E58EF35F8AEA228.roa (hash: N7Iw9MeumlpaJ1CJWOcoOBYQ72/5ZVnOPL/BKPNdyjA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3158 (0xc56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AR/serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
        Validity
            Not Before: Jan 31 00:58:23 2025 GMT
            Not After : Feb  2 00:58:23 2025 GMT
        Subject: CN=679c2030-62b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:06:26:c7:19:83:07:a6:dd:4c:14:c9:7a:16:
                    8d:20:80:14:ed:b8:6c:8b:a7:46:c3:ee:f6:50:fa:
                    87:0e:26:35:c4:b9:34:ce:6e:5e:07:31:90:d7:f6:
                    27:39:c4:b0:f4:d0:e4:ed:e7:e2:ef:b6:94:31:1c:
                    97:01:44:88:67:8a:60:a9:54:a6:7d:61:95:47:61:
                    71:f0:8b:87:10:5c:0c:cb:9d:0e:86:c3:22:7d:f8:
                    e9:3e:c2:d2:82:aa:41:c4:21:17:ef:15:f2:df:11:
                    2f:d1:27:79:b3:4f:d4:e4:d1:50:d4:28:28:04:59:
                    63:4e:51:67:f6:35:9e:7c:fc:07:45:23:3e:11:e3:
                    d9:ef:16:e7:63:d5:80:00:db:3f:7e:0b:5b:89:91:
                    2c:40:3d:2f:d2:58:c8:98:86:e3:89:80:24:0c:21:
                    82:5b:79:e2:b8:11:23:3f:19:3f:bb:2f:81:1b:d0:
                    71:db:f6:88:7a:0b:66:a7:52:f0:d2:61:2b:91:1e:
                    49:a1:ab:60:e6:4f:33:bc:e2:c4:f7:3a:43:1e:3e:
                    66:e2:60:72:4b:e3:43:4d:e9:87:9b:a8:8f:1d:c7:
                    cd:f3:20:48:56:c8:b2:26:17:b9:d5:a9:ac:b1:0c:
                    d5:c0:cc:52:fc:a9:e3:5a:9e:0f:c6:be:aa:84:e4:
                    9b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1C:C0:F4:1A:A1:96:40:CF:76:FE:41:84:BB:63:B0:93:35:F7:A9
            X509v3 Authority Key Identifier:
                keyid:9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:fe:77:fd:d3:4a:b7:49:ee:7a:93:ad:a3:47:c6:10:e7:7a:
         eb:84:cd:b7:e2:59:1f:7e:83:ba:3e:86:81:02:bd:4a:83:cc:
         05:1d:1f:9f:fb:4a:01:ab:af:ad:bf:7c:0d:ce:c2:92:b3:f5:
         cc:c0:db:44:cb:77:38:91:af:c0:11:7d:49:24:be:03:d6:6d:
         55:11:c5:98:50:96:df:0f:0c:a4:3f:40:68:75:94:c7:fd:c6:
         89:9e:c7:af:37:83:09:41:10:cd:80:d5:71:e1:68:c4:ce:d2:
         d8:f3:17:0e:3b:a0:16:1b:0f:1c:58:9c:00:05:44:4e:8f:96:
         ca:28:3d:74:f7:73:b2:ff:ae:f0:70:22:75:e7:11:d3:22:05:
         97:14:b1:a6:74:20:b2:ac:0f:55:a5:11:84:eb:e8:51:34:be:
         cd:59:02:15:20:e0:91:77:c6:54:cf:32:e9:ba:af:f1:fe:7d:
         5e:cc:48:59:b4:73:9d:3f:55:c8:69:27:6c:36:31:c4:d8:94:
         07:94:10:89:70:7d:8e:8a:04:58:a5:1c:63:14:18:07:8a:26:
         05:e3:51:23:9d:87:91:91:aa:34:f4:ef:35:ce:75:48:6a:b9:
         cd:da:af:59:36:6c:04:99:db:84:a3:fd:2a:5e:e4:1e:cb:42:
         25:5d:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:49 2025 by rpki-client