Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
File:                     A_5dcm806TzhqV2UUY4SI3rD4sY.mft (raw, json)
Hash identifier:          9y8bDKBMj0IigxD90AN01MO4n1FMAa75PVDT/rrc7yk=
Subject key identifier:   17:BA:B7:82:2D:0E:B9:E5:FA:EB:20:A7:40:AB:AC:DF:AE:8F:A8:4B
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Certificate issuer:       /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial:       0537
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
Manifest number:          051D
Signing time:             Fri 31 Jan 2025 01:52:58 +0000
Manifest this update:     Fri 31 Jan 2025 01:52:57 +0000
Manifest next update:     Sun 02 Feb 2025 01:52:57 +0000
Files and hashes:         1: A_5dcm806TzhqV2UUY4SI3rD4sY.crl (hash: XF8TEtpYHvQXD9qB3NR7udtqJtdT2FIZ+vKtHmpNSco=)
                          2: D987B66863CB11EFA0F75972762E951A.roa (hash: OjFWCVbF9MzWB5rSe76yP7YBjLAYfw9QCT5/RpHfRRk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1335 (0x537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Validity
            Not Before: Jan 31 01:52:57 2025 GMT
            Not After : Feb  2 01:52:57 2025 GMT
        Subject: CN=679c2cf9-b031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:54:2e:d8:00:36:b6:29:65:dc:11:77:15:
                    36:2b:f9:77:73:59:a8:40:d8:ac:b8:f7:c1:55:96:
                    76:a2:e4:41:af:2d:80:f5:30:ac:6a:76:15:01:61:
                    25:47:8d:01:ef:2b:7e:01:98:44:46:1d:cb:b8:96:
                    06:7a:b4:72:c8:d2:e2:3c:ea:6a:ab:e7:26:c2:2f:
                    b0:69:f3:af:63:15:2f:21:28:23:fc:bf:75:0b:4f:
                    13:2c:9c:10:a6:55:68:68:3c:e1:f9:b6:cd:1f:8f:
                    4a:b4:18:1a:80:99:d3:95:b6:22:c5:f8:0f:51:55:
                    a6:01:91:d5:49:cb:ca:7c:b3:8c:c6:5f:89:69:4c:
                    41:c2:ed:21:6c:a3:3c:d7:d8:76:01:38:f2:6c:59:
                    5f:7d:a2:5b:44:95:d2:c4:19:32:9c:e0:4a:07:f4:
                    65:78:93:47:36:0a:33:25:24:88:37:fc:61:02:cf:
                    3d:63:30:15:7e:d6:09:5f:d2:a2:9a:72:b0:d8:40:
                    14:0d:11:49:d3:3a:85:ae:f5:5b:77:55:65:c0:ae:
                    42:c4:e9:d3:47:82:3e:be:da:93:25:8c:d4:5e:5f:
                    80:2f:74:c6:cc:4d:d7:86:2c:63:44:63:88:76:c5:
                    31:d1:75:db:30:23:c3:d3:5d:7c:8c:82:df:23:93:
                    5b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BA:B7:82:2D:0E:B9:E5:FA:EB:20:A7:40:AB:AC:DF:AE:8F:A8:4B
            X509v3 Authority Key Identifier:
                keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cb:e7:a2:02:67:62:2d:1e:6e:9f:6a:b3:e3:de:0f:de:29:
         15:8f:bb:12:75:99:fe:f6:64:62:24:40:53:93:9b:7c:ba:49:
         6d:1a:d6:88:be:5c:35:e5:8d:0f:45:31:9e:ff:d3:65:e4:e3:
         d5:9b:54:30:f4:0e:58:07:1f:ba:a1:c9:3c:ca:bb:6a:74:01:
         b3:5c:41:4d:89:3a:c9:dd:7b:22:56:93:1d:be:17:11:57:81:
         cb:3f:d3:73:cd:cd:02:25:49:cb:97:16:82:4b:77:b9:4f:a3:
         b7:70:9d:92:e9:0a:b6:c5:cb:18:da:58:fb:65:87:57:63:d2:
         02:96:48:eb:12:75:3c:bc:5b:93:4b:13:cd:ec:bf:c7:90:62:
         73:1a:d1:1d:ef:a3:d1:c1:4d:ac:63:f1:03:f8:95:97:60:0c:
         ff:40:6b:4a:62:0a:c7:7b:c6:2e:f4:44:5d:39:c2:af:a0:e0:
         55:8e:3a:dd:39:71:58:f1:65:ca:15:4a:68:37:0f:16:cd:8f:
         9a:85:27:8b:38:fa:2a:1b:13:26:54:8c:78:7d:dc:44:71:1e:
         c0:34:26:a3:a7:58:bc:80:71:79:d1:43:e4:2e:2d:ca:c0:04:
         7e:d6:39:1c:a9:24:0d:6d:c8:a3:2c:91:7d:38:aa:66:ae:f9:
         f2:9e:e3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:08 2025 by rpki-client