Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
File:                     NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft (raw, json)
Hash identifier:          04WK4uwcMu9dQFfD5V+TK4ZaOuk0dIWjEru/9aX9hG8=
Subject key identifier:   A3:3D:17:70:41:E8:39:66:A2:7E:CE:B4:B1:63:6C:A1:A8:C5:D4:9B
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Certificate issuer:       /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial:       064B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
Manifest number:          0648
Signing time:             Fri 31 Jan 2025 01:31:59 +0000
Manifest this update:     Fri 31 Jan 2025 01:31:58 +0000
Manifest next update:     Sun 02 Feb 2025 01:31:58 +0000
Files and hashes:         1: NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl (hash: iu/AVGhECigrLdgjbPvUbQAq3sFRZc9MnqBXST19COk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
        Validity
            Not Before: Jan 31 01:31:58 2025 GMT
            Not After : Feb  2 01:31:58 2025 GMT
        Subject: CN=679c280f-6661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:5c:de:26:de:59:8e:4f:e9:7d:27:d5:ec:
                    7a:74:0d:a3:4a:5f:ae:f9:63:cc:51:73:d9:b6:48:
                    3a:a5:32:12:e4:33:fe:ef:1d:33:72:7f:f0:00:62:
                    e6:37:d9:04:86:bd:ab:c4:df:ac:8b:62:a0:d4:a9:
                    9e:b2:14:27:ba:5b:4c:d3:50:7e:cb:4b:da:21:a9:
                    ff:ce:d0:52:78:74:c0:a2:b0:d9:c0:55:33:43:9a:
                    e2:87:e8:02:9c:bf:c8:50:38:c6:13:50:97:d7:7a:
                    25:bc:c5:1d:95:8c:57:96:57:9c:3d:5b:88:26:1d:
                    5d:3e:41:0e:5a:6c:75:2e:49:70:5a:a9:fa:8f:a3:
                    df:33:3e:f8:e3:7f:ec:a5:8f:6e:ae:cb:e5:93:19:
                    d9:1d:b9:aa:ac:25:16:76:ff:5b:2c:96:37:9c:92:
                    97:fc:b3:4a:34:aa:51:c8:3d:f1:fd:03:b3:ae:09:
                    c0:27:37:30:2e:a3:c1:89:9b:8e:fd:61:44:a0:92:
                    3e:4b:1c:a0:72:2b:3d:e8:d8:87:3c:0f:b5:72:74:
                    4f:c9:dc:0b:ca:a8:a1:87:69:17:fd:00:89:54:7c:
                    61:de:47:57:5d:a3:e2:f6:06:67:03:57:56:92:6c:
                    56:aa:b3:f0:d6:13:90:4e:05:e0:6a:79:c9:84:89:
                    83:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3D:17:70:41:E8:39:66:A2:7E:CE:B4:B1:63:6C:A1:A8:C5:D4:9B
            X509v3 Authority Key Identifier:
                keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:e6:91:93:d8:61:2d:a9:0e:2f:52:0f:15:9f:6b:c5:d6:26:
         2a:1c:3d:8a:dd:cb:41:5c:3e:e4:98:df:66:d6:df:09:7e:16:
         6f:7c:e3:73:8d:ea:57:1c:8e:e9:12:0e:c9:5d:e6:d1:15:b8:
         07:9d:2b:c2:76:c5:b6:ae:41:cd:18:f4:db:f4:1c:60:dd:43:
         e7:48:c1:50:97:3b:ec:b3:a1:2b:4b:7e:5b:33:52:39:6d:1a:
         27:1f:ae:a1:4b:d3:07:98:42:e7:ac:cf:57:c1:4b:66:5b:0b:
         8e:15:a6:2e:18:46:40:59:67:05:a7:db:ea:54:31:bd:84:7e:
         26:81:75:d7:2c:a3:32:d8:17:f6:8f:81:3a:c8:47:73:ac:9c:
         08:fe:27:46:1e:e4:1a:62:a2:cb:49:cc:18:3b:75:7e:c0:25:
         dd:ca:64:a8:91:cd:c9:d0:92:4c:4b:7c:c1:06:59:45:48:f1:
         6b:b3:74:d0:cc:8b:23:d8:bd:ef:2c:45:c9:d2:f6:87:a2:0f:
         a7:7f:2e:61:eb:d2:50:a1:e2:35:4f:44:26:6e:55:8f:37:14:
         fa:d2:f4:74:a3:d6:0d:b1:4f:85:44:a5:e9:2c:c9:ed:2b:69:
         5c:9e:84:3b:2e:19:cc:95:81:f7:06:14:02:2c:d0:04:58:29:
         3c:ae:ef:e0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBkswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzZERDRBRjExMC8GA1UEBRMoMzZGNzU3MkEwMkU4M0YwN0JEODFCN0FFNDI2NjEz
NkVENTZGQTA1MDAeFw0yNTAxMzEwMTMxNThaFw0yNTAyMDIwMTMxNThaMBgxFjAU
BgNVBAMTDTY3OWMyODBmLTY2NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCMVzeJt5Zjk/pfSfV7Hp0DaNKX675Y8xRc9m2SDqlMhLkM/7vHTNyf/AA
YuY32QSGvavE36yLYqDUqZ6yFCe6W0zTUH7LS9ohqf/O0FJ4dMCisNnAVTNDmuKH
6AKcv8hQOMYTUJfXeiW8xR2VjFeWV5w9W4gmHV0+QQ5abHUuSXBaqfqPo98zPvjj
f+ylj26uy+WTGdkduaqsJRZ2/1ssljeckpf8s0o0qlHIPfH9A7OuCcAnNzAuo8GJ
m479YUSgkj5LHKByKz3o2Ic8D7VydE/J3AvKqKGHaRf9AIlUfGHeR1ddo+L2BmcD
V1aSbFaqs/DWE5BOBeBqecmEiYNjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUoz0X
cEHoOWaifs60sWNsoajF1JswHwYDVR0jBBgwFoAUNvdXKgLoPwe9gbeuQmYTbtVv
oFAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2REQ0L0EyRDFGNTE2MTI1ODExRUI5ODREQ0Y3OUY4QUVBMjI4L052ZFhL
Z0xvUHdlOWdiZXVRbVlUYnRWdm9GQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL052ZFhLZ0xvUHdlOWdiZXVRbVlUYnRWdm9GQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZERDQvQTJEMUY1MTYxMjU4MTFFQjk4NERDRjc5RjhB
RUEyMjgvTnZkWEtnTG9Qd2U5Z2JldVFtWVRidFZ2b0ZBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC85pGT2GEtqQ4vUg8Vn2vF1iYqHD2K
3ctBXD7kmN9m1t8JfhZvfONzjepXHI7pEg7JXebRFbgHnSvCdsW2rkHNGPTb9Bxg
3UPnSMFQlzvss6ErS35bM1I5bRonH66hS9MHmELnrM9XwUtmWwuOFaYuGEZAWWcF
p9vqVDG9hH4mgXXXLKMy2Bf2j4E6yEdzrJwI/idGHuQaYqLLScwYO3V+wCXdymSo
kc3J0JJMS3zBBllFSPFrs3TQzIsj2L3vLEXJ0vaHog+nfy5h69JQoeI1T0QmblWP
NxT60vR0o9YNsU+FRKXpLMntK2lcnoQ7LhnMlYH3BhQCLNAEWCk8ru/g
-----END CERTIFICATE-----
Generated at Sun May 11 11:32:01 2025 by rpki-client