Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File:                     XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier:          deEEFr+DwAA/nxtVbGku2eR3vst54ctpQ5Rr3XBoUs0=
Subject key identifier:   CA:99:D3:F2:AE:F9:0A:2F:5E:2F:DE:9E:EE:43:D1:3F:A6:E9:18:3B
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer:       /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial:       0810
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number:          0804
Signing time:             Fri 31 Jan 2025 01:19:01 +0000
Manifest this update:     Fri 31 Jan 2025 01:19:00 +0000
Manifest next update:     Sun 02 Feb 2025 01:19:00 +0000
Files and hashes:         1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: 9FB/+AxrjK0iPhbg1PFBh2Qn+3T6l0Nl4nMmzLwXTnw=)
                          2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
                          3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
                          4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
                          5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
                          6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
                          7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
                          8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2064 (0x810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
        Validity
            Not Before: Jan 31 01:19:00 2025 GMT
            Not After : Feb  2 01:19:00 2025 GMT
        Subject: CN=679c2505-d738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:80:19:6e:02:24:32:6f:3b:2f:6d:c9:21:
                    7d:4b:b3:b5:52:1f:bd:eb:a3:c7:24:6a:21:aa:4b:
                    b7:a8:18:2b:ed:e9:d9:95:ed:f7:74:fa:8e:4b:47:
                    9b:44:0e:1e:7f:33:9d:16:db:6f:7b:c7:a0:50:a4:
                    17:f6:58:19:d2:2d:17:3b:77:23:c2:3c:3a:2d:a1:
                    87:fe:13:7e:df:60:5d:68:6d:8e:9d:2c:60:38:6f:
                    39:25:6f:d6:4e:90:03:34:d9:4d:b3:73:67:e5:5d:
                    1b:09:df:25:a6:89:23:49:0a:37:f9:ac:59:24:c8:
                    ca:f7:ef:85:4b:75:44:2a:71:94:84:e4:f0:e9:a5:
                    12:9b:a2:f0:be:6c:f2:71:a3:14:0e:3e:92:5b:64:
                    fd:c2:94:f3:ba:cb:29:e7:3f:bb:11:45:3b:59:7b:
                    7a:a5:8c:66:d7:78:b2:78:34:bc:3c:b2:75:37:47:
                    ab:c8:9c:8e:61:73:fa:dd:41:63:51:7e:04:02:f0:
                    a4:aa:93:35:ef:df:0c:10:1e:0a:94:70:ab:fc:e2:
                    09:2b:b3:05:20:f4:d7:71:43:3f:76:af:dc:7f:ec:
                    d0:6f:b5:11:b3:8c:37:5a:a0:4a:1b:20:a3:7b:9b:
                    4e:64:34:8f:50:38:da:b1:63:63:ec:e8:3f:a2:4a:
                    a5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:99:D3:F2:AE:F9:0A:2F:5E:2F:DE:9E:EE:43:D1:3F:A6:E9:18:3B
            X509v3 Authority Key Identifier:
                keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:57:7e:db:80:b5:74:fe:a7:02:f5:a5:ab:24:f7:7c:ce:54:
         f0:00:99:4f:41:84:76:50:1c:1b:8f:85:cd:b3:13:30:02:5b:
         49:cc:05:28:3c:18:e0:c6:a5:eb:7c:93:a7:7b:e3:f9:98:cc:
         9f:fe:b7:20:26:e8:f7:07:7a:88:ed:85:3a:81:d0:e9:a3:42:
         cc:07:85:d7:ef:11:ff:0e:8c:2c:2a:cf:79:09:12:eb:f5:15:
         da:db:39:b5:54:7d:c4:4c:55:81:cc:3e:2f:74:f8:6b:42:8b:
         e9:e6:b5:9b:b8:c5:53:e2:fd:91:29:53:c0:6a:48:4b:b0:c7:
         41:aa:d9:dc:4e:34:7a:a2:d9:00:e5:c0:a7:ec:19:c5:ee:c3:
         05:9d:48:b3:b0:74:b9:a9:20:b9:a1:a4:34:42:7a:12:7d:9a:
         ad:b4:62:7f:f6:6e:cb:65:96:5d:d4:7e:2c:5a:ed:21:4a:ea:
         30:46:1c:bd:63:28:6e:34:76:1d:db:20:bc:7b:45:5d:14:48:
         6d:8a:33:18:e0:e9:ae:0d:91:26:99:1b:3b:73:25:a1:77:37:
         22:ab:db:2c:c7:bf:5a:5f:76:33:0d:a5:fe:c9:86:37:f2:49:
         a6:b7:31:c1:9b:f0:c8:cf:92:5a:24:88:7b:ef:51:c5:34:21:
         45:de:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:46:42 2025 by rpki-client