Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
File:                     6Z6B_I_kh8L4TcmvrcH827QCmvk.mft (raw, json)
Hash identifier:          sqKgJMrGrxi4UH6svxj/J+Edn6PipsMybNNOEc09rKs=
Subject key identifier:   4B:EE:2D:A2:DB:EE:FD:95:8D:F6:68:29:30:E4:09:07:A8:D1:3E:57
Authority key identifier: E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
Certificate issuer:       /CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Certificate serial:       0278
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
Manifest number:          0271
Signing time:             Fri 31 Jan 2025 02:30:19 +0000
Manifest this update:     Fri 31 Jan 2025 02:30:18 +0000
Manifest next update:     Sun 02 Feb 2025 02:30:18 +0000
Files and hashes:         1: 6Z6B_I_kh8L4TcmvrcH827QCmvk.crl (hash: HNI89vT6Fpt3AWxv6NUxVByrOHQO2wrFrTz43sw3qN8=)
                          2: DFF4540A0AAA11EE89915D5A4AD9E6FC.roa (hash: cP9R2Qrl9S1ixebQNGm1g6k1ly30xv1Wd7bXVEu0duY=)
                          3: A20A504A0AAA11EE812F6E594AD9E6FC.roa (hash: G7RsbPwM9vl05EvPa/pSvH1sxjZhrGpa0npEjP9lu34=)
                          4: 03B9356C0AAC11EE9989895D4AD9E6FC.roa (hash: GvzLodpAjODjSMFS5AA5iBQ1yRBDjLhq9pR5HhpCZGw=)
                          5: 20911B1A0AAB11EE98E6EE5A4AD9E6FC.roa (hash: 3LYqrUAm+YgDBSHjb0aEV7V78Rp6eI1SjXprGGtvbe8=)
                          6: 57F065AC0AAB11EE93858A5B4AD9E6FC.roa (hash: 3dH4FpXYKrw/ZxlMDdoPn1emT4uwkIhadIqln0a8STQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
        Validity
            Not Before: Jan 31 02:30:18 2025 GMT
            Not After : Feb  2 02:30:18 2025 GMT
        Subject: CN=679c35bb-3deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:23:11:2d:bf:42:25:44:9d:62:9c:7a:10:
                    29:96:31:2d:9c:c4:18:b4:d2:99:f7:02:84:b7:85:
                    83:a3:53:93:3a:96:70:0c:a2:ee:69:bc:2f:78:e4:
                    0e:3c:a3:e5:72:e1:bf:8a:6a:b7:b8:b9:96:a7:3c:
                    44:bd:29:08:80:e0:f6:f3:f2:b0:7c:63:21:01:b6:
                    cd:ff:a6:2d:b4:29:14:53:b3:ea:10:d9:c0:13:24:
                    98:6c:3b:b6:41:52:ac:41:6c:db:97:35:7c:52:0b:
                    5a:09:26:7e:34:41:e7:e2:f0:b9:f7:b5:3f:8f:8d:
                    aa:c7:f6:29:13:2b:e0:7e:8b:fc:e8:d4:44:a2:2e:
                    01:56:03:6c:ea:4c:58:11:c9:30:49:5c:46:68:b2:
                    c9:81:5c:ee:92:54:b8:78:d1:86:a7:d5:ec:b7:74:
                    c6:00:61:3c:b4:e6:b1:93:84:c7:29:1d:7c:fb:50:
                    0d:a5:a9:b0:90:6d:12:f2:52:bb:30:7c:51:04:29:
                    7d:e8:6b:5e:d8:c1:df:b9:19:0d:df:0d:60:7d:99:
                    d2:31:ce:08:22:dd:b4:5d:83:35:8f:f5:35:54:3a:
                    65:41:82:a3:f7:77:38:2d:c9:49:ed:4f:47:17:35:
                    4d:83:33:6a:19:31:9d:59:65:a1:cb:b2:58:ec:a5:
                    0f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EE:2D:A2:DB:EE:FD:95:8D:F6:68:29:30:E4:09:07:A8:D1:3E:57
            X509v3 Authority Key Identifier:
                keyid:E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f4:89:d1:8b:af:33:ad:49:df:2e:46:c4:5b:c3:07:96:ab:
         9e:2c:83:b8:8d:aa:a3:4a:49:04:df:1c:7a:cf:f7:4e:ff:c0:
         c8:46:53:80:e1:4d:b3:6b:48:79:fb:fb:b2:91:99:21:d5:25:
         89:db:0b:ef:eb:c8:b0:8b:1f:2c:bd:2e:1d:c9:a7:76:43:1c:
         a3:0c:4f:b3:8f:3c:fb:2f:5d:92:a0:fa:84:fd:d8:d8:d3:50:
         2c:e7:9d:77:e5:1c:e2:0f:b4:3f:8a:92:6e:e7:aa:49:6c:b2:
         37:20:8b:f9:8e:a3:9e:8d:d9:c1:3c:08:1d:85:c7:81:ef:24:
         d9:b0:ce:58:63:46:4e:a8:da:f7:fc:81:01:e4:25:27:c2:d7:
         63:34:dd:df:8b:e4:99:57:e9:69:04:6f:75:22:f5:81:5b:f5:
         6a:58:85:2c:39:39:c7:37:09:ce:80:78:28:ff:99:c3:2b:7e:
         50:d7:47:fa:99:28:a0:d3:4d:98:ce:72:89:a6:f5:3b:f7:1c:
         83:13:fe:9a:48:7c:8f:5d:66:87:b1:f2:fb:6a:ee:e9:12:bc:
         95:f8:9f:69:f2:59:01:b6:d0:12:f1:e7:fe:78:4b:27:a9:ce:
         93:52:72:a1:b7:b3:5a:74:c5:e8:16:70:50:c0:e9:b4:27:05:
         fe:36:8e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:38:05 2025 by rpki-client