Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
File:                     i-QDW-vJyDQotaJ76Fuslm125cs.mft (raw, json)
Hash identifier:          VrGV+kJjAaE1GJEypk2orblDSxwXUTazwX2OQVtlvpk=
Subject key identifier:   F0:3D:83:66:76:D1:71:97:F4:2E:1D:47:EC:65:A3:66:73:F6:9C:AF
Authority key identifier: 8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB
Certificate issuer:       /CN=F36A854FAF/serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
Certificate serial:       02EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
Manifest number:          02E4
Signing time:             Fri 31 Jan 2025 02:22:20 +0000
Manifest this update:     Fri 31 Jan 2025 02:22:20 +0000
Manifest next update:     Sun 02 Feb 2025 02:22:20 +0000
Files and hashes:         1: i-QDW-vJyDQotaJ76Fuslm125cs.crl (hash: VcQ9dV1hzgIGfqT++zQrQflMMXiI9TSuSkgtx70VMFo=)
                          2: 557725A0B21511EF88D2448C762E951A.roa (hash: opZztqXESofrVmYo2p5Jk1wm+34HapZU5YnopzpKiHA=)
                          3: 9394FD62B21511EFBC825D8E762E951A.roa (hash: lu1oced98iyT24G4vw7hwl0wpa8JR56UCd+rbr6ylXY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746 (0x2ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A854FAF/serialNumber=8BE4035BEBC9C83428B5A27BE85BAC966D76E5CB
        Validity
            Not Before: Jan 31 02:22:20 2025 GMT
            Not After : Feb  2 02:22:20 2025 GMT
        Subject: CN=679c33dc-95e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cc:c7:4f:ea:98:e1:e0:95:e7:bf:49:0f:9a:
                    71:b4:dd:a5:ba:11:e2:4e:d7:2c:ec:8d:ea:14:9b:
                    a4:ba:63:d5:ea:93:28:03:33:02:62:8e:a4:2a:79:
                    9f:0b:2b:03:45:db:90:b5:e3:16:87:e4:93:ca:11:
                    e3:7f:67:be:79:2e:99:52:ba:d8:6e:15:a1:6e:f9:
                    0e:81:5c:3a:aa:a9:8e:93:ce:a4:06:45:3a:08:a3:
                    0b:9d:e5:70:55:ee:18:59:f3:7c:f9:1c:e2:8f:c7:
                    91:44:b9:d9:2c:04:5f:b2:93:2e:ca:3f:e1:ef:ff:
                    0a:96:df:fa:fe:0b:f9:10:cc:f9:93:14:9f:2f:54:
                    86:76:80:93:dc:ef:4d:08:a2:43:9a:40:1c:70:41:
                    30:da:1b:04:fa:56:f6:b8:4d:8d:41:56:c0:e2:34:
                    11:80:74:78:b0:c7:e0:bc:52:70:9d:97:17:25:8b:
                    03:72:cf:cb:82:e1:d0:49:ca:25:e6:dd:95:71:35:
                    7c:69:26:dd:8d:53:d3:1b:9c:45:91:2f:cd:01:27:
                    75:e5:49:59:9e:08:29:6a:e7:de:5e:4e:82:10:af:
                    02:45:ec:54:d6:82:10:af:4e:4c:39:16:f5:97:b1:
                    c3:fb:2a:fc:ed:31:6b:06:cc:d3:ff:ec:86:ee:dd:
                    be:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3D:83:66:76:D1:71:97:F4:2E:1D:47:EC:65:A3:66:73:F6:9C:AF
            X509v3 Authority Key Identifier:
                keyid:8B:E4:03:5B:EB:C9:C8:34:28:B5:A2:7B:E8:5B:AC:96:6D:76:E5:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i-QDW-vJyDQotaJ76Fuslm125cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A854F/5E87C042B73411EDA8D4CCA4F1222468/i-QDW-vJyDQotaJ76Fuslm125cs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c5:ad:9f:b1:af:cc:a1:c7:23:5c:fe:55:b2:b0:d0:d8:67:
         1a:04:06:c6:53:bc:5d:2c:bc:7f:31:4f:63:3b:9f:30:a1:99:
         af:31:64:fa:5f:e6:21:27:84:ec:bd:7a:7b:3b:8b:12:0e:db:
         32:4f:b4:67:c2:56:c8:e8:02:21:ca:31:f0:33:3e:68:a5:f8:
         5d:53:34:cc:d2:9b:f4:c2:f5:61:bd:70:26:b0:f7:ce:46:88:
         01:71:e8:6a:42:2e:44:47:e3:57:d1:90:9b:c9:f3:4d:18:44:
         54:76:e9:fc:3f:4b:91:be:c6:80:23:b8:c2:de:48:5c:29:47:
         3b:75:86:e4:f5:08:2b:92:ed:e9:58:0f:b9:16:38:6f:f9:b8:
         70:16:14:21:79:f9:71:d9:5e:b9:2f:85:98:ba:76:08:50:af:
         2a:2c:95:55:b6:7b:ab:78:f8:05:80:f8:5e:da:8a:89:5a:f7:
         77:1e:17:89:bd:9f:01:53:24:9d:55:ff:1f:05:a9:dd:14:b2:
         95:1b:84:67:01:d7:5b:7f:a9:51:cf:c7:82:e7:4f:fb:bb:df:
         28:a0:b1:a3:c0:bd:35:f3:13:69:39:18:24:d9:19:15:40:be:
         98:a4:31:d8:78:dd:54:4f:41:1b:32:98:c4:26:6b:89:7f:0a:
         83:44:df:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----