Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
File:                     OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft (raw, json)
Hash identifier:          SDggVXlLZooi3h+HxUM1ERSdXO9XdXrbwvd9uViA+7s=
Subject key identifier:   DD:5D:F0:B2:29:38:B0:43:9F:70:00:96:1C:B3:55:ED:7E:4C:8D:D5
Authority key identifier: 39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5
Certificate issuer:       /CN=F365E0EFAF/serialNumber=399D04F1168E65976D1AD6E8ECC5C01414781ED5
Certificate serial:       03FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
Manifest number:          03FA
Signing time:             Fri 31 Jan 2025 02:03:08 +0000
Manifest this update:     Fri 31 Jan 2025 02:03:07 +0000
Manifest next update:     Sun 02 Feb 2025 02:03:07 +0000
Files and hashes:         1: OZ0E8RaOZZdtGtbo7MXAFBR4HtU.crl (hash: 5o6zc42cE/2EQZn5kevllBkr449wFfW9FoOpbPytH5Y=)
                          2: D763DBA871A111EF9436E86F762E951A.roa (hash: qropYAoqucax6ncLs9eruJFo9UBTM6S+IM1PViOJCTw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1020 (0x3fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E0EFAF/serialNumber=399D04F1168E65976D1AD6E8ECC5C01414781ED5
        Validity
            Not Before: Jan 31 02:03:07 2025 GMT
            Not After : Feb  2 02:03:07 2025 GMT
        Subject: CN=679c2f5b-2a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:1d:ee:da:0b:22:8f:58:18:5a:6b:45:4a:
                    99:f0:7e:a4:46:6b:37:8a:da:ea:23:6b:5e:7e:87:
                    bf:45:3b:66:91:57:b6:af:6c:fa:68:16:44:ba:cf:
                    a1:4a:3e:b4:4a:ef:c7:2b:a8:cd:f8:b5:40:4d:42:
                    b4:00:35:45:4e:2d:1d:75:93:e9:d7:dc:42:2c:9a:
                    ab:57:5b:43:d2:82:58:92:cd:e5:0c:0e:c0:e1:9e:
                    89:ff:eb:26:ac:0e:1b:7e:49:01:b5:be:5b:de:6c:
                    f5:d4:f3:0b:ed:8b:7e:08:f7:fd:91:02:43:9a:c9:
                    e7:dd:08:08:84:f8:8f:c6:67:8d:84:e3:00:66:20:
                    ea:d5:65:c8:98:c4:d4:27:8b:eb:8e:2b:77:8c:4c:
                    18:a8:6d:ac:46:80:5e:aa:02:1c:9f:41:f9:56:fd:
                    eb:d1:16:aa:f6:07:b5:8d:94:6d:47:a9:e1:99:e2:
                    c3:be:80:03:0a:36:3d:b5:3e:ba:31:84:45:24:47:
                    f6:f3:28:39:c5:9e:d7:7e:e9:33:d9:1f:e1:11:cf:
                    33:13:a9:a4:d9:39:cd:6b:43:b6:64:be:93:d5:1f:
                    0c:1f:50:6d:1c:3e:58:81:aa:7a:55:f8:80:30:e3:
                    7a:99:34:fa:db:5a:11:58:86:3a:4a:43:5c:f7:74:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5D:F0:B2:29:38:B0:43:9F:70:00:96:1C:B3:55:ED:7E:4C:8D:D5
            X509v3 Authority Key Identifier:
                keyid:39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:72:81:e7:85:96:c6:85:a8:72:3f:92:38:0a:10:f8:6c:52:
         67:1d:40:3f:6c:9c:e6:8a:3c:9d:18:26:d5:3c:a7:2e:9e:55:
         4f:97:a6:27:9f:45:d5:6e:8a:12:e4:cd:80:c3:06:2b:4c:ee:
         b8:03:84:6a:dd:86:58:68:76:ff:84:97:86:09:d7:cb:87:b9:
         5b:1a:95:94:be:df:7b:85:da:91:89:24:e6:f2:1e:04:6d:c1:
         ac:00:3d:9b:cc:2d:e8:8d:67:83:29:28:9d:22:a0:f1:56:62:
         eb:8b:04:67:f4:e8:07:ea:63:1f:f6:90:95:3e:bc:ab:91:5d:
         1b:2d:2e:d2:a5:59:47:a1:0a:0a:fd:e8:81:94:99:9e:f3:47:
         c4:bc:92:61:a3:d7:d3:65:91:1a:66:89:30:23:35:58:e8:e3:
         41:1e:08:b3:7e:2d:b2:52:55:4f:47:17:fe:7f:81:14:0c:0d:
         08:6c:b4:55:3c:ef:e2:ca:55:e7:54:8b:14:eb:c9:5e:a2:c9:
         3f:da:9b:00:56:b2:e2:81:72:a4:dc:e0:f8:d0:7b:8a:51:b2:
         b0:a0:38:b1:ab:90:8d:ac:99:18:d2:79:94:a9:56:86:c3:9e:
         d2:49:a6:e5:1f:3c:26:e6:de:4e:9b:ca:b0:b4:12:d4:67:f6:
         99:02:dc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:15 2025 by rpki-client