Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
File:                     0CXaySkNvUCEbGSPrcyfxnGGtjI.mft (raw, json)
Hash identifier:          ddVItRdzba/AuU5p88Ld44sNAALKdTISaajBcRZ5Sz8=
Subject key identifier:   ED:E4:1B:EC:53:95:42:2E:5A:8A:7D:38:6A:A9:57:32:ED:67:E8:8A
Authority key identifier: D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32
Certificate issuer:       /CN=F367B3F2AF/serialNumber=D025DAC9290DBD40846C648FADCC9FC67186B632
Certificate serial:       07A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
Manifest number:          07A1
Signing time:             Fri 31 Jan 2025 01:21:52 +0000
Manifest this update:     Fri 31 Jan 2025 01:21:51 +0000
Manifest next update:     Sun 02 Feb 2025 01:21:51 +0000
Files and hashes:         1: 0CXaySkNvUCEbGSPrcyfxnGGtjI.crl (hash: 9ejqlfMqGpvtBU1InldMQC1T6Ktvm2tJNQb0g1tRMwU=)
                          2: C0B60E1809D611EA8CC3F860F8AEA228.roa (hash: 90ECyuBdPNmxRJAqpaW1o3jdvLDow9bMz084syJod/o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B3F2AF/serialNumber=D025DAC9290DBD40846C648FADCC9FC67186B632
        Validity
            Not Before: Jan 31 01:21:51 2025 GMT
            Not After : Feb  2 01:21:51 2025 GMT
        Subject: CN=679c25b0-d4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:5b:68:59:38:b5:19:b5:ae:a3:a5:2c:f5:
                    18:a3:bb:56:6f:48:f9:6e:cb:77:77:e4:65:05:b4:
                    3e:20:71:7e:b9:b5:98:2b:b4:19:b1:7b:34:2a:58:
                    ca:09:27:49:93:38:3a:8c:c2:d5:ed:65:2c:2c:49:
                    06:bb:5c:32:a3:2c:eb:07:6a:2d:1f:09:57:85:c1:
                    f7:c0:45:33:af:9f:8e:06:35:b0:6e:0c:35:8a:0b:
                    79:41:2d:f0:3c:b1:cd:71:83:c3:2d:b3:ed:6d:59:
                    fa:4f:51:e4:0e:65:3c:68:03:0e:17:5e:1b:2c:8e:
                    6f:58:06:00:64:81:4e:7f:92:74:1e:35:af:21:18:
                    cd:1d:d1:e1:a1:62:37:88:ba:02:1b:ea:5a:b9:cd:
                    47:2f:41:23:06:39:d4:6f:cf:32:39:56:52:d8:73:
                    b1:83:44:ca:05:f8:3e:3b:d3:50:71:1d:cf:94:94:
                    30:b1:ff:3e:3e:18:39:77:d6:b0:6c:43:49:2b:e2:
                    a3:5d:59:57:a3:9f:fc:9c:42:0b:bf:c5:cf:76:37:
                    80:8e:f8:5c:e3:ea:4a:b7:eb:99:6e:33:e4:3e:2c:
                    7d:17:83:66:0b:b2:60:28:51:03:99:ea:68:a5:80:
                    58:2f:41:b3:1d:9f:d7:5c:ca:d1:57:95:69:9e:51:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E4:1B:EC:53:95:42:2E:5A:8A:7D:38:6A:A9:57:32:ED:67:E8:8A
            X509v3 Authority Key Identifier:
                keyid:D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:64:b8:63:51:b4:0c:42:e7:21:a3:d6:7f:bf:53:0b:b4:a6:
         7c:8d:03:1e:f0:04:10:b1:9a:fc:7f:b0:db:39:94:a4:c0:f1:
         b0:26:b1:c4:e0:94:7d:32:37:4b:9d:bb:30:5a:43:59:56:1a:
         db:6d:b4:82:9a:2c:38:a2:37:e4:eb:22:b9:66:05:a4:0e:e1:
         c9:17:42:c9:eb:5a:aa:07:f3:02:c7:02:7c:11:93:ea:04:97:
         41:f7:bc:99:0f:db:8a:5f:62:5c:d7:56:a6:e4:e9:10:c6:dd:
         7b:ab:f8:50:36:21:48:e3:97:b7:69:7c:95:90:0c:f9:56:29:
         f5:5c:23:ac:80:43:69:b0:26:11:f7:67:47:c0:fd:44:db:11:
         20:82:5c:d8:40:e4:44:de:76:26:d4:39:3e:b2:51:29:2c:45:
         9d:16:da:7c:3d:e5:c7:67:79:36:eb:eb:c0:06:d4:bb:c3:b9:
         6f:56:1c:34:f2:22:98:21:ce:48:c7:5f:16:50:de:e8:9a:a7:
         3f:f8:10:0a:54:be:e5:af:1b:f6:85:98:cb:89:0a:26:92:53:
         19:2e:f5:a7:c2:34:a9:de:e8:e7:f3:5d:a6:b6:95:ca:ee:a7:
         39:a2:5e:9e:b5:ab:b3:2d:49:9f:83:a0:ec:c6:e0:28:e3:0b:
         20:04:61:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:20 2025 by rpki-client