Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File:                     4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier:          5O31hEc5lUg1o+QBDpJvVR6CwTBQaLQsTeiUYJhdcG0=
Subject key identifier:   90:38:FE:C5:26:A1:DB:5C:17:47:E8:9A:F0:D1:86:38:23:A4:DB:53
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer:       /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial:       0137
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number:          0136
Signing time:             Fri 31 Jan 2025 02:54:37 +0000
Manifest this update:     Fri 31 Jan 2025 02:54:37 +0000
Manifest next update:     Sun 02 Feb 2025 02:54:37 +0000
Files and hashes:         1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: b17qaOU56YwKT9GOllTALRSywX/3WrjLUP2yyzb+agU=)
                          2: 5A1C572CF8AE11EE85EDAC3B017001B1.roa (hash: Nhi/kAnQFZgp/t5smGUgjSQeAv2V3l/PSJmDi9Vk5T0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
        Validity
            Not Before: Jan 31 02:54:37 2025 GMT
            Not After : Feb  2 02:54:37 2025 GMT
        Subject: CN=679c3b6d-d5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:db:80:6f:1c:c7:52:74:c4:7e:70:93:a3:
                    3a:34:64:0e:f3:15:d5:4c:2a:be:81:c3:e3:e4:ab:
                    68:54:0b:b3:3a:33:d6:87:c1:44:1a:de:d9:2a:a2:
                    3e:0e:2e:07:46:0c:17:08:3b:ad:9d:56:30:8c:a2:
                    9c:d9:45:e6:89:00:26:86:d0:e4:e5:15:4c:36:1b:
                    25:87:21:78:e6:f7:a5:a7:bc:0f:76:18:cb:ed:64:
                    50:cc:10:83:3c:4d:da:f8:a8:72:03:c3:d4:48:1f:
                    57:80:dd:6e:cb:d0:19:c7:60:2f:9b:cd:5f:ed:3e:
                    2b:6e:56:b8:18:87:91:08:99:a9:cd:bb:96:c1:1d:
                    3a:a6:dc:1c:48:46:aa:a6:32:85:d5:0e:a8:c0:65:
                    bb:77:0e:c2:09:4a:4c:34:42:33:66:6b:1c:9a:a3:
                    a3:39:c1:cd:e0:05:49:48:02:7f:61:db:b6:cf:a5:
                    3b:05:b3:d0:8b:d5:10:8a:44:0c:02:86:e9:d7:04:
                    85:7f:08:3b:fc:ae:46:7e:d4:5a:54:04:97:57:00:
                    a8:d7:e8:5f:85:80:3b:f9:2f:02:07:55:40:c7:32:
                    54:5b:60:a8:f2:32:ae:f1:b8:5b:20:6c:e7:bb:d3:
                    ef:aa:f3:d1:53:c1:28:c9:3b:cb:6a:4b:c9:12:df:
                    a5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:38:FE:C5:26:A1:DB:5C:17:47:E8:9A:F0:D1:86:38:23:A4:DB:53
            X509v3 Authority Key Identifier:
                keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3b:8b:8a:8a:c1:93:54:f9:13:ed:b7:93:11:1f:65:bf:b1:
         48:0f:fd:46:4b:d6:cc:99:18:36:dc:72:df:00:7c:4a:2c:fe:
         8b:c0:06:26:64:ca:9d:7a:ce:77:c2:9f:b7:1d:04:7d:5f:8f:
         51:06:f8:b2:01:4c:1b:61:0c:9a:1a:8c:16:85:ab:05:83:6c:
         23:0a:78:76:0e:12:7b:87:08:3e:bd:4e:f2:73:87:8d:60:97:
         de:72:21:c4:3a:24:cc:21:36:8f:5f:56:6e:96:ce:b5:36:52:
         dc:ad:dd:10:ca:e6:5e:9a:fd:6d:01:94:49:5c:97:18:d9:2b:
         59:0f:37:ae:b4:99:51:fd:0a:91:9c:fb:a8:3a:96:a2:fd:dd:
         7c:bc:89:8b:49:93:5f:e6:2a:af:e4:47:ec:4f:5a:b7:c4:3a:
         69:14:3f:e1:2c:85:7a:40:65:16:36:48:0d:53:a7:43:46:e3:
         6a:65:6c:39:3f:5d:fe:c3:f8:ae:65:3e:4d:41:84:8f:02:e6:
         e1:cb:69:5b:04:2d:07:19:92:e1:78:b2:c5:82:77:28:25:07:
         3d:62:ba:a7:8f:66:70:7a:04:82:67:5b:e1:af:91:22:2c:b4:
         04:9a:2f:88:99:05:bd:6d:b3:37:21:3e:f9:54:28:ff:ef:05:
         eb:a5:ef:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:37 2025 by rpki-client