Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
File:                     44k33jd6GDgiMIvjmfDhbdIecw0.mft (raw, json)
Hash identifier:          lXUMUOlSRqNbzof8g8e5aELCn9FlNUUagsbCSkYgn08=
Subject key identifier:   0A:6A:37:1B:0A:BE:17:0B:11:C8:2B:54:7C:CD:CD:2C:96:F9:87:EF
Authority key identifier: E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D
Certificate issuer:       /CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
Certificate serial:       A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
Manifest number:          9F
Signing time:             Fri 31 Jan 2025 03:08:03 +0000
Manifest this update:     Fri 31 Jan 2025 03:08:03 +0000
Manifest next update:     Sun 02 Feb 2025 03:08:03 +0000
Files and hashes:         1: 44k33jd6GDgiMIvjmfDhbdIecw0.crl (hash: Bc8oIfzT4EoWAKSXfYwsd7Rk9BXZvKgmu9IxpIK+6B0=)
                          2: 760E47CE8E4011EF84E06A96762E951A.roa (hash: 5247yr5gr3JcfvGZJNIVOcPn9L/w4Rzz/cS7nF3BEWM=)
                          3: D8F28FD87BEB11EFB2CEC399762E951A.roa (hash: IrfNf4mCYxKNNTtpjGrbLvkdxYvkdOQJJFgReOprMII=)
                          4: 9C4226C07BEB11EF8997B697762E951A.roa (hash: x6+OaK81Zqdqy3X1fPmupPUQGj9yEz5ZKOjSRkN7RGs=)
                          5: BFB4BD048E3B11EFBE6ED67A762E951A.roa (hash: 29PbBEEmS4+Pdgh0yo4HDRkml04+8Fig9BDKrXuYghg=)
                          6: 8F299E2C7BEC11EFA9BB029E762E951A.roa (hash: tfHTBK6vnY+YBhFxpvxT4QzHXlDBW8NE/EQetOrIEuQ=)
                          7: DE43A2EE73F611EFB5EFE385762E951A.roa (hash: Sd1KUMUsJPhhYi5uJUrLGrb5HVAMCLRPQBpoUaX9878=)
                          8: E0657DEC73F411EF8A821C7A762E951A.roa (hash: N21MoWcROs7ufQGekwsiGnUVwD+p9mSwZWAPbhoKswc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B35B7AF/serialNumber=E38937DE377A183822308BE399F0E16DD21E730D
        Validity
            Not Before: Jan 31 03:08:03 2025 GMT
            Not After : Feb  2 03:08:03 2025 GMT
        Subject: CN=679c3e93-3a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:aa:41:4c:d3:de:40:c7:b0:c6:0f:e8:b5:
                    ca:e4:9b:6b:6a:91:aa:e3:e3:59:2e:3f:d2:69:59:
                    e9:63:22:3f:14:f5:73:a9:5b:e8:9c:14:cc:20:27:
                    27:46:c6:d8:64:31:3a:46:0c:b9:bf:45:d3:55:50:
                    f3:1e:68:6d:5b:55:99:49:03:81:5c:22:36:6e:be:
                    09:ab:3e:20:d6:cc:1c:bc:b7:e1:f5:8a:e9:29:59:
                    b0:0d:2a:9d:07:e2:08:18:96:fa:9a:2d:95:ca:5f:
                    4d:6d:73:b6:63:58:59:04:d1:39:16:da:79:01:d6:
                    58:0e:2f:55:23:35:fe:e4:c0:b0:38:fd:ff:48:bf:
                    b2:2a:0e:0b:3d:89:fb:ed:6a:ce:3b:30:2a:b5:26:
                    03:b1:94:93:84:d5:79:f6:d8:a7:60:22:73:4f:1e:
                    c9:0a:43:fb:69:10:2e:85:20:1c:bb:be:8f:43:0b:
                    1f:d1:7f:46:b8:45:ce:35:be:dc:0d:a7:fa:cb:9b:
                    39:20:3a:8f:65:79:5d:74:7b:31:45:b3:fc:12:b4:
                    ea:24:08:33:73:6c:7d:4a:8f:23:ac:44:0d:9c:68:
                    cb:d9:12:9d:28:44:e6:53:b3:b4:59:a3:f4:9d:a2:
                    62:1d:fa:ed:0c:a2:5e:09:f8:b0:4f:d8:89:24:cc:
                    21:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6A:37:1B:0A:BE:17:0B:11:C8:2B:54:7C:CD:CD:2C:96:F9:87:EF
            X509v3 Authority Key Identifier:
                keyid:E3:89:37:DE:37:7A:18:38:22:30:8B:E3:99:F0:E1:6D:D2:1E:73:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/44k33jd6GDgiMIvjmfDhbdIecw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B35B7/86A7F99073F111EF93569567762E951A/44k33jd6GDgiMIvjmfDhbdIecw0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:d8:64:66:2d:9f:91:ba:d7:5c:b3:9a:10:35:5f:b8:c4:ee:
         41:62:d2:d5:7e:61:d9:cf:b1:67:49:ec:67:20:9e:10:8d:23:
         bf:0f:bb:e7:70:df:7d:e8:fb:8c:1a:c4:4f:ee:21:cb:37:8e:
         28:d6:8e:92:b7:40:07:fc:83:f0:34:7b:73:25:a3:a4:af:11:
         ae:4a:94:de:4f:9c:5e:98:00:48:b3:f5:0e:d2:ab:29:0c:d4:
         23:28:a7:b2:fc:57:52:33:13:f5:e0:b3:3a:17:70:5b:95:76:
         51:40:a6:a2:d1:42:2d:a7:91:d1:8f:09:ef:ad:3a:20:89:24:
         22:48:fa:4a:a3:df:63:0e:a4:f7:dd:86:c1:a5:dd:07:64:f2:
         0e:43:1f:a7:ac:e9:79:23:d6:4c:e3:08:f4:26:f2:4a:5f:36:
         e7:16:e9:ad:23:b0:5e:2b:a0:4a:e7:90:24:91:a3:45:09:9d:
         9d:4e:2a:52:af:e1:78:91:f3:f2:93:b2:91:48:00:2c:54:13:
         09:2c:e6:ce:e0:b2:e4:f9:f5:07:c2:9d:4c:11:06:0f:02:d9:
         0d:2e:6e:9b:1d:f9:78:a7:90:50:1f:c0:ec:e5:9a:9f:dd:0a:
         e8:03:c1:46:fd:be:c9:cb:30:72:bb:5c:79:eb:83:e4:5b:63:
         a0:b1:9a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:57:42 2025 by rpki-client