Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
File:                     yLuITQS6vBYFq333lYeWBZySwmo.mft (raw, json)
Hash identifier:          8QvyWQoRORri6P9zoTKpgYxWzeXQ5kaOWCJduizM4cI=
Subject key identifier:   E7:3D:95:53:07:53:82:A6:4F:BD:59:64:C4:24:7B:AA:CD:E5:94:4D
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Certificate issuer:       /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial:       0473
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
Manifest number:          0472
Signing time:             Fri 31 Jan 2025 01:58:18 +0000
Manifest this update:     Fri 31 Jan 2025 01:58:17 +0000
Manifest next update:     Sun 02 Feb 2025 01:58:17 +0000
Files and hashes:         1: yLuITQS6vBYFq333lYeWBZySwmo.crl (hash: D+oc1bhL0VmbFE8KGXNyXYHjtjQojjDNpTm1W7bFKaU=)
                          2: DBE0F6EE7E8C11EC9A551E885A40D577.roa (hash: e+LkqN78DWuhBsqL8FFr5mWtusQpgR9pzmjfGcJQ5/w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1139 (0x473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
        Validity
            Not Before: Jan 31 01:58:17 2025 GMT
            Not After : Feb  2 01:58:17 2025 GMT
        Subject: CN=679c2e3a-a569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:48:07:0f:a6:e3:f7:84:da:0a:45:68:d7:
                    52:45:6d:0b:03:b5:77:d2:ad:a6:10:cb:32:aa:aa:
                    08:c8:29:c8:ab:4d:06:e3:0c:93:f2:ab:13:aa:ed:
                    ed:3f:a9:e2:58:78:0a:e2:1f:55:93:7d:30:1f:62:
                    bd:30:58:86:98:0b:65:dc:16:e2:9e:cf:3c:fd:2a:
                    62:17:db:0f:48:20:eb:00:0f:14:fa:4f:29:f1:38:
                    bb:b3:03:e4:71:95:97:e2:fc:32:67:44:89:be:81:
                    ac:0f:f4:86:c6:06:3d:7a:da:24:5b:f4:ec:c7:c1:
                    cd:0e:c4:08:d5:df:1e:aa:c2:c9:cf:77:30:d8:da:
                    cb:08:2b:12:da:82:f2:8a:12:b3:51:06:8a:de:81:
                    bb:3a:48:e7:3f:38:6f:9e:39:37:f9:cd:61:7b:53:
                    38:6d:61:ea:ee:40:9e:8e:b0:9c:59:df:5f:29:89:
                    a1:02:b7:a4:4f:97:fc:f7:1c:7f:eb:1f:9e:9b:27:
                    e8:67:76:e2:ae:d2:09:4e:c2:62:76:4c:f5:f8:91:
                    16:ed:3f:3f:be:a3:7d:37:67:bb:a1:ef:13:e2:86:
                    7e:46:39:cf:6c:7f:c0:86:1c:96:fe:ec:4f:5b:c4:
                    6d:03:80:94:40:7d:5a:e1:31:20:b6:e6:e2:5b:3b:
                    8d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3D:95:53:07:53:82:A6:4F:BD:59:64:C4:24:7B:AA:CD:E5:94:4D
            X509v3 Authority Key Identifier:
                keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:3b:5c:1d:ac:d3:b7:2c:46:a3:2b:64:9b:d7:99:e1:cb:3d:
         d4:17:76:75:0f:dc:49:c3:d6:18:c6:02:f2:89:c2:87:7c:5b:
         f2:1c:1f:59:9d:19:cd:b2:65:dd:97:0e:a4:af:f9:f9:7a:37:
         bb:ab:4f:2b:a2:96:77:65:a7:7b:44:ca:6f:64:0b:12:cf:6c:
         1c:e2:b4:47:d8:01:18:48:1d:7a:fc:23:5d:4b:ea:b7:97:90:
         cb:bb:ad:af:86:d2:36:9a:3c:24:63:48:2b:84:9c:12:0d:1f:
         b1:15:47:63:dd:1e:3f:a7:98:52:aa:5a:d5:72:be:9e:fb:e7:
         bf:7c:07:bb:e3:ce:83:36:52:9b:07:f6:9f:28:b3:f0:b5:f0:
         23:01:c5:75:39:e0:c6:ad:1c:0b:db:95:91:14:39:3f:56:ab:
         99:34:d5:6c:53:cb:6c:a2:e8:38:f5:2a:59:bc:e4:ee:60:87:
         43:1d:df:19:4a:2f:8d:da:ac:0a:c7:35:0e:55:90:c2:bc:a6:
         be:24:ec:49:5e:92:1f:a5:61:ba:3b:b3:f2:6c:ec:7b:8d:ab:
         75:dd:89:37:d9:28:16:1c:40:75:f6:96:94:88:97:f6:01:77:
         b8:71:ab:43:c5:82:9d:06:20:54:4a:b9:b4:c8:e7:48:54:7b:
         ea:ea:ef:77
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzAzNjlBRjExMC8GA1UEBRMoQzhCQjg4NEQwNEJBQkMxNjA1QUI3REY3OTU4Nzk2
MDU5QzkyQzI2QTAeFw0yNTAxMzEwMTU4MTdaFw0yNTAyMDIwMTU4MTdaMBgxFjAU
BgNVBAMTDTY3OWMyZTNhLWE1NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCukUgHD6bj94TaCkVo11JFbQsDtXfSraYQyzKqqgjIKcirTQbjDJPyqxOq
7e0/qeJYeAriH1WTfTAfYr0wWIaYC2XcFuKezzz9KmIX2w9IIOsADxT6TynxOLuz
A+RxlZfi/DJnRIm+gawP9IbGBj162iRb9OzHwc0OxAjV3x6qwsnPdzDY2ssIKxLa
gvKKErNRBoregbs6SOc/OG+eOTf5zWF7UzhtYeruQJ6OsJxZ318piaECt6RPl/z3
HH/rH56bJ+hnduKu0glOwmJ2TPX4kRbtPz++o303Z7uh7xPihn5GOc9sf8CGHJb+
7E9bxG0DgJRAfVrhMSC25uJbO425AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5z2V
UwdTgqZPvVlkxCR7qs3llE0wHwYDVR0jBBgwFoAUyLuITQS6vBYFq333lYeWBZyS
wmowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcwMzY5LzY5MTU2NUQyN0U3ODExRUNCNzc0NjFDQjVBNDBENTc3L3lMdUlU
UVM2dkJZRnEzMzNsWWVXQlp5U3dtby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3lMdUlUUVM2dkJZRnEzMzNsWWVXQlp5U3dtby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzAzNjkvNjkxNTY1RDI3RTc4MTFFQ0I3NzQ2MUNCNUE0
MEQ1NzcveUx1SVRRUzZ2QllGcTMzM2xZZVdCWnlTd21vLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrO1wdrNO3LEajK2Sb15nhyz3UF3Z1
D9xJw9YYxgLyicKHfFvyHB9ZnRnNsmXdlw6kr/n5eje7q08ropZ3Zad7RMpvZAsS
z2wc4rRH2AEYSB16/CNdS+q3l5DLu62vhtI2mjwkY0grhJwSDR+xFUdj3R4/p5hS
qlrVcr6e++e/fAe7486DNlKbB/afKLPwtfAjAcV1OeDGrRwL25WRFDk/VquZNNVs
U8tsoug49SpZvOTuYIdDHd8ZSi+N2qwKxzUOVZDCvKa+JOxJXpIfpWG6O7PybOx7
jat13Yk32SgWHEB19paUiJf2AXe4catDxYKdBiBUSrm0yOdIVHvq6u93
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:13:43 2025 by rpki-client