Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File:                     zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier:          XApUZKoIW83r8JVCg2mK4LaqP8Byv3Q/CVmCZKjBbBw=
Subject key identifier:   34:DC:1F:67:ED:AE:32:31:78:7E:9F:0C:71:6C:61:5E:FE:44:85:21
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer:       /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial:       D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number:          CD
Signing time:             Fri 31 Jan 2025 03:02:51 +0000
Manifest this update:     Fri 31 Jan 2025 03:02:50 +0000
Manifest next update:     Sun 02 Feb 2025 03:02:50 +0000
Files and hashes:         1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: CINpxqOzwirl2qMrqpZuhuz9c6DDSiP5/FW2IaMy0rc=)
                          2: 0A4A7D2C53E011EF97D46343762E951A.roa (hash: qkXQan1qrLXn2t2IrFjyvM/NvTWvb3OJlxtePnzO678=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
        Validity
            Not Before: Jan 31 03:02:50 2025 GMT
            Not After : Feb  2 03:02:50 2025 GMT
        Subject: CN=679c3d5b-6af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:5f:04:e5:69:54:73:b7:72:65:1b:2a:20:
                    97:cd:ee:9b:cb:2f:d6:8d:00:63:70:dd:f3:d3:3c:
                    c0:a4:20:79:fd:47:e6:21:a9:4b:43:77:08:b0:32:
                    96:c3:33:a1:15:dc:82:e6:fd:43:21:a2:6d:dd:68:
                    e6:78:d0:8a:6b:af:9c:08:d8:55:19:b2:07:80:40:
                    05:1a:ac:24:b4:ce:d1:89:6a:9f:f6:7c:3f:ad:42:
                    69:ce:a1:31:35:84:e5:e2:78:a1:e0:e3:3a:a3:b3:
                    68:d2:51:4f:18:63:3e:d6:ff:98:19:1a:41:16:83:
                    4a:d4:2c:5a:5b:79:3e:7d:37:e3:3b:83:0b:ef:31:
                    b0:ad:14:1e:1c:bf:5a:25:13:0b:f2:4a:8e:23:33:
                    7f:84:af:d1:a5:3b:15:9a:40:ef:d1:bb:dc:56:cc:
                    d5:34:e4:f6:aa:81:8b:65:71:40:99:d5:cf:44:42:
                    44:79:d6:2f:dc:e5:40:42:0f:58:a8:53:07:94:1d:
                    60:44:d3:8e:fd:56:22:7c:fe:ef:d9:fc:eb:53:12:
                    51:00:12:82:f1:d5:6a:47:9e:e2:2f:6e:db:4d:02:
                    14:65:b6:6c:ec:f0:ca:88:34:28:63:01:d7:d6:f1:
                    b8:13:9d:fd:c6:11:64:e7:ce:b6:5b:77:4b:d8:9d:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DC:1F:67:ED:AE:32:31:78:7E:9F:0C:71:6C:61:5E:FE:44:85:21
            X509v3 Authority Key Identifier:
                keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a3:5c:dc:16:6a:84:8c:d3:cf:f3:5a:e1:5f:e7:c6:46:a2:
         05:2c:83:bd:06:c1:91:34:23:03:ce:40:a7:f3:18:e4:e5:a6:
         ae:f7:87:d9:1f:c9:be:0b:78:24:83:0d:1d:af:04:3a:33:32:
         2b:0b:e3:12:5b:bb:d3:e6:4d:4b:12:7e:29:72:ba:79:2d:24:
         3e:b3:96:b3:4c:12:79:de:5d:90:6b:26:00:11:3d:ba:2e:c4:
         35:d1:fb:4e:43:c4:5f:cb:cb:37:fa:bb:b3:e9:fa:e3:04:dc:
         07:49:5d:e0:c1:9e:cc:e9:32:cf:82:9d:81:e9:0c:ea:48:d0:
         54:e9:08:13:f5:2b:05:d2:dd:57:2f:c3:c8:45:c6:52:91:2c:
         26:44:14:86:81:97:0a:9f:d1:4d:cb:9b:0b:3c:03:f1:d7:f0:
         d9:68:67:70:c5:10:4a:57:77:67:77:98:33:35:c8:a3:c9:0f:
         11:20:1d:4a:c6:d2:79:37:25:3d:7f:68:c7:8c:5d:25:c2:37:
         7f:37:ca:75:08:97:90:0b:4b:ce:6a:61:72:c3:5c:4a:7a:e5:
         8c:17:5b:52:a4:7b:14:52:22:35:c1:ed:2f:0b:95:32:b5:93:
         ee:17:b0:5d:37:e4:8b:0c:91:8b:cd:ba:97:91:b3:80:de:8b:
         bf:0a:33:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----