Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
File:                     PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft (raw, json)
Hash identifier:          +GNutHl9rC9ulK1w9amI1N0VBKeI6BQywrA+FoHZySY=
Subject key identifier:   EC:81:BC:3C:9B:4F:6D:BA:CA:BC:73:BD:FC:CF:B4:FF:F0:34:49:41
Authority key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Certificate issuer:       /CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Certificate serial:       01CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
Manifest number:          01CE
Signing time:             Fri 31 Jan 2025 02:43:44 +0000
Manifest this update:     Fri 31 Jan 2025 02:43:44 +0000
Manifest next update:     Sun 02 Feb 2025 02:43:44 +0000
Files and hashes:         1: PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl (hash: UXgeK52y66Wc+oJJcp+hEKYpCvZLXWqNNNA0P8HgD/o=)
                          2: 7505B06024CD11EF9410DD1A7DDC24C2.roa (hash: vn59PtsA74MEKr6H9TKVqZemfFNq5OYAs+pWATJBHgA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
        Validity
            Not Before: Jan 31 02:43:44 2025 GMT
            Not After : Feb  2 02:43:44 2025 GMT
        Subject: CN=679c38e0-60ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:d0:95:e8:53:3e:f2:58:35:ab:ee:73:f7:
                    dd:13:9d:e3:f1:d1:43:54:2d:1c:cc:7a:09:25:e7:
                    24:1d:3b:40:3e:e8:fe:e1:13:cf:c6:03:8b:44:aa:
                    ea:27:5c:f4:24:fe:03:b5:5e:84:47:89:a5:83:8f:
                    65:25:26:e8:88:11:87:e1:8e:bd:ef:0c:d8:3a:ba:
                    d7:3c:f8:13:0b:c9:39:1a:80:5a:c8:5d:f9:d1:e8:
                    ba:3d:ff:8e:8f:b8:39:a0:f6:83:96:99:44:fb:9f:
                    b2:e0:4b:1c:03:92:f0:b6:99:19:20:42:61:7d:ab:
                    89:12:7a:47:57:cd:9b:fb:3c:59:16:6c:b4:fc:28:
                    49:af:cb:b5:41:4f:c3:57:db:7f:77:38:f2:11:fd:
                    e0:3d:7f:89:6b:01:57:b8:33:7d:0e:d6:cf:49:42:
                    bb:1a:cd:7d:01:96:a7:2b:4a:91:ae:9c:fe:c1:8c:
                    2b:3a:e1:65:38:2d:51:de:ce:d0:0f:65:5c:ab:93:
                    09:0c:4c:84:d3:8f:52:34:e3:a9:ec:a5:5b:cf:ed:
                    2f:5c:74:ca:b3:cb:e6:dc:82:36:9f:0b:74:f3:f9:
                    13:db:58:20:3d:ab:88:4c:b4:ca:94:d6:29:fc:6f:
                    68:56:7a:5a:cc:c2:b5:bc:63:b5:5b:2f:e1:12:f3:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:81:BC:3C:9B:4F:6D:BA:CA:BC:73:BD:FC:CF:B4:FF:F0:34:49:41
            X509v3 Authority Key Identifier:
                keyid:3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:75:0c:2c:da:ab:96:ab:74:7e:6f:20:e6:41:96:3c:4a:b8:
         34:5a:8c:96:17:91:28:2a:15:d2:a2:83:6a:07:d5:87:9a:a6:
         04:ff:33:6e:de:0b:77:30:b6:af:bb:7c:83:10:6c:48:6a:54:
         25:e2:db:24:76:4e:97:85:7b:82:cf:8b:38:86:b4:d1:e3:15:
         e5:49:84:b5:7a:c4:3f:f3:f6:1d:28:66:a2:4d:84:41:87:32:
         ff:b2:72:c1:61:a5:f4:41:e2:c7:50:32:2a:bf:0f:b6:22:ad:
         13:6f:93:21:de:8c:68:d9:7d:29:73:a3:30:db:14:bc:cb:ea:
         f1:9b:9e:3f:29:1d:a0:1f:9d:fc:d1:61:d7:92:57:a5:83:70:
         a3:c8:37:73:26:80:cf:9e:07:a7:27:17:87:73:24:73:82:98:
         84:11:92:a8:cc:b1:b6:1e:72:88:ad:76:c7:06:f8:6a:86:20:
         f2:25:1d:db:76:82:37:19:fc:4c:cb:7d:3f:b6:42:c2:78:01:
         1e:a8:20:ed:4e:f9:bb:dc:5c:94:e8:cd:f2:37:5c:ce:c7:a3:
         35:a3:ce:de:6b:18:e1:f9:39:a5:18:fc:cf:6c:54:b4:72:d0:
         22:84:81:fd:b3:68:11:01:0c:3e:21:9f:c9:07:80:95:c7:20:
         2d:d2:18:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:49 2025 by rpki-client