Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
File:                     KnzueRgruFkbsTXdv7vulMHfQIc.mft (raw, json)
Hash identifier:          AupjSeYlxyMbJnoLPSibdlku83fvBAX4SPgeb5SMB3A=
Subject key identifier:   5F:AA:00:C3:B2:95:F9:22:54:C4:5E:A0:23:97:02:6B:84:54:80:C8
Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
Certificate issuer:       /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Certificate serial:       0204
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
Manifest number:          01FB
Signing time:             Fri 31 Jan 2025 02:40:14 +0000
Manifest this update:     Fri 31 Jan 2025 02:40:14 +0000
Manifest next update:     Sun 02 Feb 2025 02:40:14 +0000
Files and hashes:         1: KnzueRgruFkbsTXdv7vulMHfQIc.crl (hash: n0b6kwygTRN8VPEQfKidHgjp0TWkZYomIQO8YTjCl8s=)
                          2: 1A85425E69BB11EEBF5E904C4AD9E6FC.roa (hash: Kx/Y8dEbUYeqoToY5LpNSdsXIlBKib23+2DqdNa43/Y=)
                          3: FD189F0E69BA11EEBE81314C4AD9E6FC.roa (hash: UK6i2dFbIWYL9h4T/dpZ4yF8qA519gysmxncwqhjDNc=)
                          4: E44337C869BA11EE88CB094C4AD9E6FC.roa (hash: 1d8FtYAZsHDPTXDngJ49htpRva8POmc7nirQyWgiDXo=)
                          5: 3BB28D0269BA11EEABA4ED494AD9E6FC.roa (hash: Q1XgZ9ZmDeVtE4gxia+GOYWXfxLUPO9DALH0Nrtl+eg=)
                          6: B8B5DACA69BA11EEBD303C4B4AD9E6FC.roa (hash: uoqftiTs2TQ3rEVnLUYDWPuBL54Tw5Qh6vFz0fe7JV4=)
                          7: 98FDCD4669BA11EE95130C4B4AD9E6FC.roa (hash: V8tXop4xNSLK7NTMuObTNFw9mcHKdpwbwIJqeSi9teo=)
                          8: 6399788A69BA11EE9D71534A4AD9E6FC.roa (hash: kaAHuzndBPzeMjc2nNN3ZcTB7Ew41AHipGqkh1wKLvg=)
                          9: C7D92E1869B911EE953F70484AD9E6FC.roa (hash: SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
        Validity
            Not Before: Jan 31 02:40:14 2025 GMT
            Not After : Feb  2 02:40:14 2025 GMT
        Subject: CN=679c380e-72f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e4:80:17:35:5f:11:e8:7a:40:5a:59:eb:f9:
                    73:00:cd:aa:95:9b:20:07:cc:91:89:45:85:53:2c:
                    20:b9:3d:9a:cf:b1:78:94:04:09:99:1d:8f:bc:46:
                    f5:3f:68:1f:86:13:7c:f7:7b:53:f6:e2:43:34:fa:
                    78:b1:44:9b:4c:dd:f5:b4:3c:68:d4:a5:8b:30:a2:
                    a9:d5:5c:b0:d3:09:08:36:ce:b6:ff:7a:c6:50:09:
                    10:45:c6:9b:a1:3b:0a:20:6f:66:1a:70:91:70:85:
                    4c:17:20:46:2d:c2:ad:52:a6:d4:49:42:b7:0d:1c:
                    03:f5:ce:68:4e:f7:d4:15:e9:97:b9:76:bc:b9:14:
                    ae:95:3d:d1:1a:79:41:5e:55:9c:b2:57:d3:83:37:
                    d6:13:91:0e:f8:4f:c8:dc:47:7b:28:4e:ff:c2:fe:
                    6b:0c:c8:27:d9:96:e5:d6:37:ad:c5:ca:b7:b4:60:
                    61:b3:e3:b9:57:9f:58:e3:83:7d:0c:15:43:09:80:
                    b4:bc:ea:79:2b:49:a7:5e:eb:a6:55:fe:96:bf:7a:
                    05:44:fa:fd:86:97:43:1e:aa:60:01:4b:5a:39:d9:
                    42:6b:b5:aa:70:dc:9e:85:52:6d:13:15:2f:0e:ed:
                    60:a2:95:9a:20:97:80:d9:4a:6c:55:45:93:9f:b2:
                    93:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AA:00:C3:B2:95:F9:22:54:C4:5E:A0:23:97:02:6B:84:54:80:C8
            X509v3 Authority Key Identifier:
                keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:75:23:4c:be:b1:33:ba:c2:33:d1:52:f1:99:a6:e0:41:49:
         c0:0f:c4:5c:fd:ad:8d:23:58:05:ea:e9:d7:1c:54:18:a8:34:
         6b:8d:9a:4e:31:8b:6a:68:de:95:d8:18:27:5d:b4:52:dd:b3:
         0a:1a:5d:fb:d9:c2:56:95:31:01:2c:71:2e:ad:a3:f2:18:e7:
         a3:60:65:b7:31:ea:68:49:f2:be:fa:f2:da:95:6a:dd:2f:e0:
         ff:6d:13:ab:18:0a:f6:2e:bb:8f:6f:9d:e1:e4:47:cf:66:81:
         48:83:f1:f3:b8:d4:08:d7:91:35:71:28:e1:57:7a:58:96:39:
         a4:20:bc:c8:36:0b:8e:7b:b6:92:99:26:66:8a:25:ab:c2:4e:
         ee:72:14:11:a7:aa:4c:70:55:4a:82:5b:83:3f:3b:6a:3e:44:
         96:32:10:c8:9b:b1:37:3c:95:25:83:84:1d:b2:44:fb:10:7f:
         88:5d:88:c7:de:c5:6b:49:69:82:b2:6b:c4:91:00:ce:28:29:
         33:56:48:02:a6:20:fc:53:4b:e5:25:57:5c:de:d0:e2:07:7b:
         bb:a0:73:d7:ef:cc:b9:7f:74:3f:83:19:54:f5:02:56:36:c1:
         d1:3e:da:27:b0:b7:28:41:70:40:b2:bf:29:88:45:ed:27:32:
         04:c7:0e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:05 2025 by rpki-client