Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
File:                     cIjstS9EHLVBKRrSDIupB7vUQFI.mft (raw, json)
Hash identifier:          0Jt9wr+yOa4hPzSYWq+X8We8eL879ylrjeP9EK4ZsGQ=
Subject key identifier:   4A:7A:F8:9E:0E:9A:33:7A:36:15:2E:93:9B:C8:3E:95:F5:21:CA:0A
Authority key identifier: 70:88:EC:B5:2F:44:1C:B5:41:29:1A:D2:0C:8B:A9:07:BB:D4:40:52
Certificate issuer:       /CN=F367FECCAR/serialNumber=7088ECB52F441CB541291AD20C8BA907BBD44052
Certificate serial:       0534
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
Manifest number:          0532
Signing time:             Fri 31 Jan 2025 01:46:28 +0000
Manifest this update:     Fri 31 Jan 2025 01:46:28 +0000
Manifest next update:     Sun 02 Feb 2025 01:46:28 +0000
Files and hashes:         1: cIjstS9EHLVBKRrSDIupB7vUQFI.crl (hash: BxvgE+pHSeN1cloMODAQB3/K/5qPP+EQ6gd8irqsn+U=)
                          2: EBAB53E0EA3E11EB96CC7D3AD8A014CE.roa (hash: 8ccVEiAliBiH1WhFkoVeVW9p7ZDUf8PeWahrlb8I6+s=)
                          3: B9EDE330EA3F11EB9BDDAB3BD8A014CE.roa (hash: UpWRiY04Rhit9Uj9Y+xZz3ZrxHoCtYC3IGMvoMbSZgE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332 (0x534)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FECCAR/serialNumber=7088ECB52F441CB541291AD20C8BA907BBD44052
        Validity
            Not Before: Jan 31 01:46:28 2025 GMT
            Not After : Feb  2 01:46:28 2025 GMT
        Subject: CN=679c2b74-b242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d9:99:d5:6c:8d:fe:fe:da:cc:f3:62:7e:04:
                    06:df:f0:1a:ad:38:91:f0:27:e6:8d:29:46:00:c9:
                    ce:5e:c3:51:d3:ca:1e:81:6d:0e:a0:c4:81:4b:39:
                    be:97:d5:b8:29:ad:a3:97:7b:49:bf:72:0a:21:0d:
                    14:f8:d2:35:fe:98:3c:6f:d3:5f:75:b0:ed:ac:f2:
                    83:8e:ea:70:9c:df:86:c4:64:1c:a3:ec:4f:2d:76:
                    56:2e:a3:d8:54:6b:48:64:df:35:56:4e:31:ad:09:
                    bf:83:7e:2a:dd:f3:22:f9:61:4a:e5:9e:e1:7f:8d:
                    af:a2:de:ab:2d:ce:91:3f:ac:29:18:59:4b:67:69:
                    66:55:2c:28:d3:e5:6d:ac:71:38:f0:4c:8e:d6:3e:
                    ee:fb:c2:d6:12:d8:fd:a6:3a:f6:2e:2c:5c:0c:6b:
                    6e:39:d3:4a:53:83:56:8a:57:c3:01:22:32:20:34:
                    d2:3e:7d:ce:7c:77:68:22:fc:0d:e8:c6:bc:d8:4a:
                    32:bd:4d:01:77:3d:92:74:9f:8c:53:ed:88:1c:d4:
                    a2:ad:0c:97:f8:77:c6:c9:6b:fb:1c:b1:3e:15:b2:
                    10:46:8b:e8:29:d4:39:fe:c2:8f:10:23:cd:14:78:
                    fd:1c:95:0b:9f:24:03:5b:90:6f:cd:52:e5:58:98:
                    8f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7A:F8:9E:0E:9A:33:7A:36:15:2E:93:9B:C8:3E:95:F5:21:CA:0A
            X509v3 Authority Key Identifier:
                keyid:70:88:EC:B5:2F:44:1C:B5:41:29:1A:D2:0C:8B:A9:07:BB:D4:40:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a3:86:aa:50:73:3c:13:68:37:d1:7e:16:30:3b:5d:2a:2b:
         d4:21:15:9b:1b:9e:67:87:3a:42:2d:b9:9c:c8:42:e0:7e:4c:
         b8:0c:c6:71:70:15:2b:26:5e:65:1e:eb:cc:66:39:2a:be:c9:
         93:28:0f:0c:c8:05:e3:10:27:44:cc:8d:fe:00:bb:f8:dd:65:
         15:11:48:21:76:f4:b8:60:38:81:58:9f:13:d2:04:18:3d:bb:
         4a:43:7e:59:78:b6:e8:25:7c:96:b1:80:9d:92:94:ec:27:3b:
         5c:34:44:2c:55:69:a2:28:a0:db:e0:d3:b2:bf:57:2e:1d:db:
         87:a3:32:89:12:db:28:da:65:8a:d5:40:78:11:37:ff:7a:85:
         80:78:47:e6:55:1b:bb:11:57:24:bf:22:e0:a2:ea:7c:c1:85:
         42:45:e7:4d:bf:9a:7f:be:7e:15:f3:20:d6:76:c4:99:c8:cf:
         e2:20:83:6e:a8:b2:25:ae:0d:9b:3b:5e:bd:07:e7:16:82:f7:
         52:13:f2:5d:fb:43:f9:24:e8:b7:91:95:e0:ab:0d:d5:ce:32:
         2f:37:ca:f7:6c:1c:a4:77:e2:33:51:7a:3a:e7:7e:90:b5:6c:
         c9:9b:a4:d0:f4:c3:4d:0e:b7:5f:47:de:62:b1:22:f2:9d:d8:
         bb:d5:43:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:04:09 2025 by rpki-client