Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File:                     lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier:          dooZBDRq9RsqwTrO5VznzFF08ST8cexD5SndiZ/KYi4=
Subject key identifier:   BF:EF:37:DD:B9:71:B9:1E:11:7F:C3:18:73:B8:54:54:BE:AF:41:01
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer:       /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial:       0846
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number:          0842
Signing time:             Fri 31 Jan 2025 01:16:33 +0000
Manifest this update:     Fri 31 Jan 2025 01:16:33 +0000
Manifest next update:     Sun 02 Feb 2025 01:16:33 +0000
Files and hashes:         1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: bY9AM4ugiITw/X7RwAxoLUPjVBuT/KMQym7e7MgHS4k=)
                          2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
                          3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
                          4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
                          5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2118 (0x846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
        Validity
            Not Before: Jan 31 01:16:33 2025 GMT
            Not After : Feb  2 01:16:33 2025 GMT
        Subject: CN=679c2471-91a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:75:40:67:33:43:cb:5b:2d:76:23:0c:ad:
                    53:09:af:e5:71:08:3d:34:75:99:e8:f6:55:a2:f3:
                    2b:c3:bf:43:83:7c:24:ce:05:24:dd:cd:f7:ba:a7:
                    78:73:b6:dd:a3:8f:e7:b4:ce:bb:d9:02:6d:ae:bc:
                    49:0c:4c:f4:04:08:c2:85:05:8a:32:c6:e6:98:b2:
                    da:c2:40:b6:03:d6:8e:ee:eb:20:b1:54:39:68:c8:
                    f8:60:5d:c9:3f:98:c3:aa:33:81:6b:f5:8c:b2:1f:
                    3f:ac:25:b5:1e:cd:56:3d:6e:9a:58:12:11:58:bf:
                    7d:af:0a:72:91:b5:5d:7b:b9:55:5b:aa:f3:e1:f4:
                    4e:bf:38:e5:8c:08:a1:13:cd:9c:31:ec:b1:d0:50:
                    2b:40:d9:05:61:f7:fd:66:d6:9a:c5:c5:00:f2:03:
                    3c:f9:c6:84:09:41:35:4d:4c:c2:e3:de:07:4c:9e:
                    a2:d5:3c:65:d8:a9:29:9b:a2:67:dd:66:2d:2e:73:
                    86:25:40:18:b1:ce:3b:7f:d7:68:e5:b8:cc:4b:21:
                    32:b2:f7:9b:2a:77:0c:36:39:cd:35:a0:4b:cc:82:
                    ba:dd:99:07:d2:80:69:6b:52:88:be:d8:d3:ef:20:
                    59:4d:30:d7:b7:b6:00:17:1d:83:a2:ad:a2:27:1b:
                    cb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EF:37:DD:B9:71:B9:1E:11:7F:C3:18:73:B8:54:54:BE:AF:41:01
            X509v3 Authority Key Identifier:
                keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:92:c0:24:bc:b9:71:58:ec:61:7d:22:8a:0d:ce:fe:89:72:
         6a:63:65:3b:21:c9:9f:f2:24:18:ea:e6:2e:c1:3d:33:9b:04:
         64:fe:9d:c3:68:50:a2:6c:3b:a9:a3:1b:95:38:b7:d0:e8:99:
         81:a5:1e:7d:96:2f:15:45:8b:ab:82:ae:fd:2a:06:de:4e:86:
         e9:e3:bd:19:a7:d0:6c:9c:2b:d2:5c:60:fc:ff:a0:ba:6d:e3:
         b8:a6:8d:18:32:d5:45:9a:8a:6d:58:04:46:da:f1:b5:ff:61:
         bf:59:f4:23:df:f1:c2:db:ac:3b:c5:3b:d0:5d:93:b8:9c:3f:
         e4:50:d0:0e:12:bb:3b:79:bb:56:c2:24:5d:2b:6e:9e:53:c8:
         9e:d7:6d:02:43:3d:47:41:d1:de:52:9e:d1:c2:21:bd:44:8c:
         cd:86:15:df:0a:cd:0b:3a:4c:6a:ee:85:dc:82:35:c4:a2:bb:
         3e:ac:d8:d9:55:f7:17:76:90:98:3c:1d:b5:60:b2:e8:bd:1d:
         3a:49:39:68:7d:03:bc:58:db:54:43:0f:ba:e7:6a:50:e7:21:
         aa:f9:e0:ec:e6:9a:bf:59:ef:ab:1b:eb:e9:d9:b9:96:b2:3f:
         90:cc:f1:79:80:a3:e4:75:9f:45:cf:3d:2d:03:05:a9:da:c1:
         31:07:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:10:21 2025 by rpki-client