Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
File:                     -RyaVXksG3JGcT_syDoE0La_EpE.mft (raw, json)
Hash identifier:          kkayrHINmZ0hHi5FDo+GP2bbBSgTY155nEDcmi1MlWg=
Subject key identifier:   E5:FE:E7:7A:8F:58:E2:E3:FA:F5:3E:FD:03:04:E9:73:71:7A:EF:4E
Authority key identifier: F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91
Certificate issuer:       /CN=F36D9765AF/serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
Certificate serial:       01C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
Manifest number:          01BE
Signing time:             Fri 31 Jan 2025 02:45:27 +0000
Manifest this update:     Fri 31 Jan 2025 02:45:26 +0000
Manifest next update:     Sun 02 Feb 2025 02:45:26 +0000
Files and hashes:         1: -RyaVXksG3JGcT_syDoE0La_EpE.crl (hash: DlDt0twyk2luYUhGc2hRR/x0VErF2V5UlO+wm97eOb0=)
                          2: F85FFC4692E611EEB2D6445FD25BE465.roa (hash: muWneFlHYojsneBSKzrZDz/udMZ/g3nNGVbhuecawWo=)
                          3: 68052C5292E611EEB89A3D5ED25BE465.roa (hash: tfitjgyPV0bS1mdpb1R7yScmPtiSMrRxv3bQMLGjivw=)
                          4: 76838CE4E21211EEBB0FD29E775412E6.roa (hash: 83ixyn1DFACr3ZBupHAVOvYjpWf5hCNkOy2h0/nKuTw=)
                          5: 60DEE4F2E21111EEA9BF3698775412E6.roa (hash: kpV5c+Nm73LzjUsY4W/31mKZBHaBOvnt5Onm6QECScM=)
                          6: FFF44596E21111EE97790E9B775412E6.roa (hash: 3jeCnY7r5+OaUOOC086aUVH8hGb0UpeugYE741gqr+8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D9765AF/serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
        Validity
            Not Before: Jan 31 02:45:26 2025 GMT
            Not After : Feb  2 02:45:26 2025 GMT
        Subject: CN=679c3947-2cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:30:97:57:ba:e4:ed:6d:89:69:39:38:ee:
                    11:67:c1:19:d8:64:99:62:fc:38:a8:e6:e1:3f:e2:
                    7e:69:80:47:8f:59:a4:ff:8a:1b:a6:9f:2a:4e:29:
                    77:95:c4:b5:87:bb:75:73:fd:f6:e8:be:61:61:09:
                    08:5c:f2:2a:eb:be:56:ba:49:d0:ee:80:f4:d3:77:
                    4a:ae:d9:66:08:07:d1:5b:a7:cb:f5:4f:17:c1:6a:
                    3a:21:1d:0b:86:f0:ed:8d:f9:10:f8:ad:35:c5:47:
                    2f:d2:71:72:b7:35:ae:77:aa:9a:22:3d:eb:ec:ac:
                    27:57:ea:47:fc:a2:ce:46:a4:91:3b:27:ed:2c:bb:
                    af:ae:24:67:70:bc:a2:0a:36:b4:63:3b:3a:9e:6c:
                    c2:b9:4f:e3:c4:7f:29:dd:97:cf:81:12:6e:8d:c1:
                    c7:e8:f3:c6:8b:09:e2:c9:c1:b3:b2:64:ee:45:ef:
                    0b:bd:0f:79:63:77:74:f1:bf:25:1e:70:26:4a:b4:
                    1c:ec:72:76:d9:8a:8f:4f:e2:00:40:52:fb:fb:8d:
                    d4:53:65:67:2c:e0:55:8a:1b:4e:10:20:17:33:37:
                    fc:fe:5e:fb:16:d4:34:d0:51:c5:48:10:08:a5:20:
                    9c:68:bf:df:e9:27:22:6b:ae:de:ad:9b:15:7c:97:
                    d7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FE:E7:7A:8F:58:E2:E3:FA:F5:3E:FD:03:04:E9:73:71:7A:EF:4E
            X509v3 Authority Key Identifier:
                keyid:F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b8:6c:04:f9:f4:cc:6e:76:38:b3:99:c1:d5:ca:44:8a:c9:
         d2:25:dc:dd:ae:73:dc:ac:b6:b7:3b:c9:51:3c:78:4b:e6:76:
         2d:ca:96:fd:8a:b7:a8:81:c7:57:d9:e6:ac:e1:4f:8f:16:f1:
         ef:e8:1f:70:5b:40:17:55:6e:ea:98:98:e1:7c:b6:54:e5:c9:
         96:0d:77:fe:87:64:e4:12:d9:02:3e:96:b8:f7:ad:29:bb:d5:
         ca:88:10:ec:a6:f1:f4:71:46:f0:15:c4:d0:50:29:03:24:c3:
         44:97:fd:fe:67:35:28:4b:5d:3f:3f:bc:ab:6b:d7:bf:32:8f:
         40:35:bd:33:0b:55:9a:9a:61:9a:bf:4d:ba:fc:ac:f3:19:93:
         bc:3d:f7:de:54:b5:98:1a:9b:1e:73:b2:37:ef:08:25:53:ae:
         42:3d:d4:d9:a9:cf:e1:93:bc:1b:0b:83:d8:ea:13:e2:27:0e:
         93:2c:e8:7a:c4:71:23:a5:0d:86:8e:a3:5d:82:1c:50:bd:59:
         42:ea:c2:68:d7:d6:02:d3:72:84:fe:c9:97:1e:14:f3:25:e6:
         3f:1d:e3:0c:74:be:e0:33:f4:92:0c:a8:7d:f4:0e:f2:40:18:
         aa:b0:de:ad:ee:c6:72:2e:66:12:9a:9d:be:19:85:62:60:d2:
         94:c7:ad:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----