Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File:                     rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier:          lXCSvM0rFQVvN04zOtoFZ/QUku5nrmVjcubzzIuD5wo=
Subject key identifier:   B7:2A:35:03:90:BE:0F:43:42:D1:B5:8A:51:E8:57:7C:FF:4C:B3:6C
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       0830
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number:          0830
Signing time:             Fri 31 Jan 2025 01:17:03 +0000
Manifest this update:     Fri 31 Jan 2025 01:17:03 +0000
Manifest next update:     Sun 02 Feb 2025 01:17:03 +0000
Files and hashes:         1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: JZsViO/4hN/bHlRx6h6hxLNzX02VjrSqcpmIHhOY3Nw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2096 (0x830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: Jan 31 01:17:03 2025 GMT
            Not After : Feb  2 01:17:03 2025 GMT
        Subject: CN=679c248f-0fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:e6:4b:64:0a:1a:3b:80:45:d0:14:88:cb:
                    32:c2:a0:3f:ac:7e:ef:47:49:71:be:63:03:30:85:
                    27:b4:32:44:f5:e1:9e:1f:d8:7c:2d:4d:fd:2c:ba:
                    4f:97:49:57:e7:36:0c:5c:30:0c:6b:9e:b4:a9:ae:
                    e9:4c:db:be:6d:c7:d7:94:6c:63:fd:78:5c:40:c5:
                    da:cb:69:d9:82:29:d5:0a:a3:c1:7e:2d:27:6d:11:
                    4e:b8:42:6f:de:3d:ec:2b:c5:fc:76:22:3e:6b:b1:
                    79:5f:db:a6:2b:63:c4:08:7f:28:e1:a9:82:ee:52:
                    ec:51:84:7c:c0:ed:52:4b:64:29:a9:07:74:66:9c:
                    e0:3b:de:27:ae:d1:43:2c:85:ee:1f:39:ec:1b:12:
                    76:c5:33:5b:72:aa:50:d1:00:fa:55:e9:7c:f0:28:
                    81:2d:76:12:6d:00:9a:10:69:e0:49:a9:49:22:48:
                    ed:a4:ed:3c:d4:a2:8e:8d:a7:4d:9d:79:f6:a2:bd:
                    92:58:5a:76:74:91:7a:27:8a:85:3c:31:30:ce:62:
                    c1:fb:09:0a:38:f5:a5:21:7e:35:a5:ce:74:4a:3c:
                    a6:1a:9d:7f:91:85:00:15:1d:6d:65:2e:3e:7c:e5:
                    3d:03:ff:fc:5f:4e:a5:4b:8c:e7:85:cf:6a:61:d1:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2A:35:03:90:BE:0F:43:42:D1:B5:8A:51:E8:57:7C:FF:4C:B3:6C
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:44:04:c6:c7:8b:2b:cc:8e:c0:8b:a1:61:ee:08:99:7b:17:
         af:99:bc:71:70:8f:e5:0c:b1:5e:65:41:15:39:a3:ed:9f:fa:
         42:fc:ca:02:a5:5d:0e:e8:74:65:c8:1f:1d:bc:9b:28:f8:99:
         4f:8c:1d:41:fa:5c:f3:ed:f5:0e:88:73:47:c0:58:47:3f:fd:
         7f:14:8b:98:1a:3f:93:50:f8:ac:2e:39:5a:08:ed:e1:0f:32:
         11:53:e8:37:d4:a5:2c:c5:81:89:ec:93:73:76:88:0a:e6:5c:
         8e:9a:b0:d4:89:30:a6:ee:98:22:78:41:cb:69:ac:47:c0:53:
         06:be:0f:c5:0c:36:03:a7:76:eb:a7:59:4c:70:9c:db:d9:7d:
         4e:03:16:96:7b:b0:6a:a9:85:c4:2d:26:76:a5:17:b2:8d:41:
         84:4e:a9:58:ec:eb:15:72:bc:d9:93:16:8e:88:5b:d5:0a:b8:
         f6:2b:c3:64:68:68:40:90:50:06:4e:4d:67:98:4d:88:70:07:
         76:48:1e:e0:b0:77:ef:13:08:ff:03:f4:63:07:d1:fc:fc:3f:
         30:d7:76:20:14:18:c4:76:bd:dc:df:0d:b7:3f:c4:38:1f:32:
         26:6e:6a:0d:53:e4:f6:42:45:19:07:3a:bc:bd:cd:c8:66:92:
         55:bf:d2:a0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCDAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjBDMTRBRjExMC8GA1UEBRMoQUUxNUU2MzU1QjA4NEE5M0VCQTIxQzRBOURENjFC
Q0RDMjU4QjU5RTAeFw0yNTAxMzEwMTE3MDNaFw0yNTAyMDIwMTE3MDNaMBgxFjAU
BgNVBAMTDTY3OWMyNDhmLTBmZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/TOZLZAoaO4BF0BSIyzLCoD+sfu9HSXG+YwMwhSe0MkT14Z4f2HwtTf0s
uk+XSVfnNgxcMAxrnrSprulM275tx9eUbGP9eFxAxdrLadmCKdUKo8F+LSdtEU64
Qm/ePewrxfx2Ij5rsXlf26YrY8QIfyjhqYLuUuxRhHzA7VJLZCmpB3RmnOA73ieu
0UMshe4fOewbEnbFM1tyqlDRAPpV6XzwKIEtdhJtAJoQaeBJqUkiSO2k7TzUoo6N
p02defaivZJYWnZ0kXonioU8MTDOYsH7CQo49aUhfjWlznRKPKYanX+RhQAVHW1l
Lj585T0D//xfTqVLjOeFz2ph0aE3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUtyo1
A5C+D0NC0bWKUehXfP9Ms2wwHwYDVR0jBBgwFoAUrhXmNVsISpProhxKndYbzcJY
tZ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYwQzE0L0NBRDVGMzYyOUJGQTExRTlCMUJGQzE3OUY4QUVBMjI4L3JoWG1O
VnNJU3BQcm9oeEtuZFliemNKWXRaNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JoWG1OVnNJU3BQcm9oeEtuZFliemNKWXRaNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjBDMTQvQ0FENUYzNjI5QkZBMTFFOUIxQkZDMTc5RjhB
RUEyMjgvcmhYbU5Wc0lTcFByb2h4S25kWWJ6Y0pZdFo0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIRATGx4srzI7Ai6Fh7giZexevmbxx
cI/lDLFeZUEVOaPtn/pC/MoCpV0O6HRlyB8dvJso+JlPjB1B+lzz7fUOiHNHwFhH
P/1/FIuYGj+TUPisLjlaCO3hDzIRU+g31KUsxYGJ7JNzdogK5lyOmrDUiTCm7pgi
eEHLaaxHwFMGvg/FDDYDp3brp1lMcJzb2X1OAxaWe7BqqYXELSZ2pReyjUGETqlY
7OsVcrzZkxaOiFvVCrj2K8NkaGhAkFAGTk1nmE2IcAd2SB7gsHfvEwj/A/RjB9H8
/D8w13YgFBjEdr3c3w23P8Q4HzImbmoNU+T2QkUZBzq8vc3IZpJVv9Kg
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:26:19 2025 by rpki-client