Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
File:                     ARf_NlB776Kb324d58jVMKSepOM.mft (raw, json)
Hash identifier:          Hujk5kEpSEoAXg7kex7rAjjnDxE+Oikyxi6yqs+i7mE=
Subject key identifier:   B4:FB:AA:9A:96:2B:6A:88:90:F7:37:5F:18:EE:AD:68:BD:D4:D8:99
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Certificate issuer:       /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial:       0C34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
Manifest number:          0C32
Signing time:             Fri 31 Jan 2025 00:59:14 +0000
Manifest this update:     Fri 31 Jan 2025 00:59:13 +0000
Manifest next update:     Sun 02 Feb 2025 00:59:13 +0000
Files and hashes:         1: ARf_NlB776Kb324d58jVMKSepOM.crl (hash: /8PM+iXygZMtJ89HXYLKaC45P/gRYukGBkJx5m6eylc=)
                          2: B638C7E6C8C711E997C29757F8AEA228.roa (hash: EisbOpC1Y+D87WQCpz01JdeRv1C7VPmD55bEQs7AK5Y=)
                          3: 7DB93F0EC8C711E9BC304257F8AEA228.roa (hash: UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3124 (0xc34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
        Validity
            Not Before: Jan 31 00:59:13 2025 GMT
            Not After : Feb  2 00:59:13 2025 GMT
        Subject: CN=679c2062-5f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:bf:bf:91:dc:64:da:50:71:90:ba:5e:cb:
                    b3:01:08:e5:1b:50:6a:7d:10:5b:d3:91:e9:3e:32:
                    4e:59:85:24:b9:93:3e:ee:14:7f:4e:00:cb:6d:d3:
                    35:4a:ff:dc:b7:dc:ba:89:23:e9:e3:7e:b2:d0:a1:
                    85:07:ff:3d:54:7d:f1:80:16:a7:75:37:c1:28:a3:
                    fb:5d:52:5b:8b:bd:e8:fa:a5:76:4d:10:8f:9c:3b:
                    90:d6:0d:46:29:92:d1:d5:71:3e:6b:2e:7f:0d:89:
                    de:3f:b9:35:af:43:00:b9:63:1a:7c:dc:82:2c:3d:
                    51:2e:03:b0:ac:ce:f9:b3:87:2e:b1:12:55:36:61:
                    a6:4c:1a:48:11:d4:31:61:c1:7f:14:ec:c5:08:57:
                    f8:da:cd:c2:2a:69:0d:bc:ef:e4:79:c5:a1:ea:a8:
                    64:3d:8b:08:b1:db:d5:c0:a5:4e:88:a0:2c:8d:37:
                    34:01:a4:67:e6:53:47:ff:cb:eb:52:7b:a1:9e:c8:
                    81:e6:8c:58:8a:bd:4b:12:3a:0b:b1:00:7b:6f:00:
                    fa:73:72:f4:30:a8:0c:e3:3f:fa:64:26:a2:50:27:
                    cf:42:fb:1d:a6:9d:ce:72:23:9d:0f:34:6e:c7:fd:
                    6c:32:c0:bd:2b:8c:c8:1d:94:47:2f:bc:96:2a:45:
                    b6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FB:AA:9A:96:2B:6A:88:90:F7:37:5F:18:EE:AD:68:BD:D4:D8:99
            X509v3 Authority Key Identifier:
                keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c8:b9:75:4f:7d:e5:59:c0:96:93:a7:f3:46:ab:12:da:6d:
         fd:d5:2d:cf:03:83:d9:ba:24:fd:38:30:79:10:90:1f:9b:59:
         96:90:35:f5:94:2e:8f:97:b6:02:6d:ea:ad:15:94:65:ec:07:
         71:d3:70:ba:2f:cf:a4:3b:b5:70:f5:3a:b9:0d:9a:b6:0e:b6:
         6c:e3:47:b5:95:06:3a:60:69:99:02:e8:20:2a:4d:d6:0a:da:
         33:7e:cd:5d:06:ff:37:88:3a:0b:b0:39:5e:f5:67:34:ba:b3:
         4d:5a:92:07:ce:e0:b3:fa:77:cf:9c:8d:32:b5:ea:49:ae:f4:
         5d:9b:9e:3f:9d:a6:12:2b:0e:ee:63:e6:5f:50:f5:2a:46:46:
         68:3f:00:6a:c4:ce:86:8b:7b:ea:dc:90:56:a3:3f:73:fd:c1:
         27:15:ac:3a:19:d9:3a:1e:52:dd:83:8d:50:64:32:87:40:5e:
         5f:a8:e3:c1:a4:b3:0e:37:e6:d8:39:e1:30:d2:a8:74:6c:d1:
         17:ea:a6:df:c2:e9:79:26:2d:53:f5:cf:75:02:06:a0:e4:18:
         8e:de:b1:80:a9:7f:59:4c:1f:81:c3:09:48:18:ef:c8:0f:b9:
         fb:e2:1d:05:73:c2:04:09:90:17:f8:49:e1:bc:54:93:ab:b4:
         08:0a:b6:1f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDDQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTYxNzdBRjExMC8GA1UEBRMoMDExN0ZGMzY1MDdCRUZBMjlCREY2RTFERTdDOEQ1
MzBBNDlFQTRFMzAeFw0yNTAxMzEwMDU5MTNaFw0yNTAyMDIwMDU5MTNaMBgxFjAU
BgNVBAMTDTY3OWMyMDYyLTVmM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCn1r+/kdxk2lBxkLpey7MBCOUbUGp9EFvTkek+Mk5ZhSS5kz7uFH9OAMtt
0zVK/9y33LqJI+njfrLQoYUH/z1UffGAFqd1N8Eoo/tdUluLvej6pXZNEI+cO5DW
DUYpktHVcT5rLn8Nid4/uTWvQwC5Yxp83IIsPVEuA7Cszvmzhy6xElU2YaZMGkgR
1DFhwX8U7MUIV/jazcIqaQ287+R5xaHqqGQ9iwix29XApU6IoCyNNzQBpGfmU0f/
y+tSe6GeyIHmjFiKvUsSOguxAHtvAPpzcvQwqAzjP/pkJqJQJ89C+x2mnc5yI50P
NG7H/WwywL0rjMgdlEcvvJYqRbbJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUtPuq
mpYraoiQ9zdfGO6taL3U2JkwHwYDVR0jBBgwFoAUARf/NlB776Kb324d58jVMKSe
pOMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU2MTc3LzhGNTFBQjhFODNCRjExRTY4MUFCRUMzN0Y4QUVBMjI4L0FSZl9O
bEI3NzZLYjMyNGQ1OGpWTUtTZXBPTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FSZl9ObEI3NzZLYjMyNGQ1OGpWTUtTZXBPTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTYxNzcvOEY1MUFCOEU4M0JGMTFFNjgxQUJFQzM3RjhB
RUEyMjgvQVJmX05sQjc3NktiMzI0ZDU4alZNS1NlcE9NLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChyLl1T33lWcCWk6fzRqsS2m391S3P
A4PZuiT9ODB5EJAfm1mWkDX1lC6Pl7YCbeqtFZRl7Adx03C6L8+kO7Vw9Tq5DZq2
DrZs40e1lQY6YGmZAuggKk3WCtozfs1dBv83iDoLsDle9Wc0urNNWpIHzuCz+nfP
nI0ytepJrvRdm54/naYSKw7uY+ZfUPUqRkZoPwBqxM6Gi3vq3JBWoz9z/cEnFaw6
Gdk6HlLdg41QZDKHQF5fqOPBpLMON+bYOeEw0qh0bNEX6qbfwul5Ji1T9c91Agag
5BiO3rGAqX9ZTB+BwwlIGO/ID7n74h0Fc8IECZAX+EnhvFSTq7QICrYf
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:38 2025 by rpki-client