Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File:                     rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier:          Ucsd3PbRDwwWKHrijI7+0K4jTdnn8l3ej/ndkH1GsTY=
Subject key identifier:   6A:C9:E9:E5:1A:1A:90:30:20:BA:6B:4E:A2:8D:8C:DD:F8:1A:BB:55
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer:       /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial:       0852
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number:          0851
Signing time:             Fri 31 Jan 2025 01:12:58 +0000
Manifest this update:     Fri 31 Jan 2025 01:12:58 +0000
Manifest next update:     Sun 02 Feb 2025 01:12:58 +0000
Files and hashes:         1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: nMOGpK30B2DnUbKNCfbj/H7UsN2ROF1ebdiXTvWWCr0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2130 (0x852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
        Validity
            Not Before: Jan 31 01:12:58 2025 GMT
            Not After : Feb  2 01:12:58 2025 GMT
        Subject: CN=679c239a-1346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:68:91:ef:74:27:91:50:61:86:5a:3b:69:72:
                    2a:60:2d:99:85:24:25:73:c7:1e:5d:11:e2:74:97:
                    fe:ef:1c:a5:24:4a:10:c2:c9:e9:82:aa:c3:cf:04:
                    41:21:1f:9c:32:5e:29:e6:ce:00:9f:8f:0a:3f:24:
                    b1:4b:8d:e0:46:97:7e:e3:2a:96:e8:3b:b2:49:e8:
                    56:25:26:dd:d9:e5:08:c5:91:78:e8:e6:48:91:23:
                    e1:92:94:06:01:a3:37:52:fb:02:01:d9:e0:9e:2b:
                    f2:62:67:a7:09:17:74:01:96:c7:35:61:12:98:53:
                    57:4e:43:67:7c:8f:12:ae:dc:53:d4:3f:9a:16:02:
                    c1:82:ec:0d:74:c9:39:51:6d:b3:2d:b8:c9:8f:1f:
                    fd:a9:d3:c9:8d:03:3e:e8:bf:1f:bb:64:35:89:39:
                    09:3e:fa:d8:4f:f2:c2:b4:10:32:4f:8b:61:51:b2:
                    f9:85:e8:bf:d8:04:43:be:29:a3:d2:58:d7:b2:37:
                    71:7f:d3:9e:d0:85:0b:b0:ea:dc:20:4d:7f:c0:75:
                    40:a8:db:e4:f7:aa:e3:ae:6f:0c:1e:66:73:99:44:
                    df:37:93:a9:7f:d2:ec:34:c4:10:cd:a0:fd:cf:52:
                    e3:1b:52:96:26:5f:62:cd:96:67:c0:5a:7f:82:40:
                    e0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C9:E9:E5:1A:1A:90:30:20:BA:6B:4E:A2:8D:8C:DD:F8:1A:BB:55
            X509v3 Authority Key Identifier:
                keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:a2:1a:e1:96:57:6b:40:41:b0:52:a1:a5:0a:f3:93:bc:44:
         38:17:32:79:6a:72:dd:5d:e9:5e:0e:11:b1:6c:f0:3a:eb:46:
         66:25:01:5f:ce:0b:fd:64:5b:5b:3a:4b:9a:f0:43:88:a8:72:
         0c:e9:b3:41:cd:e0:25:ae:79:4b:fd:7c:41:c5:43:c5:21:c0:
         86:44:be:74:4b:c3:99:da:35:f4:48:12:bc:8d:ef:59:5c:b2:
         42:8e:46:3a:30:bb:15:e9:18:6f:da:69:43:f8:8d:30:a0:24:
         bf:d6:5f:f4:2c:aa:38:df:fe:8a:33:40:2d:a1:8b:27:f8:b7:
         21:46:fe:ab:e6:4b:b4:f2:9a:0c:18:d3:9d:bb:4d:1f:79:cd:
         5e:8e:a0:89:ab:58:f7:28:85:2e:bc:d4:3e:b9:70:ae:b5:f2:
         51:71:ee:b5:49:48:27:49:75:1f:c5:68:5f:a7:a4:c5:f7:a2:
         24:73:7e:72:7e:08:37:bf:95:49:1e:0a:ed:b7:8f:90:18:76:
         ad:52:0f:2b:0b:ff:f8:6f:43:6a:8c:86:f3:8f:77:29:d6:97:
         77:d0:4a:81:95:49:b5:2c:21:cf:88:9f:65:43:46:4e:d0:0c:
         f9:65:dd:06:91:95:15:4a:03:b4:8b:20:b5:23:36:b9:60:63:
         31:5b:35:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:43 2025 by rpki-client