Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          L/ltOfRUqgVKN3kaau3s6seYtEaOUnZUwGbDlV2uiic=
Subject key identifier:   BB:6F:F9:2E:FC:A4:17:8F:68:AD:CC:3C:73:36:E6:41:64:89:F9:85
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       0384
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          0383
Signing time:             Fri 31 Jan 2025 02:12:59 +0000
Manifest this update:     Fri 31 Jan 2025 02:12:58 +0000
Manifest next update:     Sun 02 Feb 2025 02:12:58 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: QSW5pXY8o1nrl5oIFuBg1dzcuTApmMXahni+rT5lTak=)
                          2: 8FD98C2038B311EDAAA5E7DFF1222468.roa (hash: UXAWeOCC1criU7XL7P2zWbiZAhjMbu4dS0oFzWgmmoM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900 (0x384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Jan 31 02:12:58 2025 GMT
            Not After : Feb  2 02:12:58 2025 GMT
        Subject: CN=679c31ab-b7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:89:1c:6e:e5:b1:d1:f4:3b:5f:2f:28:c4:56:
                    12:78:26:a5:70:da:1e:91:5c:54:19:07:68:a7:01:
                    45:65:17:cb:a3:c9:23:b1:59:ec:0c:f8:2e:a3:44:
                    cd:d1:ba:d4:80:18:bd:79:97:6b:d3:79:b7:ae:df:
                    ac:64:48:26:fb:1b:65:53:57:f4:f3:dc:3b:cd:c0:
                    83:ad:4f:c4:aa:89:52:8f:2a:dc:e6:2c:ff:30:3d:
                    06:8a:7c:8d:0e:7b:6a:d2:a3:08:41:f6:60:78:9e:
                    2d:f8:a0:b8:96:39:29:f0:91:7b:9c:4c:6e:3c:e8:
                    4c:ae:71:c0:68:f4:3c:e3:48:9f:b6:a0:64:37:13:
                    e7:f6:45:1c:d0:73:a1:9e:1b:10:4e:d7:d2:25:b8:
                    80:e2:22:c1:73:53:2e:bf:96:39:ac:e0:9f:fb:34:
                    c4:51:e3:21:1b:03:6e:79:ff:d5:d2:7a:84:42:0f:
                    b3:f7:fd:86:06:bc:a7:29:fb:34:dd:1d:60:5e:22:
                    bc:67:50:f7:fd:73:1d:b1:38:d4:a7:5f:6c:92:2c:
                    9f:ff:25:d6:10:00:62:17:aa:ad:a7:7f:21:cd:50:
                    98:9e:30:e6:75:36:ad:6d:2a:f2:10:b8:95:12:50:
                    4a:0b:ac:ff:32:ce:4d:12:36:63:e4:be:52:e7:3f:
                    e8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6F:F9:2E:FC:A4:17:8F:68:AD:CC:3C:73:36:E6:41:64:89:F9:85
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:1d:52:7b:5b:a8:47:e7:1a:c8:28:bc:ac:67:63:0c:0d:fe:
         52:1d:40:49:5e:6a:f2:7f:e9:a0:74:53:43:d7:98:0e:fc:15:
         0b:a0:e1:f0:91:01:a7:30:1a:50:e6:8c:97:53:fb:41:0d:cb:
         8f:73:c0:a6:f3:fb:f7:64:8a:42:8c:74:4d:3b:de:1e:88:d2:
         18:41:4b:98:5c:74:12:42:ee:75:3e:29:1c:c4:58:60:94:55:
         df:d8:6a:e7:12:83:30:38:e3:c3:4e:4c:d5:ce:95:c4:24:c7:
         dd:8a:d3:b3:76:6d:df:33:1e:09:11:55:df:a5:80:62:26:ac:
         e7:a2:f1:fd:50:99:51:d3:2e:3a:f4:87:28:42:1f:d7:1d:c6:
         c5:81:28:36:97:6b:41:74:65:55:f2:5a:1f:8f:e5:c3:7f:3d:
         3e:16:52:bc:d0:b1:b5:ea:1a:b0:7b:e1:e8:25:e6:b0:12:a1:
         60:ce:0f:56:b4:3b:6f:72:4d:ee:26:cb:46:5c:fd:69:03:de:
         19:c7:cd:a2:12:e1:df:91:25:1f:24:eb:89:f4:39:51:90:f8:
         ca:f6:54:ac:2f:2a:58:eb:d1:71:2f:55:e8:ff:80:2e:fd:3d:
         a1:9d:73:01:e2:a1:72:19:57:ef:27:78:9c:bf:f5:52:6e:ce:
         99:b9:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:04:10 2025 by rpki-client