Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
File:                     AeYcP5ZGalkJmFR26IR5u31BEvY.mft (raw, json)
Hash identifier:          Dny2Nwi2NL+oQO4pX6J7XFeRlSiWcF387vtQdt76gkk=
Subject key identifier:   84:A0:C8:46:24:51:6F:87:44:DE:5B:39:93:DB:A1:00:3A:CB:2D:EA
Authority key identifier: 01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6
Certificate issuer:       /CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
Certificate serial:       0684
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
Manifest number:          067C
Signing time:             Fri 31 Jan 2025 01:31:04 +0000
Manifest this update:     Fri 31 Jan 2025 01:31:04 +0000
Manifest next update:     Sun 02 Feb 2025 01:31:04 +0000
Files and hashes:         1: AeYcP5ZGalkJmFR26IR5u31BEvY.crl (hash: AQ7VzYDGvAqFisG3BkunkvnKhivZbONkqGF2BZijYfg=)
                          2: 7BD1C78ECEC211ECA5D168D9F1222468.roa (hash: nf4PK+lidOrfc2Reb2CQH5nPtPRWenK3xLxQgTopJGo=)
                          3: AF4DC1D2CEC011ECA479F5D3F1222468.roa (hash: QVVfkdm1Ps59DY37Vr5B9x+xZ3oQL5mjOfgaIXuN1I8=)
                          4: 1E1654C4EEAA11EA8289771CF8AEA228.roa (hash: Dm82340uA0C690wn7sH2AhL9e6hsAhiXi6CDcAUcav4=)
                          5: DB1CF2E4CF5E11EC915C67C8F1222468.roa (hash: 5Aalyj0KvAvkgduGsPBpHdZbewdqAVL2gKGSiyYrFeY=)
                          6: 9CE6BFE6CEC311ECA312CEDCF1222468.roa (hash: UglkDp7AHPyplmtXic17NxeQDhq5WTRNY6CVWgh+94E=)
                          7: 3BD19BC6CEBF11ECB35C83CFF1222468.roa (hash: OQiLL3s4QK6PIepNSEVRJXRwc92W6fxDSAwcYtXxCQ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1668 (0x684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C738AF/serialNumber=01E61C3F96466A5909985476E88479BB7D4112F6
        Validity
            Not Before: Jan 31 01:31:04 2025 GMT
            Not After : Feb  2 01:31:04 2025 GMT
        Subject: CN=679c27d8-599d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:7e:05:2c:ef:ee:05:9e:71:d7:89:00:6d:
                    8e:ec:26:81:69:37:7c:eb:2a:8f:f3:91:3a:a2:a8:
                    a9:17:53:7a:f1:1d:d2:e7:b6:6f:e2:89:ec:cd:f8:
                    08:04:56:dd:c6:02:55:a4:2c:c0:66:08:1b:db:5a:
                    47:ec:0c:3a:b5:c0:19:b7:d0:28:a2:ae:7b:4c:4f:
                    ca:99:fd:cb:b7:1b:ae:31:0e:49:ff:f9:63:e1:df:
                    c9:7e:f1:d5:6b:d7:2f:7e:96:0a:f7:6c:2c:d6:a3:
                    45:18:3f:6b:08:69:39:5b:5f:4d:db:46:b6:e6:36:
                    ca:fb:71:96:8b:d8:01:19:4a:8f:a9:c0:fb:ce:23:
                    26:34:e4:c5:7e:7a:40:4d:37:f4:40:7e:2e:88:5e:
                    f0:67:af:01:d5:4e:b5:7a:1d:1b:e6:ba:af:f9:26:
                    d0:c4:c1:14:65:67:6e:99:65:8f:1c:7a:db:72:2f:
                    f4:4a:5a:0c:40:48:27:81:88:c2:c5:4d:8c:f0:1f:
                    65:5a:db:5f:aa:72:05:0e:5c:c4:15:2e:94:4b:64:
                    84:8a:59:83:a1:49:38:35:a7:0c:c0:55:c4:24:d5:
                    9d:d4:1a:34:06:91:5c:9e:69:e9:b1:03:f0:76:b9:
                    7e:7e:47:9d:e3:ed:7a:32:12:85:03:09:73:8c:8c:
                    4e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A0:C8:46:24:51:6F:87:44:DE:5B:39:93:DB:A1:00:3A:CB:2D:EA
            X509v3 Authority Key Identifier:
                keyid:01:E6:1C:3F:96:46:6A:59:09:98:54:76:E8:84:79:BB:7D:41:12:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AeYcP5ZGalkJmFR26IR5u31BEvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C738/7A0ABF00EEA911EAA287D91BF8AEA228/AeYcP5ZGalkJmFR26IR5u31BEvY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f1:70:ae:3f:34:d7:63:68:20:36:9d:a0:fd:07:74:a6:19:
         0f:97:c9:86:04:ef:97:53:47:5f:c1:41:1e:c5:ce:1b:90:af:
         cb:95:2e:db:ed:49:b0:2c:45:01:75:8f:6b:c1:36:ce:68:e3:
         e1:65:78:92:1d:ae:ad:7b:f5:8c:4e:a7:af:6e:a7:0a:43:d4:
         45:03:25:5d:9c:62:fb:de:06:5f:e2:db:1f:3a:68:8b:75:92:
         05:52:d1:21:42:e4:c5:04:1b:92:ee:71:1c:b4:e6:bd:7f:e9:
         43:d8:e2:1a:18:7d:18:43:c5:76:a1:4e:b6:29:97:3a:b5:75:
         4e:b8:2f:e5:e5:61:29:9f:bb:f7:56:c0:dd:fb:48:f0:fb:88:
         6e:c3:c9:51:20:aa:14:c8:5a:00:6f:c5:f3:ed:e7:67:6e:60:
         fb:21:2e:47:96:ad:76:01:a1:5b:98:c3:86:97:de:81:34:95:
         25:62:ad:1b:64:14:46:a3:74:6c:38:99:ba:16:44:6a:37:2e:
         30:a3:06:78:01:d2:52:d2:71:61:3c:2e:a6:20:c7:ef:70:1a:
         6c:8e:01:65:4b:b6:7c:49:ce:24:a5:39:1d:d3:cb:ac:99:95:
         fe:15:fc:f4:1a:74:56:95:aa:9a:55:fb:25:ac:0c:c9:93:4e:
         92:41:dc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:35:11 2025 by rpki-client