Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
File:                     2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft (raw, json)
Hash identifier:          7OMWwLh+tRFpsCvUgEGaujJf1MkIGq2fPc39pxTN9Yg=
Subject key identifier:   D9:D1:1B:12:7D:BF:8F:CD:16:E3:2F:00:AF:95:03:8B:3E:74:B7:A6
Authority key identifier: D9:6F:91:F5:02:AE:B5:C2:08:91:E1:7F:10:FF:5E:8C:9F:86:73:A7
Certificate issuer:       /CN=F3695E06AF/serialNumber=D96F91F502AEB5C20891E17F10FF5E8C9F8673A7
Certificate serial:       0570
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
Manifest number:          056D
Signing time:             Fri 31 Jan 2025 01:43:29 +0000
Manifest this update:     Fri 31 Jan 2025 01:43:29 +0000
Manifest next update:     Sun 02 Feb 2025 01:43:29 +0000
Files and hashes:         1: 2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl (hash: tAvqj5yCgLDRnDJMNjUWe1nToiLbDg//j/D42U+safQ=)
                          2: 6B702572C5B611EB874E825FF8AEA228.roa (hash: TuOEHMyp7ZkGMu80eO/vkZfJHkaFNIwGb2ogLtbprVA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695E06AF/serialNumber=D96F91F502AEB5C20891E17F10FF5E8C9F8673A7
        Validity
            Not Before: Jan 31 01:43:29 2025 GMT
            Not After : Feb  2 01:43:29 2025 GMT
        Subject: CN=679c2ac1-a228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:5a:74:2d:d7:b3:c3:60:66:a5:90:7f:1c:
                    77:87:0d:d6:c8:56:15:4c:33:e9:17:2f:89:bf:cb:
                    0c:74:7f:85:8d:7a:50:5c:b0:74:14:52:75:2d:fa:
                    7c:98:91:80:9e:e8:3f:72:24:c6:a8:ee:12:da:db:
                    4c:cc:ce:60:2d:55:fe:10:db:d4:50:14:8d:13:43:
                    3d:70:29:2e:84:db:ff:98:5a:a2:2e:2a:fc:30:fc:
                    13:e3:3a:73:a2:50:d2:40:b9:c0:95:85:5e:8d:9a:
                    a6:73:ce:c8:88:46:91:4f:8b:b6:05:56:31:d1:30:
                    d7:64:57:0b:23:03:7b:45:9c:b8:da:f3:e9:24:e1:
                    ad:34:32:7b:95:64:13:c6:fc:51:b8:df:6c:c0:b2:
                    8c:3e:44:ac:8f:ba:11:cc:bb:47:02:a0:7a:ca:33:
                    86:e4:6a:8d:be:3e:b5:89:96:19:06:a8:cd:2a:ac:
                    01:70:9f:9c:36:d9:04:f1:66:62:da:54:9e:20:dd:
                    e2:33:36:75:1a:23:bb:83:e3:9c:32:37:67:ec:bf:
                    7c:53:73:f0:12:fe:54:71:37:49:5e:61:e7:b4:fa:
                    23:87:20:08:d7:02:1e:f8:44:f7:43:8f:77:c0:ea:
                    cf:b4:99:98:40:4c:79:1c:1e:3c:c7:6b:d9:e8:75:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D1:1B:12:7D:BF:8F:CD:16:E3:2F:00:AF:95:03:8B:3E:74:B7:A6
            X509v3 Authority Key Identifier:
                keyid:D9:6F:91:F5:02:AE:B5:C2:08:91:E1:7F:10:FF:5E:8C:9F:86:73:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695E06/CAD1973AC49411EB9D712251F8AEA228/2W-R9QKutcIIkeF_EP9ejJ-Gc6c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e8:ea:5d:ef:ae:ec:aa:61:51:18:ab:0a:cc:76:87:56:13:
         a2:09:13:73:3b:b2:c7:e1:d8:f7:92:78:e9:65:69:e3:33:60:
         d5:5e:13:f8:8a:8f:eb:ad:20:60:0a:03:ca:6e:5f:14:f9:c0:
         46:bb:19:11:f8:ce:4a:a6:4e:7a:30:e6:f3:ac:b2:90:6c:e1:
         84:45:04:ae:c9:70:e7:8a:7b:2f:ca:72:5e:6b:2d:a7:a7:ca:
         a5:74:f1:62:40:30:97:6c:4a:1e:5c:a2:51:b9:af:00:e2:3a:
         11:90:19:d7:ba:ec:c9:ac:a3:f2:9e:f5:8a:e1:8d:7a:c6:3b:
         6a:1d:66:bd:d1:d7:82:54:f2:06:0a:38:ce:4c:89:74:b9:72:
         90:da:1c:8a:ba:eb:66:41:71:24:05:7a:94:42:d9:23:1d:ea:
         ab:fa:54:b4:8a:43:6e:82:6f:f6:0e:09:49:30:73:97:49:38:
         6c:84:c0:0b:f9:6a:6e:bd:1f:fe:d1:7a:19:e6:c6:56:04:fe:
         21:94:05:05:07:25:76:04:c3:ce:4a:f4:31:5a:74:db:1c:21:
         7d:f2:a4:de:04:08:98:13:9b:40:6f:b0:9c:07:47:e8:85:19:
         43:1f:b2:15:f3:39:f3:a8:b5:05:8e:60:48:ff:59:24:dd:c2:
         0e:ba:9d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----