Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.mft
File:                     84JvO10k9ky2D4xgx121GaDHprc.mft (raw, json)
Hash identifier:          zrL5BJvdWQ26x+hgE7p6YP/WAVe+HaGe7Gq8zxVJv3w=
Subject key identifier:   72:03:0E:40:37:25:DE:54:1D:95:D9:88:F6:25:F1:AA:DE:2D:8D:B4
Authority key identifier: F3:82:6F:3B:5D:24:F6:4C:B6:0F:8C:60:C7:5D:B5:19:A0:C7:A6:B7
Certificate issuer:       /CN=F36F7C77AF/serialNumber=F3826F3B5D24F64CB60F8C60C75DB519A0C7A6B7
Certificate serial:       0397
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.mft
Manifest number:          0393
Signing time:             Fri 31 Jan 2025 02:12:22 +0000
Manifest this update:     Fri 31 Jan 2025 02:12:22 +0000
Manifest next update:     Sun 02 Feb 2025 02:12:22 +0000
Files and hashes:         1: 84JvO10k9ky2D4xgx121GaDHprc.crl (hash: JVmK8kFBswUyrCQjtJYRq/pUJfcgdtti5kV1sBuMAvM=)
                          2: 112E2C72603C11EDA2A8E38DF1222468.roa (hash: VpBEbXpxKbJILffmsqj/OzTnQUQOEkM/MEBPomChOT8=)
                          3: C6182334346011EDA12A24EEF1222468.roa (hash: jH3sitVp68SYd4QD/dRUfuzvSquAJDcEaHoiP8qtVAY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F7C77AF/serialNumber=F3826F3B5D24F64CB60F8C60C75DB519A0C7A6B7
        Validity
            Not Before: Jan 31 02:12:22 2025 GMT
            Not After : Feb  2 02:12:22 2025 GMT
        Subject: CN=679c3186-7671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:93:f1:c0:a4:73:a4:76:d9:33:89:e9:a0:2a:
                    1f:96:8a:80:4c:1a:95:70:6d:6c:f9:d1:92:0d:be:
                    af:4d:7b:c9:9b:43:f7:58:b7:2c:e4:e1:14:fb:67:
                    26:5c:97:b7:ba:b0:c3:b6:f1:e6:3c:58:6b:32:1c:
                    54:b6:89:f8:e6:8b:01:8f:e5:66:aa:ab:21:e4:a4:
                    1e:76:22:23:1e:3b:18:61:4e:6d:c5:1e:25:1d:5a:
                    2f:8e:cd:e1:a2:31:e9:87:0a:24:68:b1:53:59:dd:
                    8b:88:56:a0:f1:c7:d6:df:f3:33:c9:a1:c6:45:ca:
                    4f:93:50:9f:ec:4a:c6:fe:63:60:33:e5:f9:39:12:
                    bd:47:eb:70:ec:9d:5c:2d:38:cc:22:76:76:44:f4:
                    62:9f:34:e1:c8:35:a5:56:63:db:88:d2:bc:ad:53:
                    72:12:2e:15:d4:a9:6d:a0:b3:8e:23:13:d0:7f:42:
                    61:55:66:c2:dc:f1:4d:41:ac:8f:0b:f3:df:6e:1e:
                    9d:35:af:99:6b:b6:aa:83:a6:6b:09:76:fe:68:e7:
                    5f:0b:d3:90:58:2d:15:fd:04:c3:75:48:56:fd:e3:
                    cc:b9:22:0a:a2:dc:59:92:d5:80:43:4b:22:f4:e9:
                    b4:3b:e3:cd:b3:f3:18:28:00:5a:a6:ed:a6:7b:c2:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:03:0E:40:37:25:DE:54:1D:95:D9:88:F6:25:F1:AA:DE:2D:8D:B4
            X509v3 Authority Key Identifier:
                keyid:F3:82:6F:3B:5D:24:F6:4C:B6:0F:8C:60:C7:5D:B5:19:A0:C7:A6:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/84JvO10k9ky2D4xgx121GaDHprc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7C77/E5A10452345E11ED9CF653E9F1222468/84JvO10k9ky2D4xgx121GaDHprc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e7:3a:16:fd:61:12:a1:93:09:6f:01:cc:b8:67:65:df:54:
         6a:d8:c9:b0:de:05:23:20:1b:43:dd:60:bd:2c:68:df:97:be:
         52:11:ee:4d:1b:87:6d:54:0c:88:07:9a:00:3f:17:36:de:1c:
         f3:6a:27:e2:21:7b:c1:bc:de:df:a4:e3:51:8f:c3:af:24:10:
         a0:c0:c7:53:b0:f9:73:2c:22:26:f2:a3:1b:96:91:4a:77:00:
         9a:f6:32:e7:76:19:c3:b1:c5:99:fb:41:ec:f3:44:6f:a5:81:
         aa:a7:42:17:e2:85:f9:c9:ff:81:84:51:68:6f:ae:74:63:67:
         4f:a2:49:8f:49:c1:c1:19:f6:4b:af:a0:15:5c:9d:21:91:15:
         eb:94:65:19:05:32:e9:e1:35:30:36:b4:98:af:f5:92:d3:14:
         84:5d:c7:04:0c:47:29:db:df:b1:84:6a:0f:cf:f8:da:6f:23:
         96:d8:22:ff:ef:b9:8b:a0:c7:dc:24:bd:65:d8:87:15:49:19:
         b2:eb:e0:57:a6:07:7d:28:e3:f8:02:19:64:cf:cb:c5:3d:51:
         24:9e:a0:aa:41:57:96:13:46:c2:9b:2d:68:d3:85:68:df:76:
         71:88:39:79:82:36:55:2b:f7:e7:97:c6:af:2a:05:e3:39:b5:
         bb:f7:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:00:31 2025 by rpki-client