Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
File:                     Abb7gSoUrvQLoDsWWv79W3SkZpY.mft (raw, json)
Hash identifier:          5qM6WciI+d8X272Nb4OClpeE4w4LYJtCd1wbaIZkol8=
Subject key identifier:   B6:8E:3A:19:24:B2:2A:C2:8B:62:A3:F7:26:80:9E:16:EF:D1:D9:76
Authority key identifier: 01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96
Certificate issuer:       /CN=F3674008AR/serialNumber=01B6FB812A14AEF40BA03B165AFEFD5B74A46696
Certificate serial:       021F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
Manifest number:          021E
Signing time:             Fri 31 Jan 2025 02:38:12 +0000
Manifest this update:     Fri 31 Jan 2025 02:38:11 +0000
Manifest next update:     Sun 02 Feb 2025 02:38:11 +0000
Files and hashes:         1: Abb7gSoUrvQLoDsWWv79W3SkZpY.crl (hash: IVMD4bogZjWjp60BSfi+YVSujB6F02yXRA7/XfJoQEY=)
                          2: 61E8A95475A111EFAC7BA279762E951A.roa (hash: iAiWDX2k6dKqGfuzfdFuo/QfCsfKMTY5hEty8a1QfDk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674008AR/serialNumber=01B6FB812A14AEF40BA03B165AFEFD5B74A46696
        Validity
            Not Before: Jan 31 02:38:11 2025 GMT
            Not After : Feb  2 02:38:11 2025 GMT
        Subject: CN=679c3794-17d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:54:70:43:c0:26:9e:72:b2:c5:fa:69:23:
                    71:b7:4a:51:bd:60:16:57:18:49:76:86:f1:dd:e9:
                    18:10:92:d0:bf:6c:55:d1:b4:55:68:07:2b:84:5b:
                    9b:60:68:f6:47:f3:e5:fc:20:d8:04:28:20:37:6f:
                    49:5a:c3:e2:ee:63:b6:b8:9e:0c:2e:5f:72:6a:1f:
                    fd:aa:13:0b:4e:2b:20:9e:25:7d:53:91:c3:53:2b:
                    d3:d1:b5:40:71:0a:5e:6f:31:36:50:6f:a4:64:f0:
                    83:bd:d7:e1:2d:ee:e6:99:81:e4:2d:51:b7:41:19:
                    47:2e:56:6e:4f:54:9b:26:58:fd:f9:9a:8f:d0:17:
                    c7:01:bd:59:4d:20:7c:e7:7c:d2:3a:f3:64:73:09:
                    78:61:47:5d:1f:01:6b:c6:2e:fe:0e:6f:89:b3:c8:
                    6b:d4:b2:21:ae:b6:de:9c:53:26:dc:8f:10:bb:fa:
                    1b:ad:18:75:17:b6:9d:9c:ec:94:6c:4f:eb:c7:c3:
                    22:60:ef:8e:c8:7b:d8:e5:a3:70:11:b5:37:c3:38:
                    a4:a4:91:8b:cf:5f:a0:8c:f9:9a:a1:83:b7:ab:71:
                    e9:93:b1:9b:21:0f:77:13:ff:57:09:05:e9:53:6a:
                    d4:2b:01:5d:f8:59:1d:90:da:31:e6:56:43:fc:ce:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8E:3A:19:24:B2:2A:C2:8B:62:A3:F7:26:80:9E:16:EF:D1:D9:76
            X509v3 Authority Key Identifier:
                keyid:01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a8:be:75:da:5a:74:71:65:18:3c:47:fd:3d:bc:b5:76:e9:
         61:d5:67:ab:90:0a:5a:38:37:01:5a:55:50:55:f0:1a:d6:1a:
         92:6e:de:a5:a6:ca:52:6c:34:89:99:d8:af:36:e7:c1:51:1c:
         f6:fa:7d:66:b1:1f:99:cb:d6:c8:ab:e5:63:f1:d9:27:fa:d4:
         3e:56:52:96:e3:cd:11:ea:1a:1b:6a:a1:cf:3a:0a:cd:83:44:
         c8:73:1b:ef:79:ce:c7:ba:0a:df:59:b1:35:38:3e:96:32:03:
         15:e6:0f:a6:b0:15:3c:9b:2f:89:4a:1f:62:7e:61:2b:a3:6f:
         9b:2d:47:ac:75:4a:c6:49:8d:3c:f1:5f:5f:ac:9d:63:7b:10:
         e5:7a:f4:67:17:03:55:dc:67:51:1c:bb:fb:1b:49:39:0b:39:
         33:58:06:34:fd:b0:dc:55:60:0d:11:58:1f:ec:f5:60:2e:9f:
         03:b0:a0:50:d1:ac:ef:f0:df:e2:1d:96:a7:ff:44:8d:a4:bc:
         a2:16:9e:00:1b:b4:e2:72:8b:89:7a:24:ae:19:31:fa:d0:15:
         f3:9f:ef:f5:4a:11:a2:1b:0c:8f:14:9f:4b:10:e7:84:52:0e:
         43:99:1f:b0:4a:ec:14:33:b3:32:2e:b0:72:2a:45:8c:05:6b:
         c3:3d:eb:8e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzQwMDhBUjExMC8GA1UEBRMoMDFCNkZCODEyQTE0QUVGNDBCQTAzQjE2NUFGRUZE
NUI3NEE0NjY5NjAeFw0yNTAxMzEwMjM4MTFaFw0yNTAyMDIwMjM4MTFaMBgxFjAU
BgNVBAMTDTY3OWMzNzk0LTE3ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxV1RwQ8AmnnKyxfppI3G3SlG9YBZXGEl2hvHd6RgQktC/bFXRtFVoByuE
W5tgaPZH8+X8INgEKCA3b0law+LuY7a4ngwuX3JqH/2qEwtOKyCeJX1TkcNTK9PR
tUBxCl5vMTZQb6Rk8IO91+Et7uaZgeQtUbdBGUcuVm5PVJsmWP35mo/QF8cBvVlN
IHznfNI682RzCXhhR10fAWvGLv4Ob4mzyGvUsiGutt6cUybcjxC7+hutGHUXtp2c
7JRsT+vHwyJg747Ie9jlo3ARtTfDOKSkkYvPX6CM+Zqhg7ercemTsZshD3cT/1cJ
BelTatQrAV34WR2Q2jHmVkP8ztLNAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUto46
GSSyKsKLYqP3JoCeFu/R2XYwHwYDVR0jBBgwFoAUAbb7gSoUrvQLoDsWWv79W3Sk
ZpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0MDA4LzVBQjc2OUM0NDczRDExRUU5OEIzNzg2NjRBRDlFNkZDL0FiYjdn
U29VcnZRTG9Ec1dXdjc5VzNTa1pwWS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0FiYjdnU29VcnZRTG9Ec1dXdjc5VzNTa1pwWS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzQwMDgvNUFCNzY5QzQ0NzNEMTFFRTk4QjM3ODY2NEFEOUU2
RkMvQWJiN2dTb1VydlFMb0RzV1d2NzlXM1NrWnBZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyqL512lp0cWUYPEf9Pby1dulh1WerkApa
ODcBWlVQVfAa1hqSbt6lpspSbDSJmdivNufBURz2+n1msR+Zy9bIq+Vj8dkn+tQ+
VlKW480R6hobaqHPOgrNg0TIcxvvec7HugrfWbE1OD6WMgMV5g+msBU8my+JSh9i
fmEro2+bLUesdUrGSY088V9frJ1jexDlevRnFwNV3GdRHLv7G0k5CzkzWAY0/bDc
VWANEVgf7PVgLp8DsKBQ0azv8N/iHZan/0SNpLyiFp4AG7TicouJeiSuGTH60BXz
n+/1ShGiGwyPFJ9LEOeEUg5DmR+wSuwUM7MyLrByKkWMBWvDPeuO
-----END CERTIFICATE-----