Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
File:                     2_aMnFwB1o68DJDe5MB0naI6L9Y.mft (raw, json)
Hash identifier:          kLwfT/8lZzLwKON9a1NETFvqRtKJwFiBpzfa3mekyhk=
Subject key identifier:   43:93:2B:2C:F3:B8:44:5B:FF:8E:27:BC:EB:13:CB:B0:9C:9B:CB:7D
Authority key identifier: DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
Certificate issuer:       /CN=F36576E8AF/serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Certificate serial:       03DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
Manifest number:          03D7
Signing time:             Fri 31 Jan 2025 02:06:48 +0000
Manifest this update:     Fri 31 Jan 2025 02:06:47 +0000
Manifest next update:     Sun 02 Feb 2025 02:06:47 +0000
Files and hashes:         1: 2_aMnFwB1o68DJDe5MB0naI6L9Y.crl (hash: kUZHEk9U7LpkLPE6cV/2SHRxBIiPUBJp5QOfvIYFI38=)
                          2: E10AF0E22C4211EEB4DC88104AD9E6FC.roa (hash: 42KgK6RdN4y6CGvKncWwBdL1NNaaBRBg0A8wytUPgDU=)
                          3: 94A6F8682C4211EE9CAAB80F4AD9E6FC.roa (hash: o0TXx110b3JBiu3Cl6xOs7wBGLlTo9OQb+P0VILZhd0=)
                          4: 95E5589CFCF911EC91C59591F1222468.roa (hash: rnLUsfXlrYCyRp7IztJ9xzb5+MMJaSe1lmd7KitFfus=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986 (0x3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36576E8AF/serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
        Validity
            Not Before: Jan 31 02:06:47 2025 GMT
            Not After : Feb  2 02:06:47 2025 GMT
        Subject: CN=679c3038-7760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:51:bd:a0:c8:a5:ec:6b:c3:9c:72:20:7b:
                    b6:e5:59:87:75:eb:64:8a:50:9a:b6:b7:53:13:3e:
                    01:32:1f:58:b0:31:8c:32:82:83:39:cb:00:d3:59:
                    89:d5:b7:28:48:e2:fb:44:08:5e:5b:c2:bd:ec:a1:
                    7c:07:86:52:24:f3:87:13:a8:9e:0d:f1:ad:9f:76:
                    07:9b:69:f9:d5:0e:70:cc:45:64:c5:f1:28:bf:bd:
                    91:6d:91:06:05:23:d4:02:3d:29:72:64:9c:91:04:
                    c5:da:c5:52:a7:9c:cb:fa:59:35:fe:46:d6:0e:82:
                    73:79:b3:01:f9:e0:97:5e:ba:df:72:6c:ac:48:2f:
                    af:82:65:0c:c5:d0:d5:90:77:16:c0:67:e3:32:55:
                    0c:03:26:c9:ce:ee:a5:85:f0:b3:75:55:58:f1:82:
                    8b:f6:e2:94:14:5a:17:db:e3:65:00:93:6c:4b:cb:
                    bb:58:43:73:a2:2b:01:95:22:aa:62:3a:cf:1f:5a:
                    8f:47:f0:f7:37:c8:05:e8:39:1c:92:8e:3a:39:93:
                    db:49:f1:18:af:20:87:e7:7b:8e:74:fd:b5:e6:88:
                    fa:ae:0a:47:32:29:f5:0d:ca:da:84:92:9e:7d:12:
                    ce:03:51:e9:24:c9:fa:e0:25:bc:a7:75:f6:19:7c:
                    07:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:93:2B:2C:F3:B8:44:5B:FF:8E:27:BC:EB:13:CB:B0:9C:9B:CB:7D
            X509v3 Authority Key Identifier:
                keyid:DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:35:f9:31:64:10:37:2b:d5:68:1c:e8:e3:c6:4c:c0:dc:95:
         4e:05:2a:33:ae:4f:b0:ac:bb:a7:3d:50:16:0f:ab:fa:16:d4:
         4d:1d:5d:fc:12:c1:eb:55:85:29:2a:5b:2f:5a:73:b6:74:05:
         bf:4e:28:6a:00:d6:7f:58:ee:a9:2b:fb:58:25:fb:b1:6c:ad:
         96:4d:6a:a4:21:d9:6e:42:7d:62:96:70:3f:89:10:bd:67:b5:
         21:b2:54:a4:2f:4d:a9:1e:9d:47:03:44:47:54:97:7d:d6:a2:
         f5:da:8f:30:b8:e0:54:08:80:29:c9:0b:30:88:1a:59:1a:51:
         97:1d:3c:46:6d:33:58:82:5b:3e:8e:5f:ae:e5:34:6a:30:82:
         59:cc:c6:13:fe:30:45:f7:57:32:6a:c6:68:00:07:fb:ed:12:
         8c:80:b1:2c:5e:f0:86:f1:5a:eb:97:58:6a:7e:a2:27:d6:af:
         7a:51:95:4a:ca:7e:17:2e:ad:74:05:e1:e3:37:db:71:db:05:
         0d:cb:37:6e:90:94:d9:2c:2e:50:40:06:85:d0:c0:7d:42:58:
         67:b5:3f:78:46:dc:5d:12:1d:58:19:e4:2a:b7:0b:0b:89:da:
         f9:fa:e7:08:38:c0:45:4f:b2:d7:3d:af:13:44:30:41:67:0d:
         da:08:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:18:59 2025 by rpki-client