Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
File:                     xel4rPl9qfSdxLKEr_AldPEDGH8.mft (raw, json)
Hash identifier:          JAsL0q21qvpqvVXzKPhAV4hSROQ3UNporT1IHrQvGJ8=
Subject key identifier:   93:F5:12:2C:1B:60:F3:8F:49:F7:CF:70:BE:76:E6:28:0F:CF:31:93
Authority key identifier: C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F
Certificate issuer:       /CN=F36E6AB8AF/serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
Certificate serial:       04F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
Manifest number:          04F1
Signing time:             Fri 31 Jan 2025 01:51:22 +0000
Manifest this update:     Fri 31 Jan 2025 01:51:22 +0000
Manifest next update:     Sun 02 Feb 2025 01:51:22 +0000
Files and hashes:         1: xel4rPl9qfSdxLKEr_AldPEDGH8.crl (hash: OFQti1Mm7GL/5BKk1tw61QjFWzIyDro7F6eFHKvJIjA=)
                          2: 1C9E519E1BDD11ECA0560768D8A014CE.roa (hash: FU98lPpwZTQalULqUls0soaKI9pnCPgBWGxAh0GDG/g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6AB8AF/serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
        Validity
            Not Before: Jan 31 01:51:22 2025 GMT
            Not After : Feb  2 01:51:22 2025 GMT
        Subject: CN=679c2c9a-b31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:31:75:0c:77:b9:04:7f:2d:5f:4b:a8:3e:
                    54:bf:a6:1c:98:00:97:ac:f6:c7:25:53:fb:d0:e3:
                    1b:39:7d:9d:1d:f0:b9:b3:b3:6b:64:9c:55:48:6d:
                    3f:2d:9b:a9:6a:07:4a:c2:ff:a8:e3:2c:5f:98:1c:
                    88:1c:62:24:07:db:91:f1:c7:08:20:f5:88:d7:e7:
                    98:3f:a3:98:2b:c4:c4:a5:8d:3d:84:2c:05:77:2c:
                    ef:79:eb:86:d9:d1:99:8b:e9:bc:9d:20:02:f5:b2:
                    2f:7f:51:0e:6a:61:6c:13:db:99:72:23:7d:b4:5c:
                    ed:99:52:c4:92:d7:52:00:28:74:d8:09:8a:6c:6f:
                    7d:ae:de:05:05:c3:f7:43:45:e1:6c:df:5d:01:42:
                    3e:47:e3:5f:29:78:48:5a:bb:47:28:b9:d6:b0:1d:
                    33:d0:08:2a:c8:a6:ee:09:fc:bd:95:cb:29:9c:4b:
                    fb:cb:0e:0f:2b:42:cd:e5:cf:aa:07:b4:66:3f:c3:
                    9f:53:e5:25:ae:0d:96:cb:9e:8b:6c:1a:44:4c:7b:
                    b8:ec:10:b2:ca:2c:67:46:2d:e0:7c:77:d6:cf:11:
                    2b:b1:57:7b:19:b5:0f:f0:1d:ac:4b:e2:a3:25:fa:
                    64:71:a8:b1:b8:5f:f5:4b:aa:09:ca:b9:20:a4:97:
                    ce:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F5:12:2C:1B:60:F3:8F:49:F7:CF:70:BE:76:E6:28:0F:CF:31:93
            X509v3 Authority Key Identifier:
                keyid:C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f6:40:23:cc:fa:0a:73:e6:49:5b:1f:a7:2e:76:09:a8:00:
         22:38:71:40:e0:3f:d7:eb:fe:d7:44:22:04:6d:48:dd:a6:d8:
         57:8d:1f:a6:ba:cf:2e:4b:45:57:49:8e:cf:8d:a3:bf:93:02:
         22:b9:41:dc:de:fb:ed:cd:8e:ce:1b:15:6d:a7:83:03:fb:4f:
         80:b6:3f:72:de:0e:db:6b:54:25:51:ab:81:4c:02:4f:c5:25:
         a5:f9:c1:15:3d:59:bf:45:09:3a:ad:50:b7:b1:8e:00:56:38:
         43:3e:8c:8b:b5:23:b0:0b:5c:77:83:88:ca:76:bd:39:2d:a2:
         33:2d:ce:5f:5e:d4:f0:28:37:68:a8:9e:d2:15:e3:65:71:81:
         55:9e:5d:b1:8e:90:92:80:dd:f2:b6:88:f5:7e:71:58:5a:8a:
         9f:b2:06:cd:b1:d1:8e:98:6c:7d:3e:6f:51:e0:2f:3e:bf:a1:
         85:d5:8b:20:2a:ca:96:1b:16:00:76:2c:53:a9:ac:70:23:95:
         aa:69:d7:1e:e5:e2:ac:92:ed:80:95:53:65:b1:5f:41:a8:19:
         f4:d1:f9:e2:67:21:85:4d:c2:82:60:88:0e:9d:7a:14:1e:90:
         8a:23:1e:0d:5d:2f:de:f3:78:93:4f:27:a2:b7:4a:5b:19:f3:
         5b:fd:1e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:38:11 2025 by rpki-client