Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
File:                     Rh3mXlosn0bNsVRHChQs6rACo-g.mft (raw, json)
Hash identifier:          6bEwx+V9BIE8Lg24hbEGye/YkA/oEs74ovZ8YWZtJ4M=
Subject key identifier:   0A:66:6D:07:3C:46:10:9B:8B:71:23:65:4E:E7:4A:98:75:CA:7E:DC
Authority key identifier: 46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8
Certificate issuer:       /CN=F36E0C57AF/serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
Certificate serial:       DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
Manifest number:          DC
Signing time:             Fri 31 Jan 2025 03:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 03:00:15 +0000
Manifest next update:     Sun 02 Feb 2025 03:00:15 +0000
Files and hashes:         1: Rh3mXlosn0bNsVRHChQs6rACo-g.crl (hash: hSbPUJnPyAH7VY12V5tPmAz1AFRDMBGJihYaGl1b8qY=)
                          2: C398885E3AC311EF90F6DF67762E951A.roa (hash: ul3nn21hDO7UgXCYkLGPryVSInddXUiuHuE7QBhZSgU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0C57AF/serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
        Validity
            Not Before: Jan 31 03:00:15 2025 GMT
            Not After : Feb  2 03:00:15 2025 GMT
        Subject: CN=679c3cc0-3bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:4c:42:26:dc:f7:ed:d8:1a:0f:39:94:24:
                    ae:c7:56:48:6e:48:7f:39:08:77:0a:55:d0:42:1c:
                    c5:a0:52:85:9f:60:e7:bb:2c:7d:31:55:2f:4e:0d:
                    ab:44:ca:17:07:c5:9b:b2:e8:73:10:71:ce:ce:f7:
                    0e:cd:0e:9b:d6:e5:e1:7d:94:37:4e:9c:c9:42:b2:
                    fb:77:e3:c9:e0:64:85:30:3d:b1:bf:95:35:88:c3:
                    77:ac:09:9d:ed:c0:0d:87:48:15:57:be:7e:69:49:
                    9c:8e:86:5d:02:11:e9:dd:ee:f1:e6:f5:8d:bf:f4:
                    f5:fa:39:22:13:90:b3:bb:11:12:ba:5b:dd:21:7c:
                    ce:fe:10:40:8f:54:54:f2:eb:f6:64:54:e3:6c:5e:
                    82:44:cd:44:b2:88:04:89:ad:cb:a0:af:31:cb:4f:
                    35:2f:25:81:c6:5a:cb:a4:1f:62:b0:ad:4d:11:19:
                    b9:1f:60:55:81:b9:7b:60:a8:dc:8e:95:6f:f9:23:
                    c0:27:e7:ef:b6:ee:ad:5c:af:3b:67:3f:b3:81:f1:
                    8e:5b:f0:91:ba:29:58:05:68:8a:5e:10:73:94:3a:
                    99:26:95:65:bc:c0:33:d7:a4:3f:55:7b:ef:f5:11:
                    f5:b8:a3:5b:63:3b:2f:3f:49:0d:51:7d:d4:56:03:
                    44:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:66:6D:07:3C:46:10:9B:8B:71:23:65:4E:E7:4A:98:75:CA:7E:DC
            X509v3 Authority Key Identifier:
                keyid:46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f4:20:33:11:5f:53:d4:37:14:fe:76:c9:c7:b9:7b:eb:9d:
         bd:38:3d:07:8f:d8:e5:72:41:3d:f0:27:24:ed:32:5c:12:4a:
         81:37:6c:84:1d:aa:ef:ed:67:7a:fc:dc:7e:fb:37:ef:a8:da:
         04:c1:01:72:87:42:36:63:a0:b4:11:6d:21:6f:3b:5a:08:61:
         a6:91:57:24:51:85:45:0b:cd:56:c6:0e:dd:1c:0a:5f:cc:45:
         54:ee:52:fc:ce:9c:ba:28:63:23:a8:57:e4:f3:70:48:86:af:
         a6:00:d4:f6:b1:ab:8a:db:5f:83:3e:c3:dd:49:31:59:1e:47:
         fb:72:5a:13:84:6b:55:3e:12:87:9e:69:57:cc:cf:9f:81:6d:
         46:c1:17:2e:d5:be:8f:83:71:3e:c7:e7:73:e0:83:43:71:27:
         78:f8:5c:44:2c:c0:38:70:01:36:e2:89:96:3f:ac:c6:dc:83:
         5c:8f:7e:74:61:cd:fd:7a:70:5e:f5:79:02:07:b8:99:24:11:
         28:23:72:19:8a:2b:c0:58:94:eb:47:d1:6d:a2:f0:97:a4:8f:
         a9:a0:f1:c7:7b:92:24:86:f6:91:fc:10:88:25:6f:8d:80:56:
         57:5f:5c:3e:cc:ab:09:f8:f8:2c:72:1a:c5:74:62:e6:c9:90:
         a2:91:99:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:04:34 2025 by rpki-client