Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
File:                     BinJnUdgwom4TNvs8bbBPPUl6q8.mft (raw, json)
Hash identifier:          EexgYqXhWCxeN9tPK+59cmxy+KZMLWeMkJ04K7vv38Y=
Subject key identifier:   A3:1F:E0:07:94:B2:DE:0F:00:74:7D:47:41:78:38:9F:F0:65:E7:52
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Certificate issuer:       /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial:       0289
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
Manifest number:          0279
Signing time:             Fri 31 Jan 2025 02:31:24 +0000
Manifest this update:     Fri 31 Jan 2025 02:31:24 +0000
Manifest next update:     Sun 02 Feb 2025 02:31:24 +0000
Files and hashes:         1: BinJnUdgwom4TNvs8bbBPPUl6q8.crl (hash: onv48qZv9lR52c4yCVDe3yU6iRvFOokzg0W5XvyFokY=)
                          2: 2850010E216B11EFB3F618137DDC24C2.roa (hash: 0jME1ZzrI4sNnNZjfeG38v9huXsz3LZTpURGBtXzEAw=)
                          3: 51542E68216B11EF9F7AF3167DDC24C2.roa (hash: 4QCeXvrc6kg/JIOMdU4vEPvtTh3WWdhKcmrMjlVBHNk=)
                          4: A67CF5BA216A11EFA90D51127DDC24C2.roa (hash: lsxPoy4LkYh0ebWwRE+vefdBa5LLS6CukBLh7U9d9E4=)
                          5: 55EEE540216A11EF9A5E590E7DDC24C2.roa (hash: FgSrL2A61qR530yDTlLI1PpGN3TVb0JzE3QW/HRydIw=)
                          6: 1F5F2FF8216A11EFBE9F000E7DDC24C2.roa (hash: Lnp4R2zpiassu92nP7+9bZsA7WacYQhSdB9Irhb4Gho=)
                          7: CF99B532216A11EFBD87B3127DDC24C2.roa (hash: jOjj4Xh+2NT4yOAFMCOKRdCM3mQyy3CpEf+pl4OtA9Y=)
                          8: F7891F7E216A11EFAAB9DD127DDC24C2.roa (hash: gR6HfHMgVO0uVKQ4QeKo2uZ6uComtLRb0sTj4ZsT1hQ=)
                          9: 80627120216A11EF980B8E0E7DDC24C2.roa (hash: iJq4XGcPgxPLrs5UWbDYKLBJP1q4j5+vrVCECQwMuoM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649 (0x289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
        Validity
            Not Before: Jan 31 02:31:24 2025 GMT
            Not After : Feb  2 02:31:24 2025 GMT
        Subject: CN=679c35fc-8dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:d2:0f:a6:1f:ab:1f:ce:94:7e:3d:f6:cc:
                    1d:e0:a0:34:ce:00:9b:ae:e4:db:d8:69:ed:92:ba:
                    a0:6a:dd:f2:96:5d:dc:9a:06:fe:43:94:c2:94:f3:
                    d8:d8:ec:3a:f1:33:f5:54:05:eb:b1:f4:e9:b6:c9:
                    42:05:94:6d:1a:9c:91:da:d2:67:f0:51:b7:97:46:
                    4d:32:90:96:be:e6:a0:e5:bb:44:d8:8c:0d:21:89:
                    7b:f0:4b:6a:7d:c2:70:5d:ee:1f:35:07:a9:c4:3f:
                    6f:39:b6:21:fd:50:01:5b:b9:12:5f:55:7a:bd:e8:
                    d3:26:eb:da:39:fd:1a:fb:fa:2a:b8:44:d9:9d:49:
                    05:03:29:c1:22:c4:0b:23:73:cd:20:58:87:90:c5:
                    48:df:84:51:47:56:9d:74:27:3a:78:82:35:19:2e:
                    4a:06:14:66:05:41:c9:0c:98:ff:a5:04:a5:82:1a:
                    82:01:c8:89:59:74:62:b9:87:2e:cf:2f:41:57:9c:
                    9d:73:5e:5c:e0:ec:6d:2b:a4:c0:25:31:c6:6e:b9:
                    6a:02:76:2e:45:63:2a:86:2d:14:7f:41:c1:51:f3:
                    9b:72:62:d7:9e:ed:8f:b9:7d:ba:fd:86:dd:2a:4f:
                    1f:28:07:9f:09:69:c8:1e:c0:92:c4:ca:19:2f:ec:
                    24:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1F:E0:07:94:B2:DE:0F:00:74:7D:47:41:78:38:9F:F0:65:E7:52
            X509v3 Authority Key Identifier:
                keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ab:95:0d:c2:12:ad:2b:54:b5:f6:2b:d3:d2:6b:f1:37:97:
         dd:0e:e3:32:77:5d:a8:ff:31:df:7e:a9:40:f8:9b:d5:cd:8c:
         70:1a:c9:3a:db:0a:3f:58:fe:45:50:71:c1:4e:90:95:cf:fe:
         24:8b:88:86:de:f8:e8:26:27:32:b8:54:a5:41:c6:8b:51:7c:
         45:1a:6a:94:80:8f:d8:ee:87:e3:9c:fa:75:02:96:ef:b1:0c:
         5d:9f:01:db:6f:8c:f4:bb:c9:7b:22:bb:71:d6:d4:38:33:77:
         07:46:2b:4e:b5:d2:62:f8:11:46:0b:98:4b:fb:57:84:66:5b:
         ce:e2:a8:75:1e:11:d8:8b:6e:16:b0:33:fa:17:e5:45:bb:8e:
         c6:aa:42:b1:fb:bd:31:72:cf:a8:74:cf:eb:f5:78:6b:ed:24:
         6e:07:5b:96:26:3c:65:a6:7b:7c:5a:cd:fb:35:38:62:a9:2b:
         6d:b8:09:51:fe:16:2a:7d:8a:67:6d:03:50:75:51:1e:0a:dc:
         7b:52:e6:98:50:66:0b:5e:34:47:e1:e3:39:da:d0:5c:31:ea:
         60:78:e7:09:ed:a1:32:eb:38:20:4d:c5:7d:40:01:54:34:e7:
         0c:7d:19:63:85:0e:44:cd:d4:eb:1c:c7:0a:aa:5d:a2:dd:df:
         c9:31:56:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:57:51 2025 by rpki-client