Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
File:                     5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft (raw, json)
Hash identifier:          4b5l49QIdb3InSlV4GFlFF7jC2aeXpJGsJgXGlma49E=
Subject key identifier:   FA:9B:E8:58:DE:00:84:F3:4C:64:5E:71:1A:FF:96:43:5E:BC:2E:11
Authority key identifier: E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24
Certificate issuer:       /CN=F3695083AF/serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
Certificate serial:       89
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
Manifest number:          86
Signing time:             Fri 31 Jan 2025 03:11:03 +0000
Manifest this update:     Fri 31 Jan 2025 03:11:03 +0000
Manifest next update:     Sun 02 Feb 2025 03:11:03 +0000
Files and hashes:         1: 5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl (hash: 3DEaxz+hx0L+ghGeDp3Z1Qg2VdKfBO45ug0xFcxVbJI=)
                          2: 7319A346865311EFBF9C838D762E951A.roa (hash: lo3g6X3ubdXC9HjeAdNZwt2kyeKYY3nM3ILNgfq1PjI=)
                          3: 74DC1AE2C46511EF85B5237D762E951A.roa (hash: CJ5E2+hEe+/wSXFMNEijdHv/KTZ0Hf60OfkqPWnXEi4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695083AF/serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
        Validity
            Not Before: Jan 31 03:11:03 2025 GMT
            Not After : Feb  2 03:11:03 2025 GMT
        Subject: CN=679c3f47-f5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dc:09:ca:b2:c0:d4:46:fe:91:67:fc:e2:93:
                    17:96:9e:eb:e8:fd:77:d5:04:bd:af:80:f7:1b:39:
                    d6:30:8c:1e:df:77:ad:59:e2:fa:67:4c:48:98:a8:
                    7d:cd:8b:e4:c7:ed:d1:1c:23:d6:a4:22:59:ce:29:
                    d3:38:85:ee:39:40:fd:ce:0f:64:1d:5f:49:2d:cb:
                    ac:96:2f:2c:5c:b4:0c:86:45:39:3d:28:75:90:de:
                    4a:a5:2c:e4:2a:af:45:1d:f7:2d:b3:dc:17:a5:3d:
                    e8:2e:3a:ee:f0:c9:e1:97:2e:2b:e6:11:4e:04:df:
                    d2:39:8c:1a:5d:91:51:99:1c:04:46:f7:52:8f:e1:
                    56:71:91:ae:33:71:4d:f1:cc:38:2b:43:4a:d0:d6:
                    f8:63:cb:31:fc:6c:5a:a2:29:6a:11:ea:76:f6:3f:
                    e0:d7:10:51:e2:0c:6f:c3:57:86:60:cf:50:9b:e0:
                    d2:17:bd:cf:73:a6:b8:c3:e7:02:c0:76:19:5f:0f:
                    0e:76:7f:76:2f:01:14:fb:b8:bc:6e:d8:01:57:f4:
                    9f:a1:34:94:95:84:bc:4e:85:f5:9f:60:91:58:f3:
                    31:93:28:c1:78:78:01:53:b8:0f:0e:d9:3a:e1:03:
                    18:70:2f:cc:66:cd:cd:45:bf:d3:27:23:ab:01:29:
                    fa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9B:E8:58:DE:00:84:F3:4C:64:5E:71:1A:FF:96:43:5E:BC:2E:11
            X509v3 Authority Key Identifier:
                keyid:E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ef:83:7e:03:53:10:d4:09:14:b9:2b:ca:dd:60:9a:a3:86:
         c5:5d:52:d8:6c:74:fa:99:87:1e:39:bd:fd:3e:2a:09:c2:b1:
         23:a9:08:30:ba:01:2d:c4:27:e5:19:de:42:c3:03:36:70:50:
         ce:32:5a:ac:82:3f:6f:0d:06:28:30:13:8e:27:b9:e0:24:44:
         7a:86:60:8c:37:0c:3a:3b:59:94:ac:bd:ba:a6:6b:cf:fd:f5:
         06:cf:df:d1:49:bc:9d:ad:84:ad:45:b5:88:90:7f:77:b1:4c:
         c6:8e:ba:b4:48:2e:10:72:19:03:12:d8:c0:85:4c:f5:b9:a6:
         b8:08:cd:f4:72:21:2b:54:04:87:d4:3c:3f:3e:74:f1:33:e1:
         4c:8d:7f:43:30:fc:01:52:71:79:b3:fc:1e:2f:95:64:33:7a:
         bc:7c:15:36:56:1b:9b:ee:35:9a:5f:cd:0e:9d:69:ad:3b:85:
         86:58:ef:80:65:43:d3:d9:2f:13:53:3a:8c:56:3b:00:d6:82:
         a1:32:63:f6:f2:a2:62:17:74:29:95:7d:88:69:fa:31:a1:21:
         de:77:dc:74:90:55:7b:4d:92:91:4e:33:29:bf:a4:f2:44:84:
         10:57:7e:c2:51:af:6c:a2:d1:75:e8:b6:0c:22:c7:f8:12:e7:
         76:b4:ce:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:34:04 2025 by rpki-client