Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
File:                     HScudZNWWso9tIbvvdAfGXRUyYM.mft (raw, json)
Hash identifier:          /ZhxIU8tlHUyfig3m3crwEnQnuNPYG7Q+1+ww96TDCk=
Subject key identifier:   CA:57:C6:03:52:AD:D2:FB:DB:36:55:13:93:45:0A:72:ED:6C:F5:EF
Authority key identifier: 1D:27:2E:75:93:56:5A:CA:3D:B4:86:EF:BD:D0:1F:19:74:54:C9:83
Certificate issuer:       /CN=F36C11E4AR/serialNumber=1D272E7593565ACA3DB486EFBDD01F197454C983
Certificate serial:       01CE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
Manifest number:          01CD
Signing time:             Fri 31 Jan 2025 02:44:06 +0000
Manifest this update:     Fri 31 Jan 2025 02:44:06 +0000
Manifest next update:     Sun 02 Feb 2025 02:44:06 +0000
Files and hashes:         1: HScudZNWWso9tIbvvdAfGXRUyYM.crl (hash: F+DLeBXObzY8uLVwmAVdf1Vi966TsqSGfkzAdiAHMLQ=)
                          2: DCA06BE083AE11EE861B88374AD9E6FC.roa (hash: 9vkj+XPNGesFwVW815jiX1HMcnZSf46ECccXSGVK764=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C11E4AR/serialNumber=1D272E7593565ACA3DB486EFBDD01F197454C983
        Validity
            Not Before: Jan 31 02:44:06 2025 GMT
            Not After : Feb  2 02:44:06 2025 GMT
        Subject: CN=679c38f6-43b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:56:1d:ee:ff:d5:f7:25:ab:b1:a6:bc:57:90:
                    f0:fc:65:28:9b:66:41:22:96:b6:e0:f1:8e:b6:05:
                    2d:e9:4c:e2:1d:21:b7:b0:3b:42:4c:74:4f:a5:61:
                    0d:b3:4a:47:47:64:86:e5:9e:5c:90:42:96:fd:b8:
                    46:72:b8:25:15:97:97:8a:73:47:e5:19:65:fa:9d:
                    4d:8f:4c:33:c9:1f:d6:6f:3b:e5:1e:5c:eb:c9:f1:
                    b3:b1:12:77:81:bb:79:d8:85:6a:1d:11:b9:a3:a6:
                    fe:68:e6:23:4f:d8:ed:89:28:9e:7d:c9:4e:7f:5b:
                    7a:b0:58:8b:d6:a8:e2:a7:32:38:1f:07:f8:e1:a2:
                    8a:5b:2f:61:ea:72:7e:7c:97:6e:b4:c7:c4:44:67:
                    b2:03:ee:7a:f5:ba:4f:08:ab:7f:03:ec:83:28:d5:
                    c5:7d:c2:38:e5:c2:dc:34:55:66:af:07:be:f9:69:
                    6f:f9:61:19:d6:e8:d4:b9:3d:92:ee:8d:af:65:79:
                    fb:89:e6:0c:79:62:c1:61:fa:92:d5:cc:1f:ba:46:
                    6a:b1:c7:6b:99:72:61:16:45:44:de:b3:12:a7:78:
                    0b:6c:d6:ee:81:6b:2f:c8:a0:6d:57:bf:30:ba:0d:
                    9b:69:05:5b:97:7e:bd:48:77:dd:f4:7e:46:4f:c1:
                    c7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:57:C6:03:52:AD:D2:FB:DB:36:55:13:93:45:0A:72:ED:6C:F5:EF
            X509v3 Authority Key Identifier:
                keyid:1D:27:2E:75:93:56:5A:CA:3D:B4:86:EF:BD:D0:1F:19:74:54:C9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b7:5a:81:4b:67:71:97:f9:89:cf:d1:b6:4c:29:40:7c:54:
         66:ec:a7:61:4e:4d:1a:af:a3:74:1e:12:58:fb:c4:20:ea:1a:
         0b:a3:53:68:8a:05:18:2a:41:41:cb:c8:e3:56:af:08:7b:3e:
         07:10:b4:0c:d5:50:5f:43:9b:71:a5:8f:1d:5f:cd:e8:2c:84:
         ab:af:e8:91:79:0a:2f:de:9b:77:58:9b:16:74:e5:6d:71:be:
         f4:76:c0:9f:9d:74:52:04:5d:92:b2:6c:ac:f4:a2:30:33:ec:
         33:6d:18:42:b2:25:c4:e5:8f:c3:f1:9f:c3:78:47:cb:9c:cc:
         7d:6f:df:ad:15:26:b2:85:7f:d4:fd:14:14:d5:fb:3a:e9:90:
         54:df:ff:2b:3e:5a:e2:d1:f5:6f:53:96:47:8c:0a:2a:5e:c2:
         0d:34:2d:ce:4d:c7:ea:1c:a0:5c:7f:e9:86:6f:1c:ed:4c:42:
         64:8c:5f:80:46:c4:77:a5:53:1a:bf:fd:8f:c5:d5:02:1c:00:
         7f:74:98:6d:88:9f:8a:ba:96:3b:50:83:18:14:de:e6:19:b5:
         94:92:5d:d6:36:3e:fa:c6:39:cd:5e:8b:83:b7:97:fa:42:48:
         db:b2:7d:6d:e3:93:a4:bd:21:8e:63:77:d5:41:62:65:12:4b:
         e9:5f:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:11:44 2025 by rpki-client