Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
File:                     hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft (raw, json)
Hash identifier:          D2AvV5diwFToXBR67514yQDjTMJNZcV7ZTW8Z1zuw7U=
Subject key identifier:   19:8C:D2:34:7B:7A:72:3E:BF:E4:15:19:0E:1B:81:DD:13:40:D0:F1
Authority key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
Certificate issuer:       /CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Certificate serial:       02F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
Manifest number:          02F0
Signing time:             Fri 31 Jan 2025 02:21:22 +0000
Manifest this update:     Fri 31 Jan 2025 02:21:21 +0000
Manifest next update:     Sun 02 Feb 2025 02:21:21 +0000
Files and hashes:         1: hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl (hash: j8WyZvc7Ra+XbAkBJhdSvprHPAQML6jgnJgP8xh1DdA=)
                          2: 3049086EA6B111ED933D49A0F1222468.roa (hash: BeKV2NJ2k9BqOeZnEYVNNVtyyQ+PyOb9/ofU/Yofnbo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
        Validity
            Not Before: Jan 31 02:21:21 2025 GMT
            Not After : Feb  2 02:21:21 2025 GMT
        Subject: CN=679c33a2-d57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:fd:02:b0:fb:f2:0c:1f:1b:e8:cd:d4:a2:
                    24:99:e7:51:f1:23:95:ea:85:2d:b6:ea:0d:4e:8c:
                    3e:ae:ee:9a:e8:a9:8a:15:b4:c9:5f:d7:5a:b3:db:
                    b8:02:11:fa:f0:61:84:ed:55:93:79:15:5b:07:a5:
                    f8:a2:40:e5:e4:7f:32:a5:b4:fa:8d:c7:a6:1f:e1:
                    f8:d4:73:7f:85:c7:8d:41:d3:7b:19:35:7b:c6:f4:
                    3b:5f:da:50:c4:70:e8:a6:a3:31:35:f4:60:54:e6:
                    df:12:ed:e1:cb:9b:b3:e8:3d:45:d5:1b:7d:0e:7b:
                    57:65:1f:06:4c:a1:38:f3:54:94:64:ce:e4:e9:2b:
                    23:c8:c7:6d:38:1e:aa:22:a7:83:fe:41:d1:aa:2e:
                    99:9f:98:6b:de:4a:b2:b2:75:e0:e2:03:73:08:d1:
                    d6:30:73:cf:be:b3:6e:38:60:b3:ea:4e:fc:04:e3:
                    33:46:39:0b:a9:b3:f6:20:7e:58:2e:6b:ba:da:cf:
                    f0:06:d5:3c:1a:21:88:5c:62:da:80:dd:0e:db:d5:
                    a2:d9:37:6d:cb:cc:6f:c8:98:67:80:8a:90:c6:4d:
                    e6:ab:1c:9e:d8:76:d2:9e:3f:fa:ea:88:fd:f9:e8:
                    db:40:d0:d0:5b:d1:6f:be:bf:ec:d3:2e:be:80:c7:
                    17:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8C:D2:34:7B:7A:72:3E:BF:E4:15:19:0E:1B:81:DD:13:40:D0:F1
            X509v3 Authority Key Identifier:
                keyid:86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:33:5f:40:a2:a5:77:fd:5b:87:9e:73:c5:6a:2e:e2:09:b0:
         d8:a2:5f:7c:b7:79:a1:66:b6:f7:5b:23:85:c6:d0:f0:bc:18:
         1d:d1:9b:93:3b:fe:11:a6:00:9d:20:32:ec:29:d5:c4:4c:b2:
         c6:22:2c:9c:4b:a6:a0:7e:ed:8f:ec:c3:02:a1:35:0c:5a:a0:
         fa:f8:2f:69:62:a3:1e:ca:1d:bb:d6:77:ce:cb:c3:cc:9f:bb:
         33:47:e3:15:c2:0d:53:17:80:9d:4c:96:c1:5c:70:8d:e1:ca:
         95:e0:2a:0d:14:34:94:ad:bd:03:f2:fa:29:5d:a2:05:38:97:
         aa:84:a5:ad:fb:f4:63:b6:2a:39:59:a8:d7:64:14:bd:88:ec:
         9f:24:5f:5c:e3:da:ea:0e:9d:c4:aa:89:4c:ed:66:d3:ca:47:
         21:da:2d:94:9d:8d:24:4f:01:d8:df:aa:19:aa:2c:a6:27:43:
         7e:0f:ee:90:a5:6e:2e:9e:3b:3f:8d:f0:59:e6:fa:cc:42:4f:
         a4:cc:fe:a3:da:8f:34:63:83:bf:fd:15:61:2f:33:04:06:c6:
         39:5f:92:b3:bf:4b:e7:ec:94:79:e5:47:76:44:35:15:17:f1:
         eb:70:ae:db:41:a6:32:92:f6:8d:52:f1:a6:99:7c:ff:7a:b2:
         8e:50:c8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:28:53 2025 by rpki-client