Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
File:                     2KoAqxWVGabWVnDenlmLc99qssE.mft (raw, json)
Hash identifier:          hy/CWMss0U7NnpFv3nCkQIFNrem5zQZbU7wrjSIlh8Y=
Subject key identifier:   92:4C:4B:12:4D:67:61:9B:58:F5:54:13:2B:98:4D:96:83:EF:D3:49
Authority key identifier: D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
Certificate issuer:       /CN=F36F273DAF/serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Certificate serial:       4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
Manifest number:          4D
Signing time:             Fri 31 Jan 2025 03:13:52 +0000
Manifest this update:     Fri 31 Jan 2025 03:13:51 +0000
Manifest next update:     Sun 02 Feb 2025 03:13:51 +0000
Files and hashes:         1: 2KoAqxWVGabWVnDenlmLc99qssE.crl (hash: 1LWaU06n0WrT6HDqzdpPbEt5BVUBcj6c3BsIMqg06S8=)
                          2: 8612CEC8A8A911EFB887DDA0762E951A.roa (hash: GTU21iNyjdIeL6dIGxKDjmWXXd/5ZvujPdaZWrQ4o/0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F273DAF/serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
        Validity
            Not Before: Jan 31 03:13:51 2025 GMT
            Not After : Feb  2 03:13:51 2025 GMT
        Subject: CN=679c3ff0-4531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:58:b9:41:9f:c9:6c:bb:f0:33:83:e4:26:74:
                    95:60:79:5e:27:71:6f:93:0e:f7:47:25:96:49:31:
                    e5:a4:a1:45:30:5d:62:5c:bc:9e:e9:dd:bd:d9:7a:
                    b8:d9:b5:52:cc:8c:24:2d:e5:9c:8b:46:d1:a2:f4:
                    97:15:44:d1:e0:c3:c2:70:94:aa:7a:12:16:f3:85:
                    7b:af:9e:1d:f2:33:b7:4b:c2:fd:7c:dd:4a:f0:e6:
                    9e:da:de:28:5f:75:d1:88:7c:e8:19:59:01:40:f3:
                    84:59:1c:90:d2:b6:43:02:18:c4:10:dd:4b:81:fc:
                    0c:55:4f:d4:55:cd:3b:6a:d5:59:9f:df:aa:f3:75:
                    40:f6:b9:7b:c7:5d:0c:36:77:3e:24:84:19:c4:b2:
                    38:f9:b7:1e:3d:02:d0:fc:a3:b5:b3:c9:32:02:34:
                    0e:6b:5d:03:02:e8:18:18:76:c1:40:36:b9:00:6c:
                    9a:4c:7c:f3:3d:96:95:56:35:f9:1a:68:d4:e4:5a:
                    7b:bc:51:73:e4:03:c4:79:60:3e:24:bb:73:a1:fa:
                    c5:fa:8e:08:45:73:28:e0:41:21:22:77:af:1c:ae:
                    91:a1:37:a2:4f:51:20:1d:0f:c8:49:93:3b:7d:d5:
                    69:4c:00:ba:f8:a4:df:0b:50:83:ad:53:9c:fd:1c:
                    c2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4C:4B:12:4D:67:61:9B:58:F5:54:13:2B:98:4D:96:83:EF:D3:49
            X509v3 Authority Key Identifier:
                keyid:D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:42:a2:30:54:1c:cd:17:9c:9d:83:f2:e0:16:42:4c:d2:c3:
         eb:58:7d:5e:8d:fa:b9:05:11:9f:42:41:b8:2d:e5:c2:a5:62:
         f6:ec:c4:ab:1c:3e:3e:4e:82:f2:4a:f9:79:54:6e:88:25:2c:
         f5:0f:47:31:11:a0:3e:ab:09:cd:0b:00:63:90:bb:6d:42:95:
         94:8b:ef:24:a6:89:70:e1:a2:99:ef:35:b9:13:e2:4d:b8:0f:
         35:88:9d:f5:f5:6e:a8:b5:45:ce:5c:97:f9:58:31:cf:2c:c5:
         14:c0:84:3f:10:94:60:11:54:82:39:86:08:22:90:e7:8c:cc:
         e3:7b:65:41:00:6d:4a:66:14:88:e1:9a:9c:e6:e8:d4:d4:0b:
         b4:8e:ed:f1:31:0e:7a:15:88:ca:02:6c:fa:c3:83:3a:06:72:
         af:0a:70:7c:7d:60:0f:2d:a7:8f:3a:3d:d5:e7:1d:4e:5d:be:
         34:96:f9:c6:b1:19:70:de:eb:c8:8a:42:6f:5c:59:83:dc:37:
         ff:90:79:ab:79:d9:8d:94:d4:3f:06:5e:47:fc:80:4a:9d:8d:
         29:fc:4e:57:78:e7:e2:1e:10:33:0d:c1:c5:98:f5:04:5a:31:
         f6:0d:4c:b5:49:f0:d5:24:47:8b:4d:28:90:a5:09:62:70:1f:
         f7:7a:cc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:42:06 2025 by rpki-client