Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
File:                     hPAfwzjdLBQepF0xeyEfds9dABU.mft (raw, json)
Hash identifier:          DMT4b4Iq8Bc/VZrNIyGlEbYX1RCc3GjbEUvVCGA1UUY=
Subject key identifier:   5A:69:50:2E:F9:50:DE:03:A6:7C:D8:4D:32:BA:F0:08:1C:C3:16:0C
Authority key identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
Certificate issuer:       /CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
Certificate serial:       D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
Manifest number:          D7
Signing time:             Fri 31 Jan 2025 03:01:15 +0000
Manifest this update:     Fri 31 Jan 2025 03:01:14 +0000
Manifest next update:     Sun 02 Feb 2025 03:01:14 +0000
Files and hashes:         1: hPAfwzjdLBQepF0xeyEfds9dABU.crl (hash: Sc9+WvBE4B8TwvhhdgIwzN04YeF8QCYqCd4bvYNVrv8=)
                          2: D2DEEBB23F6111EF86F2D8A2762E951A.roa (hash: AlCe+r5bA6wxPrWSPJ60MOFRAHZSRAZJTKh0IUzq6Is=)
                          3: A69C50CE3F5E11EF9DDD6C8C762E951A.roa (hash: 80ny1NpqsV9rSVRUHTW3nCJZGXl2CugmUA2kHB+WbzU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
        Validity
            Not Before: Jan 31 03:01:14 2025 GMT
            Not After : Feb  2 03:01:14 2025 GMT
        Subject: CN=679c3cfb-ffe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:99:a3:e4:2e:d3:b5:88:5d:46:74:47:1b:a5:
                    7f:17:b5:d1:4e:6b:d5:b9:39:14:2d:cd:f1:81:51:
                    e5:49:e2:cf:08:8e:e0:ad:19:a7:b4:fc:75:7b:7f:
                    29:1d:cb:4d:2a:9f:d2:f2:c1:ad:68:f3:db:73:48:
                    38:cf:2a:dc:da:10:3b:9f:13:4b:f2:86:19:14:ad:
                    25:99:fb:b8:6a:27:a8:53:da:c9:86:bd:e2:1a:a3:
                    9a:0f:7f:c0:89:d3:8f:c7:ad:86:af:f4:07:24:22:
                    41:d2:d6:c0:0b:5e:26:0b:30:2b:a6:b8:73:e1:32:
                    e4:3d:10:97:1d:ce:4b:c7:99:96:4b:5a:48:70:0d:
                    d0:44:7b:2d:14:ba:39:37:18:bf:ad:c0:04:41:50:
                    b5:98:15:7a:f3:3c:0a:fe:f6:9b:d4:e8:32:e0:75:
                    38:aa:40:60:1e:7c:f6:0f:a0:0e:d0:c2:79:85:92:
                    d1:0b:ee:e2:51:95:f0:b4:c8:a3:dd:03:cb:47:7f:
                    cb:40:d6:2c:63:bf:ed:31:f3:48:98:81:d6:e3:81:
                    45:b6:ae:57:27:c0:eb:cf:6e:e1:27:79:41:5e:c7:
                    eb:3d:ba:d5:7e:d3:d7:94:8a:37:5e:0f:90:77:13:
                    23:11:f4:44:bb:d1:19:97:54:e0:c5:62:d3:a0:4b:
                    4a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:69:50:2E:F9:50:DE:03:A6:7C:D8:4D:32:BA:F0:08:1C:C3:16:0C
            X509v3 Authority Key Identifier:
                keyid:84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:cf:2b:ed:01:94:03:50:65:02:c7:c9:ab:3e:e2:6d:39:34:
         93:fe:db:9f:73:79:05:5a:e7:55:e3:12:51:4c:78:02:55:1d:
         a8:61:f6:d8:cc:6f:30:99:8b:75:d0:11:1a:c5:cc:a7:06:54:
         63:29:00:34:43:c0:60:3b:19:3e:5c:09:25:6a:b6:a5:0c:1a:
         44:fb:34:d0:a5:00:c8:7f:be:82:07:aa:cd:e6:f3:59:92:6d:
         93:a0:83:b3:ee:98:f2:4f:34:b5:64:c7:6e:2b:52:4e:d1:86:
         d6:23:16:d0:f3:40:1b:ac:39:8b:d5:57:15:2c:24:8d:7c:9b:
         f5:34:69:c6:69:ff:41:91:2b:5f:b7:da:d6:ce:61:9b:52:59:
         28:cc:14:56:2b:5a:5a:e0:f8:46:6a:3f:60:c6:97:29:58:2d:
         f9:73:5f:76:14:d7:65:33:b6:7f:6b:70:c6:18:8b:4b:e6:5f:
         f0:a3:22:bc:10:d0:9c:60:b0:90:f9:96:8e:81:f9:cf:57:c5:
         44:a2:fd:94:cd:98:c0:a7:cd:48:1f:43:d8:a1:2f:27:d0:17:
         c1:8f:fc:64:a6:3f:2a:16:45:e4:7f:38:7b:8c:e4:64:4c:4b:
         3e:7b:b1:ee:af:54:e0:2b:e7:0f:ff:eb:80:77:64:5c:a1:00:
         ac:95:b2:17
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICANkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEY0QTFBRjExMC8GA1UEBRMoODRGMDFGQzMzOEREMkMxNDFFQTQ1RDMxN0IyMTFG
NzZDRjVEMDAxNTAeFw0yNTAxMzEwMzAxMTRaFw0yNTAyMDIwMzAxMTRaMBgxFjAU
BgNVBAMTDTY3OWMzY2ZiLWZmZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVmaPkLtO1iF1GdEcbpX8XtdFOa9W5ORQtzfGBUeVJ4s8IjuCtGae0/HV7
fykdy00qn9Lywa1o89tzSDjPKtzaEDufE0vyhhkUrSWZ+7hqJ6hT2smGveIao5oP
f8CJ04/HrYav9AckIkHS1sALXiYLMCumuHPhMuQ9EJcdzkvHmZZLWkhwDdBEey0U
ujk3GL+twARBULWYFXrzPAr+9pvU6DLgdTiqQGAefPYPoA7QwnmFktEL7uJRlfC0
yKPdA8tHf8tA1ixjv+0x80iYgdbjgUW2rlcnwOvPbuEneUFex+s9utV+09eUijde
D5B3EyMR9ES70RmXVODFYtOgS0qXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUWmlQ
LvlQ3gOmfNhNMrrwCBzDFgwwHwYDVR0jBBgwFoAUhPAfwzjdLBQepF0xeyEfds9d
ABUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGNEExLzc5ODAyNkQwM0Y1QzExRUZCODNDNzk3RTc2MkU5NTFBL2hQQWZ3
empkTEJRZXBGMHhleUVmZHM5ZEFCVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hQQWZ3empkTEJRZXBGMHhleUVmZHM5ZEFCVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OEY0QTEvNzk4MDI2RDAzRjVDMTFFRkI4M0M3OTdFNzYy
RTk1MUEvaFBBZnd6amRMQlFlcEYweGV5RWZkczlkQUJVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQzyvtAZQDUGUCx8mrPuJtOTST/tuf
c3kFWudV4xJRTHgCVR2oYfbYzG8wmYt10BEaxcynBlRjKQA0Q8BgOxk+XAklaral
DBpE+zTQpQDIf76CB6rN5vNZkm2ToIOz7pjyTzS1ZMduK1JO0YbWIxbQ80AbrDmL
1VcVLCSNfJv1NGnGaf9BkStft9rWzmGbUlkozBRWK1pa4PhGaj9gxpcpWC35c192
FNdlM7Z/a3DGGItL5l/woyK8ENCcYLCQ+ZaOgfnPV8VEov2UzZjAp81IH0PYoS8n
0BfBj/xkpj8qFkXkfzh7jORkTEs+e7Hur1TgK+cP/+uAd2RcoQCslbIX
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:26:17 2025 by rpki-client