Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
File:                     g2HVptDz1JxnYMDqaGxnxBSd1t8.mft (raw, json)
Hash identifier:          3cE8pHDQ2Fkv8YelBt179ImThh/Ip1l32c3WpiamxUQ=
Subject key identifier:   34:08:05:EB:14:68:21:50:05:93:6A:74:AD:D5:2C:8B:58:3F:A6:33
Authority key identifier: 83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF
Certificate issuer:       /CN=F36580B0AF/serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
Certificate serial:       022B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
Manifest number:          0228
Signing time:             Fri 31 Jan 2025 02:37:36 +0000
Manifest this update:     Fri 31 Jan 2025 02:37:35 +0000
Manifest next update:     Sun 02 Feb 2025 02:37:35 +0000
Files and hashes:         1: g2HVptDz1JxnYMDqaGxnxBSd1t8.crl (hash: Q8lDRuWvlHhqfYLzD2tol8UwnRQxC7VTwL0ale+4I2I=)
                          2: 5CA7913C41CF11EEABA50B154AD9E6FC.roa (hash: mPw4RDOXZXo/bpdC9fVPFx1LHe7Ee57R4RWVqSxmsVQ=)
                          3: 1E76759CB6E311EFB3CF7A44762E951A.roa (hash: W/c0Kk3I+J2yYg1lYlt6Jh0twnCYr8+m8FqL7jZfB8o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36580B0AF/serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
        Validity
            Not Before: Jan 31 02:37:35 2025 GMT
            Not After : Feb  2 02:37:35 2025 GMT
        Subject: CN=679c3770-d064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:05:f6:b3:5a:48:b3:71:23:9a:74:50:7a:
                    68:8d:e7:41:a6:56:49:ff:8a:5b:5a:2c:0d:f8:54:
                    5b:48:11:dc:28:e9:3b:51:1c:98:b9:04:28:50:b9:
                    3f:e2:70:0d:49:47:fc:64:26:bc:b0:ff:db:b3:1a:
                    52:93:ad:04:29:83:56:af:10:80:98:f8:b0:79:ce:
                    43:de:61:1e:c3:0d:38:32:48:a8:38:3a:89:04:c7:
                    d0:5e:06:61:eb:99:07:2b:95:c8:e8:72:f3:22:7a:
                    45:da:60:87:0e:ff:a6:95:12:5e:76:97:a0:98:c2:
                    f6:84:d4:5b:1e:4e:8c:03:62:5e:f7:38:b5:60:db:
                    9f:27:ae:73:0e:f8:c2:72:3e:6b:38:53:08:8a:00:
                    e6:0c:df:45:0d:ff:d8:69:8b:48:15:cf:d8:5c:b4:
                    ff:59:e5:3e:98:71:b2:a9:6f:13:ba:13:a6:b2:1d:
                    72:46:46:38:26:8c:e2:67:f8:0e:86:fc:80:0d:dc:
                    33:78:b3:44:53:7f:b9:c8:54:86:49:34:45:d2:8f:
                    87:09:62:17:71:f6:2e:49:40:a7:4d:fe:46:1d:00:
                    ad:9d:17:64:f0:4f:ac:3b:b3:bb:1e:95:49:7e:af:
                    a8:be:76:3f:fb:65:0d:e9:1f:95:c7:8b:2d:bd:3e:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:08:05:EB:14:68:21:50:05:93:6A:74:AD:D5:2C:8B:58:3F:A6:33
            X509v3 Authority Key Identifier:
                keyid:83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:50:3c:c4:b6:10:e8:44:2f:dd:7e:53:3b:f9:b0:92:5f:f6:
         4a:8b:44:a3:8d:33:ac:84:28:42:eb:57:65:ad:c1:39:4c:e7:
         f1:70:0c:7e:4e:6d:3c:03:ce:8a:18:2b:0f:ac:a2:4a:70:5b:
         fd:17:f5:3a:ac:50:f6:8f:cf:0d:f0:00:1a:61:3d:d4:21:cb:
         1d:3e:b2:eb:9a:5a:e6:98:d8:7e:e8:f7:6c:07:e8:9a:4c:fa:
         27:0b:76:45:d1:4c:fd:b3:bf:1f:ab:84:6b:88:06:49:c0:91:
         75:f0:77:e8:f3:0a:b4:fa:59:09:f6:c5:6b:6e:e5:16:39:b6:
         04:c7:64:97:4d:75:d3:11:bb:28:02:ff:62:07:9c:5b:a9:0a:
         67:ab:5e:a9:f7:64:20:16:b3:d7:ef:cd:46:fc:85:67:9b:59:
         68:30:b7:7f:63:15:ab:bf:64:19:08:dc:be:3e:a9:a3:dd:90:
         c2:b7:c2:00:bb:9b:04:3b:d2:41:24:68:6b:51:ea:20:2e:e0:
         09:6b:9c:3d:9e:83:a5:24:86:10:b9:ed:03:95:13:f4:48:7d:
         95:bc:8a:dd:69:58:15:37:f2:a5:b4:b9:c4:95:b1:8a:c7:80:
         d8:9c:7c:d4:fe:fc:fd:af:a1:cd:0c:21:33:80:d4:a3:df:ab:
         f9:3b:3f:46
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAiswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTgwQjBBRjExMC8GA1UEBRMoODM2MUQ1QTZEMEYzRDQ5QzY3NjBDMEVBNjg2QzY3
QzQxNDlERDZERjAeFw0yNTAxMzEwMjM3MzVaFw0yNTAyMDIwMjM3MzVaMBgxFjAU
BgNVBAMTDTY3OWMzNzcwLWQwNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8LgX2s1pIs3EjmnRQemiN50GmVkn/iltaLA34VFtIEdwo6TtRHJi5BChQ
uT/icA1JR/xkJryw/9uzGlKTrQQpg1avEICY+LB5zkPeYR7DDTgySKg4OokEx9Be
BmHrmQcrlcjocvMiekXaYIcO/6aVEl52l6CYwvaE1FseTowDYl73OLVg258nrnMO
+MJyPms4UwiKAOYM30UN/9hpi0gVz9hctP9Z5T6YcbKpbxO6E6ayHXJGRjgmjOJn
+A6G/IAN3DN4s0RTf7nIVIZJNEXSj4cJYhdx9i5JQKdN/kYdAK2dF2TwT6w7s7se
lUl+r6i+dj/7ZQ3pH5XHiy29PkTtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUNAgF
6xRoIVAFk2p0rdUsi1g/pjMwHwYDVR0jBBgwFoAUg2HVptDz1JxnYMDqaGxnxBSd
1t8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU4MEIwLzI0QjdBRDU4NDFDRTExRUVCNjIyNzgxMTRBRDlFNkZDL2cySFZw
dER6MUp4bllNRHFhR3hueEJTZDF0OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2cySFZwdER6MUp4bllNRHFhR3hueEJTZDF0OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTgwQjAvMjRCN0FENTg0MUNFMTFFRUI2MjI3ODExNEFE
OUU2RkMvZzJIVnB0RHoxSnhuWU1EcWFHeG54QlNkMXQ4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBiUDzEthDoRC/dflM7+bCSX/ZKi0Sj
jTOshChC61dlrcE5TOfxcAx+Tm08A86KGCsPrKJKcFv9F/U6rFD2j88N8AAaYT3U
IcsdPrLrmlrmmNh+6PdsB+iaTPonC3ZF0Uz9s78fq4RriAZJwJF18Hfo8wq0+lkJ
9sVrbuUWObYEx2SXTXXTEbsoAv9iB5xbqQpnq16p92QgFrPX781G/IVnm1loMLd/
YxWrv2QZCNy+Pqmj3ZDCt8IAu5sEO9JBJGhrUeogLuAJa5w9noOlJIYQue0DlRP0
SH2VvIrdaVgVN/KltLnElbGKx4DYnHzU/vz9r6HNDCEzgNSj36v5Oz9G
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:13:09 2025 by rpki-client