Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
File:                     37GYokEhr76oC-bCVT7Qn4UiUDI.mft (raw, json)
Hash identifier:          nTByfzBCtewAkBwM4vUX8ByEOjTNceh2ZeZ9xxDFesA=
Subject key identifier:   7D:22:0B:86:E3:65:2F:69:54:92:50:E6:5F:2B:6D:51:EE:B0:37:A5
Authority key identifier: DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32
Certificate issuer:       /CN=F36E1839AF/serialNumber=DFB198A24121AFBEA80BE6C2553ED09F85225032
Certificate serial:       0A81
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
Manifest number:          0A80
Signing time:             Fri 31 Jan 2025 01:01:50 +0000
Manifest this update:     Fri 31 Jan 2025 01:01:49 +0000
Manifest next update:     Sun 02 Feb 2025 01:01:49 +0000
Files and hashes:         1: 37GYokEhr76oC-bCVT7Qn4UiUDI.crl (hash: t2jYl31scTN3ovQLSsVeZHxgyr1jrPFZOfgsBWaVkMk=)
                          2: FA78454ADDC111E8B15C694DF8AEA228.roa (hash: uu495Ulte7M9lqyB0F6mlOadgmAPbSCrWmqWcuFpoQU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2689 (0xa81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1839AF/serialNumber=DFB198A24121AFBEA80BE6C2553ED09F85225032
        Validity
            Not Before: Jan 31 01:01:49 2025 GMT
            Not After : Feb  2 01:01:49 2025 GMT
        Subject: CN=679c20fe-834a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:eb:3a:d9:91:80:16:dc:eb:60:0e:5a:a9:34:
                    40:7c:f7:24:d9:53:1f:a3:b0:05:13:67:79:7d:43:
                    64:9f:b6:9a:4e:56:42:c0:7f:58:4d:d8:66:49:28:
                    9e:47:3e:a9:87:e6:16:da:d3:fc:55:68:2c:ba:5a:
                    b6:99:8f:f1:cb:20:9f:da:c3:d8:44:7d:e9:79:e9:
                    05:86:82:2e:16:dc:68:2e:a0:ef:01:36:b0:fc:d5:
                    64:00:8a:ac:47:56:b3:52:f3:7b:99:72:35:30:41:
                    10:2e:e7:68:af:76:f7:d5:b2:29:9c:aa:8c:b4:04:
                    7e:2f:23:5a:05:4f:e9:59:ee:3d:39:87:f7:f8:69:
                    6e:f4:e5:e2:3c:99:93:08:b8:a0:aa:ad:5d:64:72:
                    c5:00:4a:e4:a3:ec:e2:ad:85:b6:42:47:b7:99:62:
                    6d:66:ff:58:25:0e:7a:e4:21:0c:04:90:86:96:a6:
                    04:6c:31:4c:e2:db:17:41:93:5a:1a:2a:d4:e0:fa:
                    22:58:86:10:79:e1:b8:75:20:8b:b4:55:c6:ca:db:
                    e1:24:40:70:de:b2:5c:42:7e:34:33:99:a5:21:a6:
                    5e:99:a4:d4:b5:7a:63:18:75:9e:34:89:05:c9:b1:
                    a6:3b:ba:93:71:d1:37:3e:12:da:6a:e6:73:95:d8:
                    e7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:22:0B:86:E3:65:2F:69:54:92:50:E6:5F:2B:6D:51:EE:B0:37:A5
            X509v3 Authority Key Identifier:
                keyid:DF:B1:98:A2:41:21:AF:BE:A8:0B:E6:C2:55:3E:D0:9F:85:22:50:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/37GYokEhr76oC-bCVT7Qn4UiUDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1839/E500630CD06411E79AA93B49F8AEA228/37GYokEhr76oC-bCVT7Qn4UiUDI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:43:01:6d:75:48:21:e4:07:29:f0:82:22:d8:f2:73:68:8b:
         2e:62:36:a1:1b:cd:eb:9e:90:ba:bd:43:7d:47:12:40:5d:04:
         97:b4:49:88:b5:fd:8a:3b:8d:80:c6:1b:16:a0:c1:c7:c1:6b:
         bf:85:ca:a7:bd:70:4d:b0:79:b1:e7:af:04:23:d2:11:39:22:
         16:08:17:08:c3:e5:77:8e:d6:9f:2d:7d:20:0b:fa:59:fd:45:
         15:d2:2d:67:d4:73:ec:bb:61:6d:77:b1:c8:ae:23:af:a0:a8:
         f2:68:fa:5d:c9:8d:47:c5:77:e6:c5:75:5a:04:83:9a:56:fb:
         fa:72:f1:43:11:ee:29:66:5c:8d:fb:f7:73:8c:9f:1a:5c:17:
         55:8f:6e:a5:81:7e:89:2e:c2:0f:eb:f7:60:8b:fb:23:9b:09:
         ce:b2:83:c0:06:0c:cf:6f:f5:25:ab:f9:46:ea:e4:e4:cf:ff:
         7a:cf:30:ff:b6:fb:f0:01:1a:a0:84:f1:f7:bf:ea:54:1d:68:
         67:26:ca:f9:7f:af:31:46:13:48:fd:f2:d6:cd:2e:67:ff:9c:
         16:88:a2:97:b3:61:68:a9:98:69:60:e6:4f:bf:00:e1:8d:34:
         ab:5d:26:87:19:a1:cb:85:9b:47:44:de:9d:60:23:6d:a0:94:
         3e:66:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:04:45 2025 by rpki-client