Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          7yMo075eLw2vWq8fWztATHiJX3zr7wg0MVmTOL6RE4E=
Subject key identifier:   B1:A2:4F:33:6E:66:C3:93:CE:FF:15:CD:68:84:EF:D6:B4:47:30:78
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0C67
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0C64
Signing time:             Fri 31 Jan 2025 00:57:39 +0000
Manifest this update:     Fri 31 Jan 2025 00:57:39 +0000
Manifest next update:     Sun 02 Feb 2025 00:57:39 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: 3ELr5J1WYRKwX8amEnQ9VCw3VEiZLc5QGPTkfEwCK8o=)
                          2: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
                          3: B72B3B7459DA11EC8F6187BD5A40D577.roa (hash: lX5w/V9IxiCR5OIdQ46QZvuvbFy5St8N0ELixEctQHI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3175 (0xc67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Jan 31 00:57:39 2025 GMT
            Not After : Feb  2 00:57:39 2025 GMT
        Subject: CN=679c2003-cf0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:f9:c0:8a:dc:31:1b:fe:de:f4:e5:b4:42:
                    2a:77:d3:72:e0:cd:47:30:54:9a:ac:ef:36:83:ec:
                    ac:ca:33:19:4e:1b:06:58:b3:dc:43:72:b0:b5:a8:
                    8e:07:92:cc:39:d6:e6:14:8c:77:63:c1:fe:6f:9f:
                    b1:83:54:56:2a:0c:98:54:25:d5:38:b8:43:b8:eb:
                    6e:0c:7f:b4:14:a1:3d:26:09:08:d6:63:ff:32:8e:
                    ef:f2:96:5d:27:95:a4:c2:dc:a7:25:6a:b7:9c:c3:
                    7d:de:74:d6:81:b0:46:09:3b:12:18:6a:df:04:35:
                    39:00:a5:df:93:ee:f6:7b:4a:bc:d4:26:bd:4c:7a:
                    59:0d:13:30:99:10:d2:bf:55:fd:b6:5e:50:38:d5:
                    bf:78:66:0b:5b:8c:a8:29:fa:9b:30:f3:5b:98:53:
                    44:fe:55:12:12:db:66:6a:91:1a:2e:42:98:49:c7:
                    52:c1:99:f0:f5:48:04:29:40:fd:25:5a:74:c2:9f:
                    68:a7:64:8d:c8:0c:a7:b8:87:30:74:a7:a6:eb:aa:
                    57:9c:ea:f9:c8:ee:1a:1b:31:42:78:5e:e7:81:c0:
                    54:06:32:47:8f:66:97:9a:a8:7c:42:56:d5:e0:dd:
                    25:46:eb:4a:4d:3d:b0:33:2b:94:3d:f6:1c:b5:85:
                    4e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A2:4F:33:6E:66:C3:93:CE:FF:15:CD:68:84:EF:D6:B4:47:30:78
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:cf:eb:95:66:fa:bb:a6:0a:d2:4e:ac:f7:c8:ac:a9:d7:0c:
         0b:c1:8e:57:8b:46:ee:58:2a:f4:23:14:cd:2c:57:e6:2c:f2:
         2b:f8:a8:97:00:e0:a8:11:ac:f4:55:57:ef:fc:e6:71:af:f9:
         f5:c7:36:8d:ce:95:19:88:8e:b3:25:f7:87:f3:7b:07:5a:10:
         c7:22:05:13:bb:e5:40:2b:6a:49:fc:14:d3:dc:5b:2f:f2:dd:
         29:d8:07:3a:df:f7:03:d4:01:3c:b5:28:20:24:81:99:54:8e:
         f7:3b:43:e6:bb:cd:b4:a0:53:97:9b:b0:3a:b0:ca:c2:d6:87:
         fe:7e:5f:c5:ba:97:62:8e:60:92:5b:0f:01:6e:c7:16:24:2d:
         56:9c:e2:11:52:f8:10:5a:29:9a:13:93:c5:40:7f:a6:98:20:
         4a:bd:9a:c0:ca:9b:0b:34:1c:79:c5:d2:bb:55:fa:db:85:21:
         86:98:aa:f4:4b:f8:3d:3f:3a:f7:37:bc:1c:34:97:07:50:31:
         73:88:46:69:32:65:08:d2:d1:6a:86:fe:80:60:9c:4b:f0:69:
         c0:00:82:9d:9f:cc:7d:d3:43:f9:cd:3c:04:50:bf:f1:1d:c6:
         05:3b:51:08:83:4e:0f:7b:81:18:de:bc:d1:28:78:3a:8c:f8:
         bb:ce:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:22 2025 by rpki-client