Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
File:                     KCVggNQ6BNgSOO9T0xFu1kewbhw.mft (raw, json)
Hash identifier:          A4g+p62Gc8bbmiFfE32ZwDR57yNXmDpCcZWcN+JRomE=
Subject key identifier:   20:1D:6A:9D:E9:B0:A0:9F:AC:26:06:A5:4C:76:5C:1A:3A:2D:88:B7
Authority key identifier: 28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C
Certificate issuer:       /CN=F3662DABAR/serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
Certificate serial:       0313
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
Manifest number:          0312
Signing time:             Fri 31 Jan 2025 02:17:28 +0000
Manifest this update:     Fri 31 Jan 2025 02:17:28 +0000
Manifest next update:     Sun 02 Feb 2025 02:17:28 +0000
Files and hashes:         1: KCVggNQ6BNgSOO9T0xFu1kewbhw.crl (hash: mQrXvgsfJmyQHCvcnaGpfr+X8LVyR7DaGjXQJkvv1D0=)
                          2: DB993B728F4F11ED982ED088F1222468.roa (hash: zmof4qkrG67Fqj/AA24Lhy1I6eBvEWQSDaesv5Uqj2o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787 (0x313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAR/serialNumber=28256080D43A04D81238EF53D3116ED647B06E1C
        Validity
            Not Before: Jan 31 02:17:28 2025 GMT
            Not After : Feb  2 02:17:28 2025 GMT
        Subject: CN=679c32b8-44aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:cd:0c:5f:ac:7f:e9:f5:9a:1e:cf:00:8f:
                    58:fc:63:38:d5:f4:45:2f:0e:77:bc:21:86:0a:14:
                    72:c4:5d:19:12:32:8d:30:91:29:16:1a:94:8f:6c:
                    51:a2:5a:73:ff:aa:49:a2:71:76:9f:f3:26:cd:75:
                    92:dd:b2:81:35:23:24:fa:bc:20:84:23:72:42:3b:
                    7f:9f:6c:8e:ea:22:fa:2c:d0:ab:b0:5f:b2:56:d8:
                    48:5b:e2:a3:a1:36:c1:d8:81:25:87:3d:11:71:24:
                    4c:03:13:83:e2:c4:9f:f0:5f:76:0b:d2:df:42:2f:
                    e9:b7:2c:90:f5:4c:84:ad:d6:f7:65:1d:3f:aa:d2:
                    35:93:a1:46:4d:1e:ea:36:83:33:8d:91:f0:1b:ef:
                    3a:c1:28:97:dc:42:fd:90:3a:26:bd:e7:0c:fc:3b:
                    80:44:c3:e9:df:ce:08:60:94:0e:b6:b2:9f:e7:42:
                    9a:1f:fe:5c:53:15:90:fd:80:71:e2:ae:c5:37:c5:
                    42:78:91:f3:15:13:b1:f8:d0:55:8c:1b:51:50:7d:
                    3e:1a:f8:b2:c1:a0:53:32:c0:17:58:3c:2d:8e:d0:
                    d3:ac:8a:93:07:2d:75:da:51:1e:39:99:08:3c:27:
                    d8:5c:97:7c:92:90:6c:fd:3d:16:a4:8c:28:a1:73:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1D:6A:9D:E9:B0:A0:9F:AC:26:06:A5:4C:76:5C:1A:3A:2D:88:B7
            X509v3 Authority Key Identifier:
                keyid:28:25:60:80:D4:3A:04:D8:12:38:EF:53:D3:11:6E:D6:47:B0:6E:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KCVggNQ6BNgSOO9T0xFu1kewbhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/1ADA46468F3211EDAD621AB8F1222468/KCVggNQ6BNgSOO9T0xFu1kewbhw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:d8:4e:4b:86:31:4d:bf:4f:b9:31:ac:5e:a9:5d:29:df:a7:
         f2:98:35:f4:01:60:5c:b6:34:93:c5:70:50:ba:de:30:04:0c:
         b7:72:a5:c2:c1:02:b2:03:75:3a:a3:b6:e7:0a:85:60:55:b9:
         e0:3b:6a:4c:00:61:2d:5e:e4:c3:65:c4:c5:6b:d7:4c:07:d5:
         01:9b:92:4d:fe:00:cd:ec:e4:7f:f9:5c:f9:2a:b8:80:a6:55:
         ff:0d:dc:f1:53:dd:03:13:68:d2:41:97:4f:43:cb:6e:4f:34:
         a9:2b:d6:05:b9:09:09:94:ec:7d:f5:34:45:c3:fe:50:4a:41:
         37:15:af:a9:fa:fe:9d:1c:a0:54:d4:06:17:a7:d6:df:86:7d:
         5b:d9:1a:25:57:93:39:4b:d7:ce:c8:b3:7b:d9:6d:0d:52:75:
         44:9c:0e:66:f8:f6:25:29:f9:de:6b:66:26:ca:39:4f:72:cc:
         21:be:9d:22:e1:96:db:d3:f1:87:cf:8c:6f:8b:ad:2f:e2:30:
         f9:1f:aa:df:29:da:52:08:d1:e8:37:9f:7f:e3:12:3e:68:97:
         1e:d4:8b:11:b4:42:95:96:81:ca:7e:78:7d:4f:f4:a4:9b:af:
         fb:7e:9d:a9:ea:4d:fa:d0:15:08:b4:76:96:5b:0d:ac:1f:fb:
         6d:7d:dc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:53:48 2025 by rpki-client