Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File:                     u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier:          gKog2Ncq7Hp8Vds+FLBbVJScyqP1hc9QC7aenxrp2QQ=
Subject key identifier:   6D:51:17:98:8C:52:CA:40:F6:1A:C9:17:7E:A5:7A:95:0E:38:52:A6
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       04D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number:          04D1
Signing time:             Fri 31 Jan 2025 01:54:33 +0000
Manifest this update:     Fri 31 Jan 2025 01:54:33 +0000
Manifest next update:     Sun 02 Feb 2025 01:54:33 +0000
Files and hashes:         1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: c2PkbF3Vr7ap7EJ7+qqhF5ipRC847pInCPnYqSVI9A4=)
                          2: 5C15170E7C3F11ED8559019DF1222468.roa (hash: Fnw4e2Z6mQxfu98S+Kvx8lPub/zYdBqQ2Qpl3ytsjPY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: Jan 31 01:54:33 2025 GMT
            Not After : Feb  2 01:54:33 2025 GMT
        Subject: CN=679c2d59-2985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:50:f7:d2:3c:9a:bc:bf:2e:6f:97:8d:83:41:
                    ee:d2:41:df:9c:09:51:9b:9b:78:35:8c:83:86:84:
                    7c:3b:be:1f:dc:d7:4c:91:9e:31:fa:01:ac:e1:11:
                    3c:d2:ae:18:5d:0e:dd:60:5f:22:6e:3f:a4:63:52:
                    39:64:98:75:7a:28:ad:4e:25:e8:60:c4:c9:d5:21:
                    e6:bd:d3:8e:28:3b:c6:77:56:4e:ff:55:06:b9:de:
                    22:d9:4c:11:a9:e5:92:8c:72:d5:3e:86:77:e9:4d:
                    3e:1f:0c:ab:ff:39:51:8e:d6:fe:9e:7f:ca:93:32:
                    b5:11:5b:2a:1f:e2:7f:5f:45:c8:bb:04:6c:b0:f0:
                    35:68:b2:d1:56:20:c1:a2:59:dd:b0:05:31:1e:6f:
                    2d:47:e5:d7:f3:28:e9:e2:92:e4:01:dd:85:fd:8c:
                    ba:75:10:46:e0:ff:5d:8f:44:1a:0e:e3:eb:46:fd:
                    0c:b4:04:a8:67:f3:13:68:87:0d:60:1e:20:04:a6:
                    e8:2b:ce:4c:fb:18:33:2d:1d:67:78:01:a3:3f:de:
                    d6:58:b1:fe:53:82:98:85:6d:3b:da:e3:77:ec:bf:
                    07:fc:29:61:78:07:f5:c1:83:e8:dd:7b:48:c7:41:
                    8d:67:e1:71:76:17:c7:2a:ce:8f:5c:66:7c:87:e0:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:51:17:98:8C:52:CA:40:F6:1A:C9:17:7E:A5:7A:95:0E:38:52:A6
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:78:d0:3a:2e:3b:03:0f:37:24:0f:2c:50:f6:01:70:e5:df:
         fa:98:3d:e4:34:ca:29:75:00:ed:42:dc:1f:b5:40:f3:fa:75:
         38:09:42:06:b8:25:16:17:c5:45:21:f1:9f:c5:e6:b1:8f:76:
         1c:e6:85:6f:83:e8:d4:f1:40:3b:71:0b:49:ff:c5:b3:0b:ec:
         08:ee:2a:d6:76:65:ec:a7:75:2b:c2:03:38:da:bf:06:a8:6f:
         20:36:a9:f2:b1:e6:f2:26:f7:6e:88:33:53:f1:0c:66:e4:70:
         66:21:eb:ca:e8:34:c5:c6:b5:d2:dc:72:a0:f5:94:d7:7e:a5:
         4d:9a:bc:e2:78:36:14:01:2e:12:e1:fe:56:1f:0e:bd:6f:a2:
         77:06:8d:af:4d:88:80:a1:df:18:99:4f:97:58:5a:86:23:96:
         24:78:1a:4f:98:92:1a:fe:a5:e8:50:e5:02:3c:d3:b1:ba:7d:
         91:81:1a:42:36:0e:a6:17:b5:74:08:b5:82:70:24:d4:a0:e4:
         70:f2:1a:eb:5c:00:e0:6d:09:0d:d0:bc:a0:fa:03:fc:c2:57:
         bd:b6:d0:c1:cb:9c:46:5f:0a:e3:9b:c4:4c:5a:b6:b9:09:e9:
         e8:f8:ab:87:f6:a4:02:68:71:6b:24:a1:9d:c4:1c:48:3c:89:
         c5:41:67:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----