Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
File:                     Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft (raw, json)
Hash identifier:          vmINZzVmzvDPcgbM8YjKzgqMWA0maAjbyqKv7DiMMDY=
Subject key identifier:   0B:74:6A:58:96:F8:01:DC:C7:76:40:DD:91:7A:50:23:6C:3C:B3:88
Authority key identifier: 1B:2E:71:DA:04:AE:09:10:39:45:11:7F:90:76:C7:F8:E1:99:24:3C
Certificate issuer:       /CN=F36AC9F1AF/serialNumber=1B2E71DA04AE09103945117F9076C7F8E199243C
Certificate serial:       A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
Manifest number:          A0
Signing time:             Fri 31 Jan 2025 03:06:25 +0000
Manifest this update:     Fri 31 Jan 2025 03:06:25 +0000
Manifest next update:     Sun 02 Feb 2025 03:06:25 +0000
Files and hashes:         1: Gy5x2gSuCRA5RRF_kHbH-OGZJDw.crl (hash: 0H32UIfdBLLGWc92oLasqZk+fi6XBI40mXMTcATMLAU=)
                          2: A30F3A50697C11EFB366DFAE762E951A.roa (hash: /ilQRqAkN9GV5Cf0rRJQg2G1MMpc0XTxcTekWiarM/c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC9F1AF/serialNumber=1B2E71DA04AE09103945117F9076C7F8E199243C
        Validity
            Not Before: Jan 31 03:06:25 2025 GMT
            Not After : Feb  2 03:06:25 2025 GMT
        Subject: CN=679c3e31-e311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:f6:c7:0a:f9:02:5d:5c:eb:d8:2e:7b:8e:
                    a0:96:a6:8d:c4:8a:20:36:ee:0d:36:ae:0f:f5:a8:
                    03:8a:9d:23:43:29:61:bc:39:82:c8:db:7b:f4:dd:
                    a1:47:08:8a:b2:02:1e:82:5c:fc:11:bb:c1:7e:e0:
                    c9:99:7e:e7:a5:fd:23:18:0c:e6:4a:1f:0b:6a:f0:
                    f9:65:71:26:4e:ae:f3:6d:54:90:6d:94:de:12:eb:
                    78:a3:dd:da:01:04:69:0f:dc:f7:5e:f5:aa:7a:9b:
                    ac:40:a6:af:8c:9d:87:11:30:5d:ae:5b:24:41:a6:
                    85:46:db:00:49:b8:f0:df:90:91:9c:cc:44:76:2f:
                    3f:95:b4:08:e8:43:43:2f:a0:46:9c:15:05:37:41:
                    c6:a4:54:d9:7b:64:c2:f8:55:c2:47:b8:98:58:1d:
                    54:3a:2c:91:ad:d6:ab:12:e7:a6:46:2f:6b:ff:a8:
                    88:5c:e4:d2:28:d4:d8:49:80:17:d9:74:fd:21:48:
                    f6:6d:12:9a:13:04:c1:1e:96:b7:50:0a:f7:42:5d:
                    5b:4c:5a:a1:28:a4:80:30:0e:6b:a5:05:fc:c8:48:
                    d8:4b:82:55:1a:f4:b9:4f:0e:dd:9b:0d:5f:ee:c9:
                    87:08:5a:ff:c1:73:14:41:af:c2:19:bf:ef:c8:8c:
                    88:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:74:6A:58:96:F8:01:DC:C7:76:40:DD:91:7A:50:23:6C:3C:B3:88
            X509v3 Authority Key Identifier:
                keyid:1B:2E:71:DA:04:AE:09:10:39:45:11:7F:90:76:C7:F8:E1:99:24:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:48:64:ef:9c:96:74:c4:f7:f3:ce:2a:cc:75:7c:a9:6c:73:
         55:47:63:b7:2b:3a:37:3c:8a:d3:64:50:c6:28:c2:a0:07:31:
         b6:00:c5:11:1e:18:53:a5:9e:99:00:6f:f3:12:de:45:14:a8:
         43:76:b4:ad:fa:28:03:66:61:f8:d2:1e:b5:be:78:17:d5:93:
         e1:c7:f7:0c:3d:88:0e:c0:87:78:ff:20:c3:ad:93:f2:73:ae:
         65:67:97:96:4c:74:54:62:9e:15:45:78:78:13:f3:56:24:29:
         ac:e4:8e:14:78:20:41:b4:c4:c8:79:d9:09:f8:05:35:d7:b5:
         a3:e8:92:b9:33:08:06:1a:fc:2c:9d:fd:87:bd:45:2f:f6:6b:
         57:7a:53:3a:9c:5b:66:95:58:4a:52:90:1d:6e:0a:35:0f:5f:
         13:47:7a:f4:7c:ff:2b:c4:8e:c7:63:e1:fd:e0:83:b9:68:cf:
         58:30:d8:4a:0f:2e:82:7c:98:36:01:80:91:9f:3a:2c:22:e4:
         76:cc:61:ef:8c:2c:1b:72:fd:20:ee:38:ee:d4:20:a3:3a:7b:
         34:94:9a:fe:06:99:a9:3f:11:bf:84:89:e8:a8:de:e6:1f:2f:
         18:8f:23:93:80:3f:4d:f8:a0:6b:35:ee:d6:86:a4:89:40:83:
         af:af:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:18:35 2025 by rpki-client