Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
File:                     FINhai-2NCU1g2xD_pc41PF-nxI.mft (raw, json)
Hash identifier:          EQ9qyokj8aysxuxy4odWfvKxamkBkCAMOC9UL6KgfFg=
Subject key identifier:   39:2C:0D:04:0F:69:E1:CD:75:06:CA:D4:F1:35:A5:2D:9F:C3:00:01
Authority key identifier: 14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12
Certificate issuer:       /CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
Certificate serial:       0809
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
Manifest number:          0803
Signing time:             Fri 31 Jan 2025 01:18:09 +0000
Manifest this update:     Fri 31 Jan 2025 01:18:09 +0000
Manifest next update:     Sun 02 Feb 2025 01:18:09 +0000
Files and hashes:         1: FINhai-2NCU1g2xD_pc41PF-nxI.crl (hash: jJWZ6CdG1o2yDsL0AGZm4cSmfMLA22uLFw1v++L58p0=)
                          2: 568AD538C4DE11E98B4F332AF8AEA228.roa (hash: xdylXUVfFEhVDV+HaHSM6/9fpN4hJ/I/a6cPF/dHfkg=)
                          3: EAE86FFAC57F11E98956EC22F8AEA228.roa (hash: A5MFii7zHAjgXRCjR4xiJOqNYfNzVLgbnGJOuX6/bNQ=)
                          4: 053287EEC57E11E995258B21F8AEA228.roa (hash: 8RG1LKMy1N1k+/JPgUrBj1cf0XHxCQjayreYwufLFP8=)
                          5: FD00FB0CC57B11E990030320F8AEA228.roa (hash: wjpT71ZYBV7yZPhlR7XkwQZs3zrAzJhdzS4M9JfwlgY=)
                          6: 720732F0C59E11E980219538F8AEA228.roa (hash: Psd1/Z2S2Ol8wl9MlW+bVpirYsArWE2fYuwSmY3CUzg=)
                          7: F2992272C57911E98B78AC1EF8AEA228.roa (hash: njzt40/v00335sDH9EQwcG30Zd4Fy1+NGwdS2MnggaU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2057 (0x809)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
        Validity
            Not Before: Jan 31 01:18:09 2025 GMT
            Not After : Feb  2 01:18:09 2025 GMT
        Subject: CN=679c24d1-963e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:a8:e6:b0:4a:a5:26:1e:70:43:03:e1:6d:
                    6d:87:86:aa:f3:1e:05:40:00:a3:bc:6f:86:36:98:
                    13:1a:33:1a:1c:9b:da:50:82:97:f6:f1:b6:b7:d5:
                    a6:4c:25:32:7f:eb:45:96:e2:ce:79:f3:e6:aa:ff:
                    78:72:88:1c:1f:29:54:65:43:2a:fe:28:14:85:74:
                    f7:22:3c:13:6e:7a:03:b8:de:28:9d:ff:fc:a8:e5:
                    a9:46:50:1e:2f:57:c5:f3:82:0a:1a:3f:2b:6f:44:
                    92:5b:a0:90:63:92:9f:cb:04:ef:35:c0:13:81:ef:
                    d7:f8:d9:02:b2:14:06:63:d1:1e:7b:7d:ab:e8:4e:
                    3f:c6:fe:f5:27:5f:f8:60:69:db:9b:88:c0:53:2d:
                    05:fd:7b:6a:5d:38:18:59:83:da:56:2c:8a:d4:5d:
                    7f:f4:c5:5e:d4:4d:32:ec:8a:3d:e1:fb:0d:57:db:
                    01:58:2b:e1:61:bc:4f:8c:fe:d4:70:4b:1e:ec:da:
                    5f:4b:5f:0b:86:b6:08:17:d9:18:e4:61:f9:28:ff:
                    1d:31:5e:95:35:54:ff:2b:d7:50:e6:e1:86:47:14:
                    27:f3:da:84:c3:e7:8b:c5:7e:7e:6f:6d:5c:53:bf:
                    5d:fb:a8:74:60:c9:48:1d:e6:2b:63:98:8d:1b:b8:
                    cf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2C:0D:04:0F:69:E1:CD:75:06:CA:D4:F1:35:A5:2D:9F:C3:00:01
            X509v3 Authority Key Identifier:
                keyid:14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:72:4d:1e:fd:76:ea:e0:ff:46:20:c2:f3:73:90:63:3c:81:
         ee:55:50:58:d6:f1:91:f7:80:23:db:a4:bc:81:b8:f2:76:8a:
         75:17:43:ad:2e:57:87:88:52:e4:33:33:ae:fe:ae:76:30:6a:
         e3:1f:38:6e:f9:48:ed:21:24:ab:d0:38:4a:c2:13:37:1e:5e:
         72:8c:ed:21:13:5c:a6:20:1a:63:f0:94:17:5c:08:32:4c:bc:
         d2:35:f4:65:dd:2b:67:b5:55:7a:a2:55:89:2d:d5:4e:8d:bc:
         3d:4e:ab:cc:63:ad:38:e7:2f:88:57:f1:90:3a:05:fc:d4:c8:
         1f:81:1e:4f:87:f9:e1:1e:4d:e6:60:3b:b9:4d:6d:f6:f8:a3:
         05:f9:a4:19:38:0c:e2:ef:d7:51:82:48:00:fd:94:9c:91:b1:
         b7:a5:47:40:3c:2a:c3:3a:82:95:31:27:bc:76:eb:f5:7e:2d:
         02:4c:76:1e:c0:51:dd:ad:df:fe:2e:34:50:44:1e:c3:38:c5:
         a2:92:8a:5c:43:40:9c:bc:79:20:18:6b:a6:88:14:6d:db:62:
         07:4b:07:7c:c1:83:10:f0:ca:f9:96:20:da:35:72:c0:c9:9e:
         d7:eb:77:7e:02:f1:fc:e0:59:10:fe:a3:e6:c5:7d:74:55:a5:
         6e:3b:f4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----