Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
File:                     vN_wydKPGrRQYvSTuzVmysFCZG0.mft (raw, json)
Hash identifier:          3n3oxmm4M+qBWiAscKNWOnOIlJf6R7xAJ06JY0dIDxQ=
Subject key identifier:   F4:89:05:2A:0D:35:9D:8A:51:C3:C7:28:C5:4E:A0:67:62:EE:F7:30
Authority key identifier: BC:DF:F0:C9:D2:8F:1A:B4:50:62:F4:93:BB:35:66:CA:C1:42:64:6D
Certificate issuer:       /CN=F3680C14AF/serialNumber=BCDFF0C9D28F1AB45062F493BB3566CAC142646D
Certificate serial:       0C66
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
Manifest number:          0C63
Signing time:             Fri 31 Jan 2025 00:57:32 +0000
Manifest this update:     Fri 31 Jan 2025 00:57:32 +0000
Manifest next update:     Sun 02 Feb 2025 00:57:32 +0000
Files and hashes:         1: vN_wydKPGrRQYvSTuzVmysFCZG0.crl (hash: 0Yq5st/hiSND3Mz3fxSeo6YwnuZoTnwMcxJhwREQfyg=)
                          2: B33457F859DA11EC856F77BD5A40D577.roa (hash: agjY6LUdCjwnZ2M4yw1LKIU5MO1B5MHNkAfCnRIca5I=)
                          3: F7CE05E67D7A11EF88A9F065762E951A.roa (hash: CO1sEd4b6tDHp7VX2OHYT+QzzDJimiXxpvi4W3VBGpA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3174 (0xc66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AF/serialNumber=BCDFF0C9D28F1AB45062F493BB3566CAC142646D
        Validity
            Not Before: Jan 31 00:57:32 2025 GMT
            Not After : Feb  2 00:57:32 2025 GMT
        Subject: CN=679c1ffc-6805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:f2:65:2e:fe:9c:3d:40:39:a8:b2:14:b9:
                    47:7e:61:97:49:33:f0:c8:18:f7:0f:1e:8e:4e:fb:
                    0c:48:98:4d:3a:63:a3:ed:94:e2:a6:ed:1b:0f:c8:
                    69:0a:ab:f3:d7:08:65:2b:5f:da:cc:cc:69:49:38:
                    d9:83:87:f5:20:c1:76:98:fb:5c:c9:ea:59:61:bf:
                    19:b3:06:ea:86:34:84:d4:e0:d9:54:f4:8c:e0:fc:
                    97:d4:de:e2:e5:ec:77:a9:b5:04:1a:9e:5c:31:c9:
                    bf:6c:2a:b0:7e:16:90:e5:19:cc:ec:b8:c0:eb:b2:
                    31:48:82:87:ab:9a:5d:75:4a:6e:9f:49:af:5a:09:
                    c6:bc:10:4c:fb:5c:13:4d:e3:49:ca:f2:7f:41:e5:
                    1a:ad:36:44:d8:db:65:4f:07:25:17:e5:b5:5e:96:
                    e4:90:a3:ab:b1:55:1b:c5:0c:8d:57:ab:e8:c2:b4:
                    2d:5a:ab:52:ef:08:53:b2:c4:e9:46:e0:5e:95:b3:
                    32:36:66:5a:2c:16:79:39:a4:31:d1:87:6e:40:4d:
                    5e:9f:2d:84:d3:94:ee:f9:7e:eb:51:6c:28:88:79:
                    ea:3d:59:93:33:c7:23:2c:02:e6:d7:f4:4e:ad:f0:
                    69:88:0a:49:64:ef:46:dc:47:11:6d:0a:bf:4e:df:
                    b4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:89:05:2A:0D:35:9D:8A:51:C3:C7:28:C5:4E:A0:67:62:EE:F7:30
            X509v3 Authority Key Identifier:
                keyid:BC:DF:F0:C9:D2:8F:1A:B4:50:62:F4:93:BB:35:66:CA:C1:42:64:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vN_wydKPGrRQYvSTuzVmysFCZG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/64AB2F2A5AE011E69FCD5032F8AEA228/vN_wydKPGrRQYvSTuzVmysFCZG0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f0:2e:e2:7e:3b:34:d2:03:75:7f:b1:7a:7f:d0:7e:da:7a:
         c1:29:77:aa:5e:b4:e9:7b:41:12:80:91:55:03:f1:5e:35:35:
         b9:1e:41:3b:ee:ce:2a:86:83:f7:b2:c3:87:7b:ce:55:d2:b1:
         8e:f5:df:7d:f2:91:84:08:a1:0f:f5:8d:d2:1f:17:54:50:48:
         dd:15:9a:75:e6:af:90:1d:f5:b7:0a:ce:4b:2f:b8:23:5d:1c:
         19:75:bb:c0:1c:73:e2:01:8a:b5:a1:7b:a8:2c:f0:6e:d3:0d:
         5f:39:f5:24:08:a8:ea:be:3e:f8:02:ac:a4:be:15:28:e8:f6:
         d8:4a:e9:91:b4:00:6f:88:40:22:4b:5d:db:5c:2d:91:d4:e3:
         0f:8f:42:b5:13:31:62:6d:11:ca:25:c6:73:ba:d5:d6:48:14:
         d1:c1:36:9e:c8:a0:61:15:8a:58:db:6f:2b:84:65:9e:0f:7f:
         29:3c:37:62:e4:90:b5:5e:53:0b:b2:9b:5b:13:66:a8:85:54:
         d4:53:4c:34:de:e6:37:72:ad:6c:b2:08:f0:aa:10:a6:56:6b:
         36:e9:f0:cc:a1:a1:82:29:f6:e8:e4:2f:36:c0:11:fa:19:89:
         80:5c:7f:c0:13:40:ca:d9:b3:bc:12:42:1a:8f:82:ac:3d:f6:
         08:5b:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:36:36 2025 by rpki-client