Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
File:                     Po64WOYVOSGtsL9fC8lbTQbHw-8.mft (raw, json)
Hash identifier:          kgTVxzY3wbnXXHWdsy9c4ViTF1UUjDDPPxZmPvK9Wtg=
Subject key identifier:   35:FA:07:B6:01:34:23:34:45:62:BF:E1:60:24:94:A1:7D:99:91:2B
Authority key identifier: 3E:8E:B8:58:E6:15:39:21:AD:B0:BF:5F:0B:C9:5B:4D:06:C7:C3:EF
Certificate issuer:       /CN=F36E8DA8AF/serialNumber=3E8EB858E6153921ADB0BF5F0BC95B4D06C7C3EF
Certificate serial:       036F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
Manifest number:          036E
Signing time:             Fri 31 Jan 2025 02:13:50 +0000
Manifest this update:     Fri 31 Jan 2025 02:13:50 +0000
Manifest next update:     Sun 02 Feb 2025 02:13:50 +0000
Files and hashes:         1: Po64WOYVOSGtsL9fC8lbTQbHw-8.crl (hash: WL44pjPRggja32WaX+DRLjD7yF7n9iOP8e73h3sxdq8=)
                          2: 55A38D48495D11EDB19BAAEAF1222468.roa (hash: SZNSy5X2cBi0hD7/2UgPgs5N7piTYi+vUEEFastGQCs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879 (0x36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8DA8AF/serialNumber=3E8EB858E6153921ADB0BF5F0BC95B4D06C7C3EF
        Validity
            Not Before: Jan 31 02:13:50 2025 GMT
            Not After : Feb  2 02:13:50 2025 GMT
        Subject: CN=679c31de-5a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e9:95:95:a5:74:41:26:2b:0e:27:54:c9:03:
                    72:6e:a7:bb:9e:04:d5:53:b8:15:ad:92:66:bf:a2:
                    fa:58:3a:f3:58:01:e9:3d:6c:a8:77:a0:a5:b7:9b:
                    9c:1b:54:d1:ba:d4:19:68:3b:3c:1f:ea:6a:0e:99:
                    d7:c7:f0:58:a3:46:28:24:7d:d8:d7:c0:65:35:68:
                    e2:e7:f0:c0:d0:98:0a:62:7a:a6:a3:47:69:b4:2c:
                    59:2b:f0:f4:af:0b:f7:3c:9c:25:fd:4f:26:a0:27:
                    44:82:b7:05:95:87:32:ec:07:f3:4f:b6:a3:bb:93:
                    56:ce:e1:6f:02:70:0a:47:ec:50:22:c8:be:1c:0c:
                    a8:36:05:e0:53:48:ad:9f:f6:fe:b3:47:f3:0f:9f:
                    92:22:28:a2:c2:f0:ae:0a:51:e2:dd:4a:f5:de:36:
                    a5:cc:6d:99:9d:8a:07:4c:de:b9:15:af:15:8b:48:
                    04:5e:28:b3:67:fb:96:27:d1:16:ea:1a:87:c6:e1:
                    e0:32:32:86:63:79:d7:e6:cf:2e:1f:bb:cd:0d:18:
                    91:0a:ab:7a:64:a0:8f:89:a7:c2:ab:3e:74:36:67:
                    86:fc:29:35:7d:e5:2f:36:e4:9f:72:bd:9d:00:d3:
                    53:26:63:e0:cd:12:71:b0:69:a5:bf:0d:64:6b:cb:
                    24:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FA:07:B6:01:34:23:34:45:62:BF:E1:60:24:94:A1:7D:99:91:2B
            X509v3 Authority Key Identifier:
                keyid:3E:8E:B8:58:E6:15:39:21:AD:B0:BF:5F:0B:C9:5B:4D:06:C7:C3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Po64WOYVOSGtsL9fC8lbTQbHw-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8DA8/4C970B5E495C11ED9E7604E8F1222468/Po64WOYVOSGtsL9fC8lbTQbHw-8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:25:9d:61:01:38:b6:6c:1a:d1:b6:cf:c9:80:04:6a:a3:11:
         da:8e:c9:38:18:ab:e5:bc:17:b2:85:05:9d:95:a5:da:4d:f4:
         0c:a0:54:9e:eb:d9:69:0f:67:04:5b:7e:e5:09:5a:82:68:64:
         98:d9:68:4c:70:e7:27:f5:e0:4d:fa:ea:8a:e6:fc:8e:b4:b3:
         3e:87:4a:fe:c6:bd:85:bd:c5:7f:e9:e4:9f:bc:7e:87:f9:c8:
         07:cf:15:47:2f:35:2b:db:34:1a:93:76:ed:02:c3:a4:b3:b3:
         41:6e:4b:f9:5c:f6:d4:32:29:d2:29:4a:47:6f:20:7f:5f:19:
         d1:48:96:4b:34:b3:62:d2:0c:1c:83:5e:81:7f:05:7c:76:2c:
         b8:0b:f7:1e:cf:f5:9f:f6:fb:0e:69:76:09:9f:b6:f1:95:51:
         8a:11:34:41:38:30:63:35:91:0c:43:55:96:78:0f:0a:03:a6:
         39:71:3d:2c:4c:c1:26:b5:7b:cc:f2:f7:2b:db:34:7a:db:09:
         fc:72:45:59:33:da:e5:84:4a:70:0d:a7:dd:13:2e:f6:8c:53:
         fa:34:cd:38:87:49:52:85:0a:ff:9c:16:9a:c4:2a:8e:e4:ab:
         85:b4:2b:a7:b1:78:10:32:ef:be:ab:e0:12:a2:c7:14:8c:88:
         63:9b:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:01:18 2025 by rpki-client