Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
File:                     xPPi6r3p45Aa27wxyfJTXN47HG8.mft (raw, json)
Hash identifier:          ENjb1H10n2frDUhmsOh5Ru8c5figZB3qFBgxMJlk5VY=
Subject key identifier:   DB:74:96:27:57:12:CE:C6:D0:93:E6:4F:F4:95:C9:FC:F5:DC:9C:F5
Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Certificate issuer:       /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Certificate serial:       0CAE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
Manifest number:          0CAE
Signing time:             Fri 31 Jan 2025 00:56:51 +0000
Manifest this update:     Fri 31 Jan 2025 00:56:50 +0000
Manifest next update:     Sun 02 Feb 2025 00:56:50 +0000
Files and hashes:         1: xPPi6r3p45Aa27wxyfJTXN47HG8.crl (hash: ZdWjbl5ywzXrAkiYqDFqV7Mh6Qj1JThGgn71JqBhBg8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3246 (0xcae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
        Validity
            Not Before: Jan 31 00:56:50 2025 GMT
            Not After : Feb  2 00:56:50 2025 GMT
        Subject: CN=679c1fd3-dfe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:eb:85:be:08:b3:b0:fd:6b:4c:f1:6e:64:87:
                    f9:f6:4a:b7:1e:6e:00:fc:3a:52:17:6f:c1:91:51:
                    7a:73:4d:fa:72:13:e4:1e:62:1b:96:4a:43:2a:99:
                    c0:c0:eb:9f:dd:1f:0a:9d:9f:ed:82:d6:09:98:13:
                    e0:28:17:cc:37:ec:14:92:73:c3:22:6c:30:82:1f:
                    c7:8c:7d:40:96:4a:d2:b9:ee:1d:8b:74:3f:f5:de:
                    c1:ec:1a:e5:14:ac:62:7f:fe:8c:f7:86:2c:1a:f4:
                    fb:d2:b6:27:ea:8b:0f:d4:e1:f4:32:bd:c4:1a:cc:
                    f5:7b:d3:b6:63:30:b1:7b:c2:31:92:8f:02:bc:60:
                    61:fd:49:b0:7a:8c:64:4d:58:cc:a2:d2:94:3e:c6:
                    78:3e:75:28:a7:0f:b5:55:85:7f:9a:74:81:d5:d8:
                    67:79:0a:9e:d6:50:33:95:34:db:51:1f:77:18:7d:
                    ad:89:6d:c1:87:d5:ea:78:bc:02:cd:e8:ce:8a:d1:
                    cf:15:37:50:09:d2:76:40:ab:af:fe:ce:d6:57:e4:
                    12:35:6f:b7:ca:85:1d:38:4c:f0:0d:53:19:7e:42:
                    d3:07:79:1a:82:f5:08:73:0f:01:75:48:d9:d3:76:
                    09:ef:f4:1a:b2:d4:79:02:a7:8a:3f:42:f4:10:f3:
                    a2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:74:96:27:57:12:CE:C6:D0:93:E6:4F:F4:95:C9:FC:F5:DC:9C:F5
            X509v3 Authority Key Identifier:
                keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:aa:19:54:c3:11:51:29:f4:06:83:fe:ac:d8:71:6e:47:da:
         d9:8c:1b:18:d3:57:8c:a7:a8:63:65:6e:70:5b:00:5a:73:9c:
         92:15:fd:95:a8:a9:e7:85:28:07:98:46:26:ea:1b:fe:1a:1f:
         8f:06:a0:45:a8:8e:87:02:8c:a5:89:da:83:8d:d4:40:ce:c2:
         57:09:01:22:21:45:3b:8e:8f:53:52:a0:29:93:38:bf:32:e3:
         71:e3:86:83:74:fe:22:f8:2b:09:ba:6a:2c:ce:fb:26:bc:ed:
         01:d0:99:37:11:c2:67:2a:13:f7:13:28:8e:f9:75:3e:d8:52:
         31:fa:b9:d6:f8:f0:73:08:f2:b5:c1:cb:fe:39:df:55:a3:d2:
         db:39:40:40:a8:e3:51:94:84:a3:7d:65:eb:a6:98:41:10:a7:
         04:76:99:f1:51:81:20:c9:4a:61:58:53:d9:4f:a1:74:01:b8:
         a9:68:7d:86:53:1b:e0:39:1f:e4:78:3e:ae:a0:4f:77:99:0a:
         63:40:f0:27:ed:a3:6a:ae:89:70:b9:72:62:dc:58:f7:7d:1c:
         b5:7d:89:90:27:f1:50:ef:1d:62:53:01:16:fd:fe:88:09:6f:
         a7:d8:1d:63:5d:66:c5:1e:23:e9:31:47:3e:66:43:97:a1:11:
         6c:ee:20:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----