Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
File:                     avc50Bd3BoQ35SESTux6ZtiYCW8.mft (raw, json)
Hash identifier:          D2aWX70xx6E7/SqkKFuWBmrzIUoGt9HfKRMqoNhWT74=
Subject key identifier:   CE:E7:2D:8B:CD:0F:53:81:BE:F0:1A:FB:62:27:3E:C3:96:8C:E5:BD
Authority key identifier: 6A:F7:39:D0:17:77:06:84:37:E5:21:12:4E:EC:7A:66:D8:98:09:6F
Certificate issuer:       /CN=F36BA57FAF/serialNumber=6AF739D01777068437E521124EEC7A66D898096F
Certificate serial:       7D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/avc50Bd3BoQ35SESTux6ZtiYCW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
Manifest number:          7C
Signing time:             Fri 31 Jan 2025 03:10:56 +0000
Manifest this update:     Fri 31 Jan 2025 03:10:56 +0000
Manifest next update:     Sun 02 Feb 2025 03:10:56 +0000
Files and hashes:         1: avc50Bd3BoQ35SESTux6ZtiYCW8.crl (hash: dgr4dRutd+msVE6H2c5CaNs81NTKutb+KxqRnSvdAJs=)
                          2: 9CBCEE06857C11EF9C88A445762E951A.roa (hash: LUsLFkZOS70t3FhGjAlxHf+8d7Gfxjit3yut3LdzsB0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA57FAF/serialNumber=6AF739D01777068437E521124EEC7A66D898096F
        Validity
            Not Before: Jan 31 03:10:56 2025 GMT
            Not After : Feb  2 03:10:56 2025 GMT
        Subject: CN=679c3f40-dd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:65:ae:6b:f2:3d:f6:e3:f1:b0:18:ca:65:77:
                    f1:4f:69:7a:0f:64:e2:9e:72:d6:d4:9f:8e:a3:2f:
                    38:85:89:7f:19:74:5d:9f:87:20:f4:98:bb:b0:4c:
                    9d:6d:6c:14:1b:80:63:1f:77:d0:ed:6b:6a:b7:57:
                    8b:f7:cf:ce:7f:a3:ed:5f:1a:3b:73:a9:72:51:3b:
                    71:54:3c:f0:74:19:81:83:94:35:58:d3:ff:fc:9d:
                    c6:80:43:ac:ea:ad:c1:7a:de:ef:e0:65:34:c4:f6:
                    9d:9d:72:82:45:75:2a:cc:0f:74:d1:c6:ef:b1:f7:
                    11:2c:7a:c0:a7:96:0c:e9:62:22:3d:62:32:2f:92:
                    aa:b2:6b:47:52:5b:20:9b:a6:c6:11:1c:c4:91:21:
                    7c:13:85:5e:fd:4b:d0:26:e7:55:a4:2f:35:e5:f5:
                    33:42:ec:20:8f:51:f6:f9:f1:9b:57:23:02:12:e5:
                    ff:6b:23:14:78:c0:54:e1:af:2a:af:c3:11:7c:31:
                    e8:65:6e:11:21:bf:bc:bf:9e:6f:d1:c4:59:3a:1d:
                    79:ca:a6:42:85:4d:7b:a0:62:b1:99:58:a0:a3:18:
                    af:7c:cb:28:95:30:ce:db:15:74:a0:02:cf:0d:b1:
                    08:68:31:04:a8:d2:8b:f7:bf:91:a9:f1:02:98:54:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E7:2D:8B:CD:0F:53:81:BE:F0:1A:FB:62:27:3E:C3:96:8C:E5:BD
            X509v3 Authority Key Identifier:
                keyid:6A:F7:39:D0:17:77:06:84:37:E5:21:12:4E:EC:7A:66:D8:98:09:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/avc50Bd3BoQ35SESTux6ZtiYCW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:fa:79:03:5a:6b:5f:fb:e9:78:77:90:d2:59:cb:ab:e0:b3:
         ea:13:f2:1b:f2:1a:ba:fc:b6:28:a8:4c:81:76:35:0c:1e:96:
         a6:8f:75:05:d1:68:53:13:e5:f9:9a:6f:d7:c7:a9:54:01:9f:
         bb:7c:6d:a1:48:59:5e:01:55:33:45:f2:3b:35:04:ce:27:4c:
         e8:92:42:3a:db:cb:fd:63:b8:77:bd:39:26:27:2b:71:23:6e:
         55:21:28:0d:67:57:2c:6d:03:63:ab:41:23:6b:d8:dc:31:2a:
         de:da:cb:c3:ec:e8:42:27:31:90:94:b8:28:b8:4e:df:e8:da:
         ef:33:3c:2b:c9:31:42:e0:35:d8:da:12:54:6c:3b:4c:35:af:
         fc:ef:4f:41:f8:3a:71:3f:93:88:03:83:eb:81:02:df:77:1a:
         6e:63:92:04:8b:04:f6:b8:93:53:c9:2b:e8:c5:d6:8b:9a:d5:
         16:a8:14:82:7a:4f:c7:b5:b0:f6:89:1f:63:9f:f4:e5:cc:09:
         d0:7a:8d:3a:ee:9e:4a:14:33:50:fd:27:d1:5d:95:f9:2e:98:
         26:0e:f8:a2:91:c0:17:62:26:55:26:41:49:91:8f:e7:69:8c:
         ab:7e:1d:5e:28:05:96:8c:40:57:15:6c:fe:b1:0e:0e:1f:16:
         2c:3a:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----