Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
File:                     YFf0ifWtxOkmnCYNcCyBqraqLm0.mft (raw, json)
Hash identifier:          f2hjAsoMcrCQ0gYkYrQT8ngmHiIZga1w6E2UAiEFvec=
Subject key identifier:   C4:C2:82:20:F5:C0:04:6D:D8:7E:3D:9F:AA:E8:34:B5:C4:21:83:24
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Certificate issuer:       /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial:       0854
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
Manifest number:          084A
Signing time:             Fri 31 Jan 2025 01:16:03 +0000
Manifest this update:     Fri 31 Jan 2025 01:16:03 +0000
Manifest next update:     Sun 02 Feb 2025 01:16:03 +0000
Files and hashes:         1: YFf0ifWtxOkmnCYNcCyBqraqLm0.crl (hash: x+chXLcS3mBgdo3ua7+LTUAVQKsq2AJflyqQX5LCRSA=)
                          2: ECE620A296AB11E9A2CC3244F8AEA228.roa (hash: qOlZLpS7RK9Dr36jbEKFtmL31ZZpQ1zZJ9/887yVsqY=)
                          3: EF92EAC6969011E9A4280D31F8AEA228.roa (hash: 0a9ry7ZLBGBSaODuOljud7Umzq6/+ULq8KkP/gJoptA=)
                          4: 0A728C7696AE11E994BEB045F8AEA228.roa (hash: jhN1xgY7+Ai6dzJNk3/cbOqfB/7bGkdkvygH1Fmr1S4=)
                          5: 1C77837AEA6911EBB1386377D8A014CE.roa (hash: nonq4YKeFdyfGHlNe6qVL9cZdmNNsbyIqMggp/PfHrg=)
                          6: 4F2412D2258D11EEBF2506674AD9E6FC.roa (hash: TPzyP84gVaSBDrHT8ykUyVh7PurvnTJdR22a1A7ZsZE=)
                          7: 52F0650A925C11E9BD13DA51F8AEA228.roa (hash: XSD+lLyh6gJ5eKzdsK6grPxNsYTYn3uqUENZtP+UtNo=)
                          8: D3FE9980926311E9AC9B3D57F8AEA228.roa (hash: k+tP9kkRYqNuPlHHDfKmXRa9tcEV2O5bcyJHIwCTg6w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2132 (0x854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
        Validity
            Not Before: Jan 31 01:16:03 2025 GMT
            Not After : Feb  2 01:16:03 2025 GMT
        Subject: CN=679c2453-73b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:f0:e2:45:33:65:38:64:72:3b:d9:ee:8d:
                    41:30:fa:df:3e:35:9e:f3:a7:af:b7:b7:46:2e:bd:
                    6f:a1:17:12:68:55:3f:1b:16:2e:c8:db:61:86:e7:
                    05:b2:17:36:1f:93:17:57:b7:16:0c:60:06:37:d5:
                    a7:a6:59:01:dc:2c:0f:37:96:ee:d5:da:9d:5f:e0:
                    fe:29:a4:24:a4:fc:a6:91:ce:7c:0d:0e:1b:d3:54:
                    97:51:71:cb:c2:81:cf:ad:bd:a2:12:09:0f:81:d2:
                    7c:cb:c1:e3:7c:4d:27:7c:a1:37:ad:e2:c6:22:0c:
                    72:a3:8c:c3:38:6d:3a:e3:73:d3:49:59:c9:a9:c3:
                    5b:16:40:ed:eb:e3:f3:1b:27:e6:6d:3b:06:7d:3b:
                    66:38:9c:33:e8:01:8b:e1:54:ce:6f:ab:3c:b6:e5:
                    42:16:31:91:28:27:6a:87:7f:32:9c:35:ee:11:26:
                    a4:53:32:7b:91:12:14:8f:bb:df:25:d4:c7:ca:3e:
                    17:42:af:01:7c:d4:31:82:ba:53:72:e9:df:74:c6:
                    40:49:d2:ab:39:79:4b:10:09:a2:43:48:21:49:41:
                    de:20:3a:e4:7f:27:00:b9:10:de:ac:87:1d:a0:65:
                    4d:4e:30:cd:e4:1a:76:5a:43:65:a0:fa:ed:87:25:
                    b7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C2:82:20:F5:C0:04:6D:D8:7E:3D:9F:AA:E8:34:B5:C4:21:83:24
            X509v3 Authority Key Identifier:
                keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:20:99:05:6f:05:5f:79:35:b0:33:75:8b:af:5e:a2:be:a3:
         6a:d5:11:8e:62:c2:eb:6f:1d:76:96:3c:98:93:09:12:42:d1:
         0c:b7:fa:51:13:03:05:6c:5e:3b:2b:2f:8b:a0:6e:27:af:46:
         e3:25:26:44:b2:38:b5:07:9e:9a:b3:e1:b8:2c:6c:9f:67:b6:
         8d:ad:66:f7:48:18:5a:b8:6a:c7:bb:3a:42:65:46:20:35:c5:
         f2:86:18:66:82:e5:4d:c8:5a:bd:ef:ec:52:fa:6f:36:b4:ae:
         8e:c0:3c:90:7c:9f:24:da:58:ab:72:57:9a:21:fe:ad:e3:c6:
         72:4b:a8:e0:fd:56:8f:06:89:2d:57:d2:e3:96:07:61:83:1d:
         fc:07:f1:6e:2d:8a:15:55:db:42:58:59:cb:ef:39:23:ba:f4:
         8b:2c:82:97:2a:ee:bb:cc:b6:81:e5:38:49:bf:e2:3b:10:8e:
         30:42:ce:13:8f:1e:f3:ba:d5:18:e3:62:7e:34:75:39:47:5c:
         7b:2b:bc:b0:7c:4e:59:2f:82:58:9c:34:60:b6:4e:f8:55:de:
         b0:23:72:29:ed:84:35:85:ed:d7:1b:73:36:bc:b9:ea:b2:11:
         a5:a5:1a:41:d5:20:77:1a:60:ff:f9:71:b7:19:99:9f:46:e9:
         e0:05:52:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:04 2025 by rpki-client