Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
File:                     GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft (raw, json)
Hash identifier:          eMTXel4unOB+Al+tMjPBvDjaJVFabQU2P9w6LL49KnY=
Subject key identifier:   B2:D7:74:69:AF:4A:18:1A:FA:4B:55:75:A5:60:55:96:40:6F:D1:FE
Authority key identifier: 18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F
Certificate issuer:       /CN=F36CEBD2AF/serialNumber=184413EAD0ECC5BE11C711B3E6DFE4B4DCC8D84F
Certificate serial:       01D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
Manifest number:          01CB
Signing time:             Fri 31 Jan 2025 02:45:20 +0000
Manifest this update:     Fri 31 Jan 2025 02:45:19 +0000
Manifest next update:     Sun 02 Feb 2025 02:45:19 +0000
Files and hashes:         1: GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl (hash: doXeYfTjU9ABIZc07NAM8WFgjpt1yfQemTvOrpc3pNU=)
                          2: 03A4AAAE8A9311EE88C966154AD9E6FC.roa (hash: UhEZBD7+ZxP9l8n+vkehEuSNBmWkzQmQERKAHbI7sAk=)
                          3: 3B55469ADD5111EF99B2679F762E951A.roa (hash: 4buSDwLbI/rqa8c0nC/9yYisirrzvtwPW6bajd5/Dps=)
                          4: 399EC6ACDD5E11EF94E31475762E951A.roa (hash: gAeSPAZ0k2oD4rBDBXtSvp2FI22GocUMJrD0WxJ/to4=)
                          5: 0FF374D2987311EEA3CBC46ED25BE465.roa (hash: BHH7zUUW9dkSFd6Vm0HYgvG7mdDbrxJsOem3Aruk+8Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CEBD2AF/serialNumber=184413EAD0ECC5BE11C711B3E6DFE4B4DCC8D84F
        Validity
            Not Before: Jan 31 02:45:19 2025 GMT
            Not After : Feb  2 02:45:19 2025 GMT
        Subject: CN=679c3940-0503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:f0:a6:14:d8:db:95:b7:cb:57:59:06:6e:
                    17:be:32:73:21:17:d3:f1:fd:df:e4:a5:33:a4:4a:
                    75:c4:03:15:a8:b3:00:c1:24:7f:07:8f:2d:40:28:
                    95:97:b5:9f:82:f0:33:77:9d:b9:f5:e7:29:c6:cf:
                    17:2c:c7:01:5b:f8:a4:f8:7a:5c:7b:5d:5d:23:25:
                    d0:1c:ef:84:03:e8:80:a9:ff:ad:b5:e1:41:1a:1e:
                    63:be:68:69:1e:7b:4c:cd:30:a9:fc:24:ba:4a:10:
                    ae:09:c0:4b:89:53:f3:42:0c:7c:c0:d0:c2:7a:39:
                    2a:7f:0f:fa:a0:88:04:27:c8:62:66:cb:0a:15:d4:
                    26:fa:52:4e:51:b1:b6:a8:41:1a:e0:de:3b:07:05:
                    b4:a2:aa:72:0e:60:2d:8f:48:bf:0f:ea:6c:2e:28:
                    9b:2b:6b:5a:c2:16:02:49:a4:39:18:52:c3:b5:c1:
                    5f:95:2e:ec:28:47:81:5e:d2:ae:df:42:3d:9f:5e:
                    b4:8c:1a:dd:41:9c:d6:72:82:fe:3c:d7:80:83:6b:
                    c0:83:d7:47:7f:ca:f5:db:17:3c:2a:ff:55:0a:62:
                    85:97:e4:13:78:ba:4b:db:e2:8c:7e:ae:82:ba:26:
                    33:b0:60:9a:82:a6:f3:93:86:56:49:51:71:72:01:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D7:74:69:AF:4A:18:1A:FA:4B:55:75:A5:60:55:96:40:6F:D1:FE
            X509v3 Authority Key Identifier:
                keyid:18:44:13:EA:D0:EC:C5:BE:11:C7:11:B3:E6:DF:E4:B4:DC:C8:D8:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GEQT6tDsxb4RxxGz5t_ktNzI2E8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEBD2/49CBE9BC8A9211EE9ECE03134AD9E6FC/GEQT6tDsxb4RxxGz5t_ktNzI2E8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:67:c7:ce:17:74:d3:b5:ff:85:56:57:e0:36:6b:cb:19:
         77:60:61:3c:41:6d:cb:12:df:62:67:8b:23:ba:61:7c:54:6a:
         43:dc:6a:ac:c4:75:72:f6:19:63:67:23:bc:d5:c1:92:66:d0:
         e6:f2:db:4b:ba:c3:56:cf:61:aa:e0:86:61:09:f6:03:3a:d1:
         4f:72:70:14:80:9c:d6:4e:93:68:95:1a:d5:5d:d1:c3:71:39:
         07:e8:4f:9a:4e:4c:b8:46:1e:9c:51:ee:03:81:fe:92:ba:a4:
         1a:87:a4:70:84:c3:d1:e5:c7:dc:e3:03:39:80:57:4c:87:fe:
         43:d9:cf:de:81:f7:6e:aa:ee:41:d4:78:31:b9:cd:25:2d:53:
         95:4c:1c:84:ea:86:70:f4:f9:94:ec:5e:ab:41:cc:8e:e6:f8:
         5c:fe:73:bd:18:8a:eb:64:ee:25:83:5e:98:9c:2a:50:1d:37:
         bf:a4:e6:5d:0f:6a:e1:5b:f3:c4:5f:41:54:c8:c2:48:39:70:
         c2:0a:da:e0:21:35:77:50:69:0a:59:7a:a7:4f:d5:f7:d0:80:
         de:08:bd:9f:4b:b2:0a:dd:c0:7a:e9:f3:5e:2f:79:c8:28:3a:
         70:6a:e5:dd:f5:bb:a5:c9:70:f3:26:bf:6e:1f:bd:af:18:fb:
         5d:ee:bf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----