Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
File:                     0L5n0EWzPwWlhxUQOZ5wnJj2130.mft (raw, json)
Hash identifier:          xMjFAuhIfE/wwCowYxfaodTS/xHAEccwmiFUBFgiG1s=
Subject key identifier:   E6:04:CE:F6:FB:96:12:33:6A:B1:57:A5:01:FE:C2:7D:9E:EF:1A:3A
Authority key identifier: D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D
Certificate issuer:       /CN=F36B70EFAF/serialNumber=D0BE67D045B33F05A5871510399E709C98F6D77D
Certificate serial:       074D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
Manifest number:          0743
Signing time:             Fri 31 Jan 2025 01:24:33 +0000
Manifest this update:     Fri 31 Jan 2025 01:24:32 +0000
Manifest next update:     Sun 02 Feb 2025 01:24:32 +0000
Files and hashes:         1: 0L5n0EWzPwWlhxUQOZ5wnJj2130.crl (hash: 3a39h/vESpjeRVf26JFLI+U5OGmXbyAD1Jl4gM+uhCk=)
                          2: 57D99C84A70B11EFAB610873762E951A.roa (hash: VESGhOcQ1eFdhjYgqNLQ5y+9WwlZ95aNn2gOWKom4PM=)
                          3: C67DA3FA616011EB8E25557BF8AEA228.roa (hash: lOtZThOqYZOrSs5z/Nz31HkfsJ0LpZIFin3wqJk1shU=)
                          4: 8D3DC440A70B11EF86ACE974762E951A.roa (hash: Py/R2WBbifPX4/K3F5F8kgPQCqbFBhwEISTO2st5s50=)
                          5: B217A2825A6611EAB1529D4BF8AEA228.roa (hash: vzveyzJlprOUydarhesuSRbAJ+Ui96qsAven0yoHfa4=)
                          6: 70076FD4A70B11EF8D62DB74762E951A.roa (hash: LcMYj3ITAdCe3LR23bnkb1n/C+36Ft00nt7b6GzWAhM=)
                          7: 3E87BB4E5A6711EA9C48384CF8AEA228.roa (hash: nvSN5JRFyEeP9hkBJ/sGlztv5rQhKrD7IbfV6O2PjxE=)
                          8: F7B6336C994411EBA68CD72BF8AEA228.roa (hash: tviT3PsrUHAG/3p3zGi9oQp3+ts3yl4rcv4DkfQceXI=)
                          9: DDE70E525A6611EAB8C0D34BF8AEA228.roa (hash: CTnWbvN7o+FlfyXlLcFUADgf4PWO/HvRao3/o/WHW3A=)
                          10: 1BBD15F05A6711EA9B33194CF8AEA228.roa (hash: 60FP7Xp6LdQXkJBiXGYYWOcK5OJjg1Z5omL1TTkOPXc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B70EFAF/serialNumber=D0BE67D045B33F05A5871510399E709C98F6D77D
        Validity
            Not Before: Jan 31 01:24:32 2025 GMT
            Not After : Feb  2 01:24:32 2025 GMT
        Subject: CN=679c2650-e14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:89:bd:24:95:eb:44:de:b5:6b:47:d9:ea:9d:
                    97:70:f7:2e:85:a7:ac:1b:0e:76:58:2c:30:92:3b:
                    0d:c5:42:f4:f9:2e:49:9a:c4:47:7d:7d:3c:21:4c:
                    e0:28:f4:3a:b5:32:32:5d:58:8f:8d:f8:bd:10:8d:
                    87:2c:15:64:09:9c:b3:91:d4:3c:d4:45:15:ba:75:
                    bf:9f:a7:1d:d2:d9:37:f5:10:18:59:d2:9e:fa:82:
                    ef:d5:08:34:28:19:fc:fc:1e:21:a3:fd:66:5d:a6:
                    aa:f5:5d:95:2e:67:41:e3:83:09:47:cc:d5:91:f6:
                    0e:ed:85:ff:12:3a:df:26:ff:35:e8:ae:7a:92:cf:
                    7a:c5:7c:f2:f4:dd:f7:67:4d:18:f6:47:54:fa:e3:
                    dd:07:7a:3e:29:7c:dc:4e:f2:f0:64:27:38:5a:5e:
                    5e:76:a4:cd:b2:02:2e:9a:0b:44:9d:52:08:59:3f:
                    a3:b7:c0:e0:5c:ff:06:98:00:ca:64:a6:d5:df:d5:
                    98:9b:ca:b1:4d:3e:dd:6b:52:e0:90:6b:21:3d:6c:
                    69:b2:87:ed:e4:ba:94:4f:df:f8:1d:eb:0f:62:d0:
                    1f:ee:76:00:5e:6a:0d:53:e1:9f:a2:f1:fd:fb:47:
                    3e:87:78:de:3a:93:6e:69:f1:9b:54:26:ff:e5:d9:
                    28:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:04:CE:F6:FB:96:12:33:6A:B1:57:A5:01:FE:C2:7D:9E:EF:1A:3A
            X509v3 Authority Key Identifier:
                keyid:D0:BE:67:D0:45:B3:3F:05:A5:87:15:10:39:9E:70:9C:98:F6:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0L5n0EWzPwWlhxUQOZ5wnJj2130.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B70EF/8F798B325A6611EABB216F4BF8AEA228/0L5n0EWzPwWlhxUQOZ5wnJj2130.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:66:2c:63:8c:9c:ef:9d:4f:b3:10:bc:16:03:26:4a:53:31:
         85:29:b0:39:32:61:dc:93:c0:1d:03:b9:8b:62:4f:01:59:74:
         99:39:e3:2e:16:df:77:73:eb:98:e0:f6:6b:04:59:48:bd:c7:
         18:9e:c6:dc:b1:26:f9:52:73:91:54:fd:7a:28:97:7c:d5:0a:
         94:6f:61:29:42:2e:5e:3e:a5:0a:71:2e:c0:ef:75:24:d3:d5:
         11:dc:cf:59:90:46:5a:5b:95:da:16:94:ab:77:c5:4f:ed:18:
         8c:a0:39:75:7b:a8:b9:a3:b1:bc:36:21:d8:76:8b:8e:90:b6:
         33:d0:df:0f:66:77:6f:74:a9:7e:76:d8:14:5c:d0:00:47:4e:
         4f:47:79:c4:87:7d:62:f6:95:af:55:be:3d:f9:2d:66:16:d7:
         37:f0:32:9e:21:fc:35:0a:b2:f6:cc:99:90:de:76:89:c7:24:
         97:c9:83:18:34:c8:de:f3:2b:74:cb:3f:fe:a3:ca:d4:4d:bd:
         a0:28:1c:25:b5:c4:6b:1f:f0:03:19:4f:5c:9b:18:01:d9:44:
         e0:fa:38:fc:65:60:b5:7a:c4:96:4e:ce:3f:11:91:cf:33:f2:
         00:cf:86:e2:83:d4:25:38:fc:df:ff:29:7b:76:df:9c:ff:bc:
         c2:99:d6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:03:22 2025 by rpki-client