Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
File:                     S7AyYfFNBLALJrKXJeQg7lOe-sE.mft (raw, json)
Hash identifier:          1xKee65AQFLkFUv7jq9ysSyaasm99wtyPkVFCD4FiEY=
Subject key identifier:   3F:E1:04:E9:54:17:6B:48:F2:5B:69:6D:94:EF:DA:5D:F5:BA:16:0A
Authority key identifier: 4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1
Certificate issuer:       /CN=F36F62C3AR/serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
Certificate serial:       0DC2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
Manifest number:          0DBC
Signing time:             Fri 31 Jan 2025 00:53:03 +0000
Manifest this update:     Fri 31 Jan 2025 00:53:03 +0000
Manifest next update:     Sun 02 Feb 2025 00:53:03 +0000
Files and hashes:         1: S7AyYfFNBLALJrKXJeQg7lOe-sE.crl (hash: W+LSAwGpGgFLRXb0QgOmdzX/iomKjKYmIoCTf7/k5uM=)
                          2: 3467C85EB57811EFBB258E50762E951A.roa (hash: 7B5t76JYb0weJx5foAylkCd79y67MwjACrJXbPrLiGo=)
                          3: 3F711DA2B57511EF9BE2B9BD762E951A.roa (hash: HY6X5qdCvMeHk+soAwWe9vEEWgfGLOX8rrjzYU1Pl8w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3522 (0xdc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F62C3AR/serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
        Validity
            Not Before: Jan 31 00:53:03 2025 GMT
            Not After : Feb  2 00:53:03 2025 GMT
        Subject: CN=679c1eef-8a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:79:0b:45:3a:0f:3d:59:19:95:70:cd:10:10:
                    3a:34:3c:7c:3b:bc:cb:9b:53:86:ed:91:2e:d8:1a:
                    4d:ed:ce:0f:fa:34:ec:a9:4c:2d:1c:96:c2:27:d7:
                    49:de:78:1f:09:13:af:ed:ce:93:b3:f4:6e:03:22:
                    25:e1:e0:28:ab:1e:ca:9f:65:48:de:0a:04:a3:96:
                    64:e0:d3:0c:93:3d:f4:05:c5:83:c9:57:b6:89:16:
                    ae:00:54:08:c7:8e:54:2f:78:33:5e:11:9b:73:d6:
                    b0:37:aa:16:ff:c8:01:4e:b6:b4:ec:f9:bb:ed:2f:
                    8e:b1:ec:8b:06:d4:08:f5:90:8f:ab:fe:7f:34:ce:
                    64:c4:1b:3a:1a:35:f7:5c:2e:0c:40:f3:7a:70:a8:
                    94:a7:ec:f0:e6:89:2e:a3:69:2f:61:88:6c:44:c8:
                    ff:ae:ed:44:bf:06:0a:22:40:cd:7b:e8:cc:9c:d5:
                    00:36:19:bb:b0:26:2f:86:cc:fe:18:f2:d4:ea:d8:
                    72:99:bb:7e:e6:18:e8:0a:af:3d:14:37:65:c9:3f:
                    0a:67:84:66:6f:c8:b4:7b:ec:44:d8:7f:d3:7a:0f:
                    b0:a6:f0:73:8c:6e:76:21:64:53:07:98:23:aa:1b:
                    1e:19:a4:4b:22:aa:e6:17:bb:ff:82:d6:9b:01:8b:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E1:04:E9:54:17:6B:48:F2:5B:69:6D:94:EF:DA:5D:F5:BA:16:0A
            X509v3 Authority Key Identifier:
                keyid:4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a1:1e:99:7f:e1:1f:d3:11:35:c5:25:44:04:a3:8d:56:9a:
         03:c6:d6:67:4e:d6:3c:bc:3d:31:40:7c:f6:29:a0:75:96:48:
         32:ea:4d:b0:da:ab:a9:ea:4b:14:49:bb:97:69:05:d1:7c:cf:
         2a:4a:3a:ae:b4:c3:ad:57:64:5d:b3:43:88:e6:77:4f:d1:23:
         cc:77:51:25:aa:95:85:cd:f5:7f:3d:4c:1a:4a:f3:40:86:fb:
         b3:4f:89:25:91:59:78:76:a4:da:cb:f6:b5:d3:f6:15:cd:ae:
         24:9f:bc:b9:a3:db:16:6b:f4:1a:e1:1f:f2:be:af:44:14:d0:
         08:2c:51:07:0b:eb:b1:1e:1c:cc:8f:31:39:22:41:d6:28:02:
         12:fd:e4:11:83:e8:92:a4:56:34:1f:cb:73:e4:9a:5f:43:40:
         6e:08:cf:ec:02:73:8d:e5:75:8b:e1:91:d3:40:61:f5:03:ee:
         0a:bf:7f:81:53:13:89:f4:af:9d:b0:7a:cc:17:21:37:51:c5:
         44:69:f6:34:39:65:53:2c:82:5d:44:15:12:8c:6a:e8:39:60:
         b9:99:a6:44:df:03:e5:cc:4e:6d:63:3b:47:66:20:95:1a:1a:
         41:45:16:7e:b8:38:3f:92:3d:7e:5a:a9:6d:8e:33:f0:c8:72:
         04:29:81:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:39:07 2025 by rpki-client