Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
File:                     8hDREntBqAZ-iuVwf0PSLggdxmU.mft (raw, json)
Hash identifier:          Upug4aQ2M09IZyP5BnziiFJKpY2pD7UWI4KFvV8C1Io=
Subject key identifier:   29:67:69:F5:11:31:78:79:CD:FA:1F:E3:55:66:05:DA:45:8D:0E:69
Authority key identifier: F2:10:D1:12:7B:41:A8:06:7E:8A:E5:70:7F:43:D2:2E:08:1D:C6:65
Certificate issuer:       /CN=F36828EEAF/serialNumber=F210D1127B41A8067E8AE5707F43D22E081DC665
Certificate serial:       BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
Manifest number:          BE
Signing time:             Fri 31 Jan 2025 03:03:58 +0000
Manifest this update:     Fri 31 Jan 2025 03:03:58 +0000
Manifest next update:     Sun 02 Feb 2025 03:03:58 +0000
Files and hashes:         1: 8hDREntBqAZ-iuVwf0PSLggdxmU.crl (hash: 87Pw0JVlVSL9ArdmOoo4XTnzSlHcyTwaXGZ3xY8P1pY=)
                          2: 43556232564A11EF9942095B762E951A.roa (hash: k0gU6QmfsEjV/HHlrAtYyJc8G8bTw7CikYjZpypK4Wk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36828EEAF/serialNumber=F210D1127B41A8067E8AE5707F43D22E081DC665
        Validity
            Not Before: Jan 31 03:03:58 2025 GMT
            Not After : Feb  2 03:03:58 2025 GMT
        Subject: CN=679c3d9e-1934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:f8:3d:96:90:9b:cf:92:6c:9f:43:dc:3e:
                    17:ab:8f:60:8f:27:5f:aa:66:87:25:c5:81:83:96:
                    7e:e2:65:68:e0:6f:15:02:99:b9:95:71:f1:ad:2b:
                    31:79:4a:72:09:c5:59:fe:8b:b8:49:2e:b1:20:f3:
                    4c:35:d2:b7:e8:7d:70:c0:49:04:10:16:ca:a2:81:
                    29:4f:90:5a:0b:35:81:8c:87:08:e6:23:36:b8:c4:
                    7c:e3:66:ae:22:65:22:2e:78:06:c6:af:ec:bc:aa:
                    5c:6e:3f:4d:aa:a6:6c:be:af:6c:c6:7e:5f:41:5b:
                    f4:6c:21:22:77:0f:37:99:01:36:73:5e:7a:ed:65:
                    96:f6:ac:bf:5b:e5:39:b8:64:01:f0:de:69:a7:33:
                    d0:f7:c4:38:d0:a5:36:5b:7b:eb:0e:c9:6c:79:90:
                    db:e5:a6:89:43:89:11:bf:9a:3d:dc:c0:ff:c3:a5:
                    a9:b3:c9:67:d4:41:7d:f6:8c:1b:3c:e9:5e:70:bb:
                    4a:b7:62:15:9f:63:02:82:d0:ec:8a:38:60:74:ef:
                    f9:5e:7c:36:53:ef:66:62:00:b0:a9:41:8f:c1:b1:
                    e2:b0:e4:20:44:19:dd:2b:03:47:dd:8e:ec:f5:3c:
                    07:57:02:6e:31:a6:35:56:97:eb:96:51:8c:b4:31:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:67:69:F5:11:31:78:79:CD:FA:1F:E3:55:66:05:DA:45:8D:0E:69
            X509v3 Authority Key Identifier:
                keyid:F2:10:D1:12:7B:41:A8:06:7E:8A:E5:70:7F:43:D2:2E:08:1D:C6:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ea:53:5f:f2:9b:46:71:0b:32:f8:7f:36:1e:b7:e3:ff:d5:
         c0:d9:88:53:f3:9c:8a:2e:18:a2:8a:b9:57:4f:dc:1b:14:44:
         46:74:21:20:3e:3c:67:7e:dd:24:a1:32:cc:be:5c:68:c2:6b:
         e3:8d:23:b8:43:60:58:ab:3b:3a:70:99:fe:6e:46:da:15:ff:
         f7:a2:d6:68:a9:1c:56:7b:10:bb:86:2e:15:b2:46:f6:44:d6:
         77:3e:c8:bd:cd:84:1d:94:c1:79:30:f2:15:ff:a0:ab:b6:aa:
         47:9e:f4:df:b8:34:16:0e:68:fd:d3:9a:12:4e:27:3d:ad:3d:
         9a:ef:f9:54:b8:1f:4d:a6:55:f7:aa:5c:97:f5:58:5f:9e:34:
         62:e6:81:5c:84:c2:85:24:be:1d:e4:d0:87:80:ee:10:6a:f4:
         21:e4:34:c5:ba:b1:9b:89:5a:60:8a:39:7f:46:43:ea:ad:82:
         db:3d:11:2a:3b:de:54:08:29:70:c0:db:69:77:31:96:b7:83:
         74:fa:b0:b4:29:52:70:43:3b:92:97:83:d3:1b:57:9b:78:ac:
         59:8e:c2:9f:91:d4:d6:eb:28:bd:81:26:e1:f0:9a:3f:54:c9:
         a8:72:bf:51:99:dc:34:a5:ca:aa:84:22:25:4f:71:07:2f:1a:
         48:8b:40:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:35 2025 by rpki-client