Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
File:                     KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft (raw, json)
Hash identifier:          zSzQWpLQlDTQKJfMfJxH9J9KPHGHuF0mncpVIHt+Ti8=
Subject key identifier:   26:82:9A:7A:24:8B:5A:67:04:2C:68:6B:43:56:88:E7:6F:D8:8D:BC
Authority key identifier: 28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
Certificate issuer:       /CN=F36D5F5AAF/serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Certificate serial:       02B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
Manifest number:          02B2
Signing time:             Fri 31 Jan 2025 02:26:25 +0000
Manifest this update:     Fri 31 Jan 2025 02:26:25 +0000
Manifest next update:     Sun 02 Feb 2025 02:26:24 +0000
Files and hashes:         1: KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl (hash: 0ojqRh2p6fxXkRM6o/eF5q/sKEKL0qapXWBGgeIqA1g=)
                          2: EB9B09826BB811EF9E060C45762E951A.roa (hash: TsCk8u7XB+geHT4Y5bC5mwDhS0eEg1ylcghFgIq4kzg=)
                          3: 5332D8466BB811EF83EA32BF762E951A.roa (hash: jdYZ8eJRwn/ctfymhhHK/WcszGR953ues1rTTiUSUv8=)
                          4: 206EB5B06BB811EFA3A657BD762E951A.roa (hash: czmJFv34EAmQsXlSqGfVmb1GkexMrL0r0Kbk+I3civs=)
                          5: 615887E46BB911EF9B6D9D47762E951A.roa (hash: nmOMxJAKa4tO1J+gp8WTlOeuZ2TDN7o6wUH8R0eybX8=)
                          6: BBBE51246BB811EFB3C81443762E951A.roa (hash: B0lB1iW45wh5pgY+rDT6uVPryWOK54iCTkY5ERygXn8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5F5AAF/serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
        Validity
            Not Before: Jan 31 02:26:25 2025 GMT
            Not After : Feb  2 02:26:24 2025 GMT
        Subject: CN=679c34d1-ac16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:e1:73:96:d6:05:99:d8:36:1c:fb:fe:ac:
                    c0:64:a9:3b:75:42:f4:c0:fc:d3:9f:48:e2:b1:ff:
                    3b:f7:f9:dc:bc:ca:1c:4c:66:c7:65:96:f7:fe:3e:
                    5f:fb:36:5e:54:bc:bf:de:86:14:23:b5:67:74:fe:
                    ee:25:2a:b9:5b:3e:f3:e8:71:e1:b8:8c:89:dc:ec:
                    2b:68:53:25:fe:e1:66:9f:94:61:3d:c1:28:bd:29:
                    94:5f:f2:af:5a:23:2e:f2:48:30:45:26:b9:50:d5:
                    33:69:93:55:1f:c7:b3:84:9e:ff:2b:2f:a9:5f:fa:
                    b0:3b:7c:47:46:60:ac:6c:76:95:49:b0:7e:72:64:
                    65:62:5c:c0:00:56:53:20:a2:de:6d:4c:cc:38:40:
                    77:f5:c8:a3:26:71:d9:8a:0c:77:2b:d1:92:54:d4:
                    91:35:39:0f:c5:8f:84:cd:04:b9:9f:0f:ef:6d:54:
                    42:d4:08:07:2d:2a:db:8e:57:6b:19:88:27:87:28:
                    70:07:f5:37:d9:f3:68:b9:ee:f9:e5:91:cc:a5:c0:
                    1b:99:65:f5:1d:b4:d7:2e:bd:bb:e9:ae:23:3d:4e:
                    38:c5:cb:3b:1b:85:a3:2f:2b:c7:8c:fa:77:c5:56:
                    22:22:aa:89:55:3b:f7:63:99:65:12:9a:5f:5e:c1:
                    c0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:82:9A:7A:24:8B:5A:67:04:2C:68:6B:43:56:88:E7:6F:D8:8D:BC
            X509v3 Authority Key Identifier:
                keyid:28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:43:66:33:13:da:8c:06:0e:4e:75:29:d3:5e:f7:ca:fc:bf:
         a9:a0:48:06:22:87:bc:33:96:76:82:c8:97:8b:5d:2f:e7:f1:
         b9:77:23:48:35:cc:55:e8:01:99:ed:61:6e:3a:87:2a:cd:d8:
         e2:0a:2b:f7:40:c9:68:e9:4f:4c:10:28:71:e6:63:f5:fe:f6:
         1d:c1:ce:72:89:92:48:5c:e0:2c:92:45:c7:5b:a2:51:12:4e:
         4f:83:30:8b:c7:7c:fc:dd:11:29:5b:58:fb:da:7a:3e:80:fa:
         41:7d:01:c7:ea:18:ce:07:4f:c4:a1:aa:f1:7f:68:3e:21:e1:
         c8:b5:dd:da:8d:c4:d3:e9:b6:bc:af:af:06:7c:48:06:ae:bc:
         52:2e:d2:d6:d3:87:f1:35:bf:00:7e:ba:47:20:df:0d:b6:7a:
         e7:16:97:63:62:f6:5f:83:2d:e1:f9:16:80:8c:02:63:cc:82:
         05:23:b8:89:bd:32:92:4d:8a:2a:7c:d2:5b:3a:94:ff:1a:23:
         37:3e:c2:99:f3:0b:ed:24:58:6e:2a:75:40:70:25:15:be:91:
         d9:09:d8:08:e5:fa:f5:7a:87:fb:a6:15:1c:ec:b0:dd:46:1a:
         74:21:9a:67:bf:2e:8d:6b:8f:80:11:64:39:35:bc:bc:c2:6f:
         62:23:72:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----