Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
File:                     FrjfWzvnTBrmjjHBcBFapze9XnA.mft (raw, json)
Hash identifier:          N9DbIetYMrNd0KjWQcFViZ908AYpd+GL/PxRvouDaeg=
Subject key identifier:   F1:59:2A:13:31:8D:5C:87:56:44:2B:8A:37:A7:87:7E:9B:66:B3:61
Authority key identifier: 16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70
Certificate issuer:       /CN=F3668A5FAF/serialNumber=16B8DF5B3BE74C1AE68E31C170115AA737BD5E70
Certificate serial:       04F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
Manifest number:          04EF
Signing time:             Fri 31 Jan 2025 01:51:37 +0000
Manifest this update:     Fri 31 Jan 2025 01:51:36 +0000
Manifest next update:     Sun 02 Feb 2025 01:51:36 +0000
Files and hashes:         1: FrjfWzvnTBrmjjHBcBFapze9XnA.crl (hash: X4ZjsgoMQjHQNjBtk1ULiFUxrwU2d3DulzngVTN7CDw=)
                          2: DF0B42061D3011ECBD63FB02D8A014CE.roa (hash: /YQXCdcgCrNhLL360EhRhY7BDY5J8NgmUeOOyfGlQ8Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668A5FAF/serialNumber=16B8DF5B3BE74C1AE68E31C170115AA737BD5E70
        Validity
            Not Before: Jan 31 01:51:36 2025 GMT
            Not After : Feb  2 01:51:36 2025 GMT
        Subject: CN=679c2ca9-a3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:eb:a4:9e:f4:5e:4f:12:ef:88:c0:06:fd:f4:
                    cc:c7:4a:b6:a4:f0:7d:76:f4:58:00:9f:f0:98:cc:
                    de:ec:aa:a5:be:80:cf:3e:a5:9a:b1:30:c7:3b:1e:
                    3e:60:04:8d:e8:6f:a2:db:fc:e2:09:7d:b0:54:41:
                    13:d9:fb:ee:e5:07:88:25:9b:e6:d9:b2:2d:2d:81:
                    0f:1b:71:a0:65:37:e7:6a:3c:5d:57:06:be:c9:a3:
                    b9:e2:1d:5d:c9:f9:03:b5:93:de:70:e7:0c:45:ba:
                    44:03:96:89:6a:ad:bc:a7:3e:08:5e:ee:1a:73:a2:
                    81:af:0a:7d:1d:b2:bd:da:70:af:7e:55:7b:5c:9b:
                    ed:74:5d:95:d0:98:1d:95:6a:42:3c:aa:95:f2:79:
                    7b:15:e0:90:6a:c1:6e:28:f9:26:27:d1:fc:80:32:
                    16:3a:94:b7:35:5d:36:94:5e:4f:51:87:18:65:b2:
                    7c:a7:c2:55:c9:67:02:87:10:09:7b:17:6a:24:9a:
                    a8:c0:d6:95:a8:67:09:5a:31:e6:51:86:b0:2e:db:
                    3d:67:3f:07:a5:ab:e5:10:e8:90:bd:b3:09:36:60:
                    91:35:7e:be:b9:95:7e:2c:a1:67:af:f2:a6:72:80:
                    6f:99:d8:6d:7f:04:2c:b1:ad:12:22:d3:91:ae:99:
                    aa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:59:2A:13:31:8D:5C:87:56:44:2B:8A:37:A7:87:7E:9B:66:B3:61
            X509v3 Authority Key Identifier:
                keyid:16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:31:99:11:c6:69:ed:df:e4:31:e8:61:ed:05:80:39:f0:82:
         6c:b7:9f:03:91:30:c4:ca:74:c2:0b:18:af:2f:e2:77:cf:32:
         6f:b2:2b:d4:58:4f:6e:cb:06:fb:30:80:6e:31:a7:cf:6f:17:
         64:fc:46:f5:1e:d7:22:a9:04:e5:ec:40:01:f9:47:00:07:36:
         fd:97:f4:66:71:77:49:51:cd:a3:92:c4:29:02:1a:df:22:99:
         a1:28:69:91:9d:76:24:c3:7a:15:dd:63:1a:33:16:3f:2c:c1:
         01:ab:d6:0d:26:8b:7d:95:af:fa:64:36:8a:11:63:ec:2a:ea:
         d2:c3:82:49:2a:6d:76:c9:70:bd:18:89:a8:35:c8:10:9a:39:
         db:35:86:e3:60:5a:25:2c:d8:6b:1a:3a:a9:37:ad:b5:40:b6:
         d1:7d:67:b5:5b:cf:18:c1:3d:16:bd:94:52:28:40:df:81:73:
         31:97:2a:92:30:99:51:fb:65:bf:7e:fa:d7:fd:ef:f1:4e:3d:
         89:4b:99:29:26:8c:0f:c1:42:2b:f5:5e:dc:91:24:5a:63:83:
         9c:49:84:b8:b4:99:c2:a1:3d:ee:fe:7c:01:b0:00:d3:a7:54:
         27:07:70:b1:5f:0f:43:6b:bd:e7:92:25:01:99:a5:46:4f:ed:
         61:5d:81:ae
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhBNUZBRjExMC8GA1UEBRMoMTZCOERGNUIzQkU3NEMxQUU2OEUzMUMxNzAxMTVB
QTczN0JENUU3MDAeFw0yNTAxMzEwMTUxMzZaFw0yNTAyMDIwMTUxMzZaMBgxFjAU
BgNVBAMTDTY3OWMyY2E5LWEzZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDN66Se9F5PEu+IwAb99MzHSrak8H129FgAn/CYzN7sqqW+gM8+pZqxMMc7
Hj5gBI3ob6Lb/OIJfbBUQRPZ++7lB4glm+bZsi0tgQ8bcaBlN+dqPF1XBr7Jo7ni
HV3J+QO1k95w5wxFukQDlolqrbynPghe7hpzooGvCn0dsr3acK9+VXtcm+10XZXQ
mB2VakI8qpXyeXsV4JBqwW4o+SYn0fyAMhY6lLc1XTaUXk9RhxhlsnynwlXJZwKH
EAl7F2okmqjA1pWoZwlaMeZRhrAu2z1nPwelq+UQ6JC9swk2YJE1fr65lX4soWev
8qZygG+Z2G1/BCyxrRIi05GumarzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8Vkq
EzGNXIdWRCuKN6eHfptms2EwHwYDVR0jBBgwFoAUFrjfWzvnTBrmjjHBcBFapze9
XnAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4QTVGL0I4OUI3M0E0MUQyRTExRUNCOURGMjA3RUQ4QTAxNENFL0ZyamZX
enZuVEJybWpqSEJjQkZhcHplOVhuQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZyamZXenZuVEJybWpqSEJjQkZhcHplOVhuQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjhBNUYvQjg5QjczQTQxRDJFMTFFQ0I5REYyMDdFRDhB
MDE0Q0UvRnJqZld6dm5UQnJtampIQmNCRmFwemU5WG5BLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcMZkRxmnt3+Qx6GHtBYA58IJst58D
kTDEynTCCxivL+J3zzJvsivUWE9uywb7MIBuMafPbxdk/Eb1HtciqQTl7EAB+UcA
Bzb9l/RmcXdJUc2jksQpAhrfIpmhKGmRnXYkw3oV3WMaMxY/LMEBq9YNJot9la/6
ZDaKEWPsKurSw4JJKm12yXC9GImoNcgQmjnbNYbjYFolLNhrGjqpN621QLbRfWe1
W88YwT0WvZRSKEDfgXMxlyqSMJlR+2W/fvrX/e/xTj2JS5kpJowPwUIr9V7ckSRa
Y4OcSYS4tJnCoT3u/nwBsADTp1QnB3CxXw9Da73nkiUBmaVGT+1hXYGu
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:43:39 2025 by rpki-client