Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
File:                     ih_PKB86N6VQ5kE32QhVCuiQIzo.mft (raw, json)
Hash identifier:          VZDZPIi1/rBXdxZlCvO5CO5WgDKm+JIP21ztNa7zJ10=
Subject key identifier:   0B:8D:7E:1A:27:6A:0A:55:86:FB:75:10:22:74:07:1F:77:C2:94:91
Authority key identifier: 8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
Certificate issuer:       /CN=F36A3983AF/serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
Certificate serial:       60
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
Manifest number:          5F
Signing time:             Fri 31 Jan 2025 03:12:53 +0000
Manifest this update:     Fri 31 Jan 2025 03:12:52 +0000
Manifest next update:     Sun 02 Feb 2025 03:12:52 +0000
Files and hashes:         1: ih_PKB86N6VQ5kE32QhVCuiQIzo.crl (hash: Wkau4zo64fBFxyv3GPNNP8tobzWRwsPFLuB/AUXw7vY=)
                          2: 06EE82A89B9E11EFA256DA5A762E951A.roa (hash: 2jh2P8eMrHu4GkQNFQFJgeOA87Bp3duiKWGcRIfCjWE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3983AF/serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
        Validity
            Not Before: Jan 31 03:12:52 2025 GMT
            Not After : Feb  2 03:12:52 2025 GMT
        Subject: CN=679c3fb4-d6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:93:b1:89:36:d6:d2:f2:de:4c:fa:8d:60:
                    cf:b6:b7:4d:96:bd:05:92:91:91:f0:9c:1f:b8:cc:
                    28:13:fe:b9:56:4e:b1:3b:12:2e:a8:41:41:eb:c5:
                    8f:cb:39:27:7a:16:ae:de:7a:03:75:43:75:50:ec:
                    0b:95:7e:03:63:9b:e7:f6:18:e4:08:c2:0b:14:4a:
                    7f:09:59:03:74:ea:03:31:b1:ff:a9:bb:22:1e:64:
                    62:da:96:4e:ec:bb:a4:9d:11:55:35:26:c4:bf:4a:
                    7c:e7:67:bb:57:8d:69:33:b7:72:42:40:89:33:8b:
                    3c:c1:4d:d4:6d:10:43:6c:92:e4:63:b5:f7:85:ed:
                    d9:1a:a5:6f:6e:4e:66:fa:e8:51:35:fd:7b:46:65:
                    54:83:ef:75:7e:87:32:df:68:21:aa:a6:b3:c2:d3:
                    d0:b7:63:1f:c7:e8:19:42:01:95:14:f6:4b:60:57:
                    dd:32:74:26:dc:39:9a:df:50:53:ae:66:34:97:bd:
                    df:84:99:47:9d:97:32:c0:9f:59:5f:dc:27:47:18:
                    e6:94:18:08:6e:b0:8f:31:a7:62:88:68:5f:96:52:
                    6e:cd:b4:ba:4f:3d:65:36:5c:a0:93:c6:a3:72:38:
                    d5:69:3f:37:88:ce:a8:6c:e0:3a:60:00:9f:5d:76:
                    c8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8D:7E:1A:27:6A:0A:55:86:FB:75:10:22:74:07:1F:77:C2:94:91
            X509v3 Authority Key Identifier:
                keyid:8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:db:38:95:10:b0:28:1b:83:3c:f6:dc:72:85:53:6f:c6:73:
         34:b6:62:2a:fe:f8:c2:31:44:23:2c:39:83:37:0c:06:5a:57:
         b8:73:ba:64:92:94:94:b1:26:2d:4f:89:f0:b0:e7:55:7c:fc:
         12:ee:e4:38:50:a9:f0:dc:77:c6:cf:61:53:4c:11:35:6b:69:
         b9:94:da:c2:14:c2:3c:62:77:4f:34:0c:7b:41:55:c4:be:86:
         13:a9:71:50:2c:7e:40:80:bf:23:69:6a:40:e9:f3:0a:90:26:
         4e:78:14:1a:b3:2f:2d:42:39:4f:6d:d1:6b:3d:6e:de:af:17:
         7b:12:cb:3a:f2:cc:e7:50:44:72:c9:19:1a:92:6f:55:07:84:
         b1:aa:cb:91:87:6c:eb:be:75:f8:cd:fb:d0:7e:2e:c0:17:ce:
         bf:9b:0a:48:1c:06:02:88:fd:c2:12:78:dd:bc:c1:66:67:1c:
         f9:ce:74:61:b8:6a:1f:be:aa:ba:a8:d5:a0:c2:a6:bc:6f:28:
         b5:ab:01:31:8c:74:27:73:8d:41:0d:ee:a0:8a:69:b0:80:1d:
         7d:b7:63:66:da:d2:40:92:39:8e:a7:f5:24:4c:ec:2a:48:48:
         01:2a:17:ef:25:e0:b4:5a:2b:18:80:8f:6d:5e:bf:3e:de:de:
         ae:2a:0b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----