Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
File:                     7KUu1usrGLOvGbp5LPM-AO_td-o.mft (raw, json)
Hash identifier:          VN/jAgrEC8EtC45d/AytFa3rxPwx3dpK2l7t8cu0pXs=
Subject key identifier:   E2:22:A2:95:EC:2E:23:FC:3D:00:07:D2:A8:5A:61:96:78:FC:54:6D
Authority key identifier: EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA
Certificate issuer:       /CN=F3678D2DAF/serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
Certificate serial:       0797
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
Manifest number:          0795
Signing time:             Fri 31 Jan 2025 01:22:28 +0000
Manifest this update:     Fri 31 Jan 2025 01:22:27 +0000
Manifest next update:     Sun 02 Feb 2025 01:22:27 +0000
Files and hashes:         1: 7KUu1usrGLOvGbp5LPM-AO_td-o.crl (hash: xIP5KQ/ZoHgOOktxWpiNJFi+qsz88QzbX/QNo+oc9fA=)
                          2: 72E4BD0412B111EA9EACDA3AF8AEA228.roa (hash: lEGlEyNpK2D28OfWSczq5nyD+T86uHXMrbx63t8Ft0s=)
                          3: 5142A9C212B111EAAF53AF3AF8AEA228.roa (hash: xG/mwLzjMt/AD4VCyWzSqQgk/KYhEOItbq9UQDh1nvU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1943 (0x797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678D2DAF/serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
        Validity
            Not Before: Jan 31 01:22:27 2025 GMT
            Not After : Feb  2 01:22:27 2025 GMT
        Subject: CN=679c25d4-0eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3b:a5:40:72:c7:16:81:44:1d:ed:22:df:2d:
                    06:4a:b6:63:06:e6:74:17:ff:68:26:6b:c3:02:dc:
                    a7:13:3e:75:1a:e2:81:08:b9:e6:f2:5c:1b:f3:1b:
                    e2:5b:aa:d5:6c:d9:63:11:10:50:64:fc:9b:5a:09:
                    0c:0c:bf:4a:68:09:fb:b5:48:19:13:40:e1:49:94:
                    92:8e:ae:12:63:6a:33:8b:59:1e:09:52:29:36:53:
                    fe:83:81:7e:9b:ec:f8:8a:97:3e:9d:01:1b:a1:9c:
                    13:14:6f:7f:63:ec:76:30:b9:a8:61:1d:3a:ea:83:
                    c8:cb:bc:3d:a9:96:c5:bd:08:32:a0:cb:32:49:c2:
                    c6:5e:95:dc:b8:a5:6d:9e:ca:15:69:0c:30:38:48:
                    d5:bd:e6:18:5f:b1:8c:e0:63:1f:ed:74:23:ca:be:
                    98:60:04:38:2e:be:8a:97:85:63:c7:a7:b1:88:fc:
                    16:fb:37:38:4c:da:63:4f:0c:f0:4f:af:0e:95:44:
                    c7:c1:3c:14:61:b5:45:05:9d:88:53:d8:3e:61:06:
                    c2:4b:56:67:96:fa:55:fa:d7:fc:d1:cc:48:75:f2:
                    4a:6c:e0:ba:c7:b9:ad:e5:63:86:f9:47:03:65:6a:
                    09:72:54:8b:a5:7b:2b:b9:b4:0d:a8:e9:11:0c:2c:
                    cf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:22:A2:95:EC:2E:23:FC:3D:00:07:D2:A8:5A:61:96:78:FC:54:6D
            X509v3 Authority Key Identifier:
                keyid:EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:89:07:50:9c:7b:3a:06:74:ab:3a:5e:b8:4e:63:d0:c9:8b:
         e6:6d:cb:0e:2b:5d:3d:ab:9f:e0:36:93:18:85:7a:33:3f:de:
         be:10:6f:96:30:01:80:08:8d:95:25:2a:35:dc:4b:bc:bf:2b:
         cc:14:2f:a3:22:42:51:f3:a8:95:ae:3a:fb:7e:d1:2e:0a:7f:
         f2:b9:cc:1a:11:19:75:c7:fb:27:a7:b2:2c:3f:c1:13:61:29:
         df:71:85:4e:2a:28:58:f4:ad:91:13:aa:ce:e5:f3:a4:52:a0:
         77:1f:2d:b7:37:b8:7b:db:61:e7:b7:9d:51:18:45:ac:31:d4:
         6d:a5:31:06:0d:04:04:69:ad:ed:95:9b:1c:5e:5a:b2:f2:66:
         e1:64:cf:4a:cc:e8:b9:f8:a6:e8:21:37:dc:b7:8c:22:63:20:
         8d:b7:42:af:c3:2a:e8:94:4b:00:4b:fd:6f:db:71:bd:3d:e8:
         95:6a:4e:24:04:b0:20:d0:f6:b0:b9:77:49:98:59:85:8d:98:
         84:7e:58:4e:9e:be:94:7d:78:c9:68:42:50:ff:27:20:91:18:
         f6:89:2d:1d:38:77:29:17:36:60:21:0f:82:31:25:1c:76:7b:
         dd:94:a1:7a:d7:2d:01:a4:0e:ea:75:9a:a4:fc:33:ee:8e:9c:
         6e:9c:d5:18
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB5cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzhEMkRBRjExMC8GA1UEBRMoRUNBNTJFRDZFQjJCMThCM0FGMTlCQTc5MkNGMzNF
MDBFRkVENzdFQTAeFw0yNTAxMzEwMTIyMjdaFw0yNTAyMDIwMTIyMjdaMBgxFjAU
BgNVBAMTDTY3OWMyNWQ0LTBlYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaO6VAcscWgUQd7SLfLQZKtmMG5nQX/2gma8MC3KcTPnUa4oEIuebyXBvz
G+JbqtVs2WMREFBk/JtaCQwMv0poCfu1SBkTQOFJlJKOrhJjajOLWR4JUik2U/6D
gX6b7PiKlz6dARuhnBMUb39j7HYwuahhHTrqg8jLvD2plsW9CDKgyzJJwsZeldy4
pW2eyhVpDDA4SNW95hhfsYzgYx/tdCPKvphgBDguvoqXhWPHp7GI/Bb7NzhM2mNP
DPBPrw6VRMfBPBRhtUUFnYhT2D5hBsJLVmeW+lX61/zRzEh18kps4LrHua3lY4b5
RwNlaglyVIuleyu5tA2o6REMLM9ZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4iKi
lewuI/w9AAfSqFphlnj8VG0wHwYDVR0jBBgwFoAU7KUu1usrGLOvGbp5LPM+AO/t
d+owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc4RDJELzE4NkQyOUNFMTJCMTExRUE4QzlFODQzQUY4QUVBMjI4LzdLVXUx
dXNyR0xPdkdicDVMUE0tQU9fdGQtby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdLVXUxdXNyR0xPdkdicDVMUE0tQU9fdGQtby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzhEMkQvMTg2RDI5Q0UxMkIxMTFFQThDOUU4NDNBRjhB
RUEyMjgvN0tVdTF1c3JHTE92R2JwNUxQTS1BT190ZC1vLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmiQdQnHs6BnSrOl64TmPQyYvmbcsO
K109q5/gNpMYhXozP96+EG+WMAGACI2VJSo13Eu8vyvMFC+jIkJR86iVrjr7ftEu
Cn/yucwaERl1x/snp7IsP8ETYSnfcYVOKihY9K2RE6rO5fOkUqB3Hy23N7h722Hn
t51RGEWsMdRtpTEGDQQEaa3tlZscXlqy8mbhZM9KzOi5+KboITfct4wiYyCNt0Kv
wyrolEsAS/1v23G9PeiVak4kBLAg0PawuXdJmFmFjZiEflhOnr6UfXjJaEJQ/ycg
kRj2iS0dOHcpFzZgIQ+CMSUcdnvdlKF61y0BpA7qdZqk/DPujpxunNUY
-----END CERTIFICATE-----