Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          HPQs2YLVNrAc9jMo9VLIIUn1sG7EbJ/Lxdcu5T2cvOY=
Subject key identifier:   0E:56:64:66:88:14:DF:CD:AD:96:D8:B7:D4:D4:BC:1F:2C:60:FA:AA
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       03B8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          03B6
Signing time:             Fri 31 Jan 2025 02:08:29 +0000
Manifest this update:     Fri 31 Jan 2025 02:08:29 +0000
Manifest next update:     Sun 02 Feb 2025 02:08:29 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: kG5y1NNRC6N0JaprN3Q6MGurNBUzyMzfNC3Si1T9wlA=)
                          2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
        Validity
            Not Before: Jan 31 02:08:29 2025 GMT
            Not After : Feb  2 02:08:29 2025 GMT
        Subject: CN=679c309d-4149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:39:8b:c7:62:92:87:27:d8:c9:c7:7d:34:
                    7a:4a:d2:04:9b:7e:8a:7c:79:cf:82:8c:74:d2:1d:
                    e7:a1:89:55:8c:53:bb:5d:a1:ad:88:7f:8e:d3:b8:
                    d3:77:f5:7e:da:10:fe:58:10:45:b4:98:41:ff:d3:
                    d1:b2:76:e3:12:11:f9:be:78:04:d8:47:ef:8f:70:
                    bf:61:b2:7b:c7:0c:c8:2e:47:8f:54:e0:1f:d3:a8:
                    65:90:8d:dc:d0:f1:cd:54:ee:39:6c:c0:80:2c:78:
                    81:e7:f9:99:88:c7:f8:35:d1:f2:ee:4e:db:41:7e:
                    e1:ed:17:d1:97:85:62:84:94:ec:16:53:6c:8b:f9:
                    84:f1:57:ca:1d:90:94:dc:68:42:b1:49:ad:28:dc:
                    fa:4f:df:83:30:ed:ee:a7:8c:14:40:04:89:15:15:
                    87:f5:59:d4:13:55:4d:9b:a4:03:20:e7:f8:2a:8b:
                    7d:27:7d:f8:ba:8b:50:de:5a:f8:f8:fd:e3:d7:aa:
                    61:53:62:2f:b1:e1:6d:77:4f:63:6b:24:52:d1:56:
                    64:00:1c:85:01:a9:3b:4a:bf:5b:e5:82:5a:7e:8a:
                    00:e8:0c:07:e3:d1:ba:82:9e:40:ff:35:d7:45:b7:
                    cc:a1:22:e6:ee:03:a9:6e:46:af:05:5a:9b:11:cc:
                    0e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:56:64:66:88:14:DF:CD:AD:96:D8:B7:D4:D4:BC:1F:2C:60:FA:AA
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c2:39:1f:84:84:f7:ee:6e:d3:a5:d6:44:0a:8d:0b:89:53:
         3b:ee:8c:66:d6:61:ed:f1:0f:64:db:64:b7:ac:88:69:5d:41:
         f3:f7:3b:f4:ba:ec:ee:5a:dd:79:6f:35:94:fb:80:3f:ca:c4:
         d4:1b:3c:6f:11:db:9a:44:57:dc:a3:65:b6:e4:6c:79:64:15:
         b3:4a:ce:2f:6d:50:66:9f:28:30:a3:19:a1:a9:00:22:ca:77:
         34:02:b6:18:89:60:d4:aa:0a:fd:be:8e:2d:3b:de:c0:d5:1c:
         68:28:63:d6:dd:99:81:2d:69:81:a8:ac:4c:52:aa:d9:52:b0:
         eb:c4:0c:da:8e:33:e4:a6:ed:90:31:d5:5b:58:55:fc:c9:b8:
         e3:9f:df:7d:ba:4a:d1:5c:f1:8c:41:8e:fb:95:a4:9f:33:62:
         2b:00:05:f8:29:2f:ac:53:51:2a:71:23:39:24:d5:1c:a9:be:
         3b:a2:3e:f0:86:95:0b:95:03:81:06:b5:af:08:ba:4c:bc:64:
         cf:a9:6d:6b:c3:97:cc:5c:d9:1c:b0:96:c1:9c:c2:eb:0f:64:
         00:6c:fc:8a:29:d5:bf:09:4c:a6:db:7b:32:22:a6:58:54:ca:
         cb:fe:e5:ac:a9:56:3a:30:2b:4c:a2:81:23:3b:10:81:30:79:
         4d:aa:e2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:53:14 2025 by rpki-client