Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
File:                     rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft (raw, json)
Hash identifier:          ekABAYcq2GMVaydJWMjzjlvwkT59IOd6W36a0+7oB/U=
Subject key identifier:   DF:36:88:F0:72:32:DC:4F:98:11:24:A0:E4:69:A0:14:85:B3:BB:9F
Authority key identifier: AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
Certificate issuer:       /CN=F368A3D1AF/serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Certificate serial:       05DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
Manifest number:          05D5
Signing time:             Fri 31 Jan 2025 01:36:03 +0000
Manifest this update:     Fri 31 Jan 2025 01:36:03 +0000
Manifest next update:     Sun 02 Feb 2025 01:36:03 +0000
Files and hashes:         1: rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl (hash: CeZUlnZtY7KIlxw+qZp/Ovb7YnyXEVLXjaCAqWCCWvQ=)
                          2: BABA0216CDB011EDAD89A0C6F1222468.roa (hash: luxr+QNwcQO4iv8H9JMZsFbjB/B4eY0ANzOBLeZGQ7s=)
                          3: BCAF9294702811EB8791AD25F8AEA228.roa (hash: AT0o7ug7v2ZBAyMdgUq3SD/St9P0mYCt+1mdlQ+38qg=)
                          4: 9D82CD40CDB011ED812241C6F1222468.roa (hash: qsqlB1DyQeEjQRpQD9Kt6opY0oeDRgR3OAxfv/Yfba8=)
                          5: 1C83F7F2CCA011ED9FBDAF90F1222468.roa (hash: 34j16EfLKBboBdu4W8orVCqv2BpWRoneipEfOF9Vyhs=)
                          6: A0FB2C7A702811EBBEEF8C25F8AEA228.roa (hash: WRA7vUkmweseystfPnsoSmxUQdjwHDtXfkHr1rmgxF8=)
                          7: 365FE0469DF411EB9F82B84AF8AEA228.roa (hash: Ws8N8X7YiONJc56TyVAJKcp66X/6QscYInYVrETeq+o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368A3D1AF/serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
        Validity
            Not Before: Jan 31 01:36:03 2025 GMT
            Not After : Feb  2 01:36:03 2025 GMT
        Subject: CN=679c2903-4c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:c5:69:63:71:af:b1:9b:7e:ae:14:4d:ee:
                    dc:47:9a:55:06:e2:2a:a8:1c:7a:a2:5f:50:f9:65:
                    7e:14:c8:4d:3e:69:00:4f:26:be:3f:73:d0:85:bf:
                    3a:cd:7f:26:42:29:0c:c7:a1:21:11:d5:85:33:a1:
                    73:b3:19:d4:09:fc:43:48:8c:e6:57:58:4b:cb:f6:
                    4c:41:03:e9:d6:15:dd:ff:20:31:49:5b:7b:41:0a:
                    70:ce:66:23:40:78:63:2f:b3:33:b0:e7:7c:e9:b7:
                    ad:c6:7e:ed:59:1e:8c:b4:c1:9d:dc:1a:f5:1d:1e:
                    05:19:91:7e:53:27:b0:38:d3:51:1a:3f:f9:2c:f6:
                    4c:01:7d:06:a6:86:98:1d:81:a7:e1:6b:e6:02:ef:
                    dc:54:c9:3a:f8:a4:27:e1:3e:63:61:33:0b:ed:6e:
                    48:3f:78:c1:1f:d1:97:a1:2c:be:e1:1b:3e:09:3f:
                    ee:67:66:64:97:cf:a3:4e:b5:9c:0e:3c:f5:b4:70:
                    28:61:ff:22:c0:3e:8c:90:e9:b2:b7:e5:98:2e:51:
                    d5:92:d5:76:32:6c:0c:55:dc:f5:4b:a2:69:1c:bf:
                    75:8f:df:c3:54:79:a8:fd:4e:1f:8b:c1:40:4e:9a:
                    4a:8d:b6:fe:ca:c0:13:1a:2a:e3:c0:19:05:43:ac:
                    4f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:36:88:F0:72:32:DC:4F:98:11:24:A0:E4:69:A0:14:85:B3:BB:9F
            X509v3 Authority Key Identifier:
                keyid:AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4d:9f:ce:e1:55:86:a2:34:a8:24:8c:18:51:38:2a:76:f9:
         d4:54:49:aa:98:a6:9c:3f:c0:0b:a9:73:01:57:88:bc:7b:d8:
         d0:75:71:a2:81:72:30:24:6e:d0:51:f6:f2:88:ef:95:4d:18:
         0b:78:0f:cd:0c:f4:7f:0a:17:b8:13:fc:c8:b0:38:13:75:39:
         c9:36:5a:6f:aa:70:26:a3:1f:14:d8:42:6f:c1:ec:d5:59:89:
         4b:66:e8:17:a6:a0:26:e8:a6:e4:f3:bc:41:95:af:2d:aa:4c:
         35:e8:23:cf:b1:6d:6f:8c:6d:8c:d3:59:b2:4f:f7:c9:7a:31:
         2b:af:79:7b:33:fd:e3:74:e1:23:2e:e2:0e:dc:52:ee:21:31:
         b5:ce:46:58:41:1a:ea:5b:17:e5:41:73:fd:bc:7c:28:02:9f:
         c0:a0:b8:6f:9c:cd:52:a0:45:4d:5b:16:83:0b:7d:37:e8:df:
         16:41:b2:55:17:56:05:e8:30:d6:d6:f6:c7:b7:ec:c9:9f:32:
         e5:e1:16:26:4f:c9:ff:65:9c:21:b7:6f:c1:fc:51:4b:a4:9a:
         a7:7a:66:21:4b:3b:82:4d:27:4b:c4:42:68:54:0f:56:90:3f:
         a5:86:5d:fd:da:da:19:12:b8:d3:f5:72:e7:24:77:b4:be:0c:
         47:56:38:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:19:05 2025 by rpki-client