Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
File:                     ePyy5tDIIPu5vVgQYfogSi1R9BI.mft (raw, json)
Hash identifier:          FYrQMHPlDYr/Er+ed2cPEMJmJqAoQJ3VV/T+wIvHnuM=
Subject key identifier:   26:08:7C:E6:91:E6:73:6E:8D:B4:41:80:03:B1:D2:37:CE:CC:B9:A7
Authority key identifier: 78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12
Certificate issuer:       /CN=F36FABDEAF/serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
Certificate serial:       01F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
Manifest number:          01F3
Signing time:             Fri 31 Jan 2025 02:40:00 +0000
Manifest this update:     Fri 31 Jan 2025 02:39:59 +0000
Manifest next update:     Sun 02 Feb 2025 02:39:59 +0000
Files and hashes:         1: ePyy5tDIIPu5vVgQYfogSi1R9BI.crl (hash: Xivl8fECaDaBHNARs2CtNnAO+dmQUX++YbpKaUP/Pjg=)
                          2: D64EDDEE6E5F11EEBF42781C4AD9E6FC.roa (hash: wwS9H3v6Oq2KT+bOS8yPt+2S5/l9UTYbItXO4BiUcNQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FABDEAF/serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
        Validity
            Not Before: Jan 31 02:39:59 2025 GMT
            Not After : Feb  2 02:39:59 2025 GMT
        Subject: CN=679c3800-3359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:7b:d7:38:4f:0a:a0:a3:f3:a7:ae:4e:7e:
                    f0:27:8d:c2:fe:ce:52:cb:11:7a:64:7a:c8:25:e2:
                    10:88:1c:2d:9c:ad:54:33:fd:d8:a8:6a:c2:b2:81:
                    d3:9e:9c:00:32:48:78:c2:eb:9f:d9:68:36:1d:7e:
                    2f:cb:15:18:be:b6:f6:fd:d7:dc:d9:d0:23:61:77:
                    be:f2:1c:05:37:8c:d1:91:dd:42:e5:ab:94:cd:26:
                    75:05:db:c5:40:d1:7e:0c:b7:8f:43:1a:ef:d6:66:
                    f2:14:74:5e:70:6f:c9:ea:9d:02:ec:3e:1e:87:ab:
                    79:07:0b:9a:96:ef:ae:70:cf:25:5f:2a:b2:ef:82:
                    98:d7:e3:67:78:68:da:c8:c0:e0:f4:13:fc:69:b7:
                    15:da:90:f2:d9:fc:dc:a5:96:69:f5:71:fe:e5:7f:
                    54:53:8d:ca:fc:78:75:6c:54:75:f0:6c:92:e6:71:
                    6f:8d:c0:81:0d:99:4e:eb:ee:1d:a3:d6:e4:3b:19:
                    56:a9:e3:66:56:99:e3:68:fa:26:f2:90:a5:96:e6:
                    11:f8:9a:a5:b8:ac:dc:1a:d3:8c:e6:50:69:c0:19:
                    5d:4f:d9:3e:56:12:7b:ff:8a:b3:02:28:53:ab:1e:
                    cc:aa:54:2c:e2:5f:c1:fb:73:f0:f3:c1:82:07:ed:
                    c5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:08:7C:E6:91:E6:73:6E:8D:B4:41:80:03:B1:D2:37:CE:CC:B9:A7
            X509v3 Authority Key Identifier:
                keyid:78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a4:5b:11:95:40:99:ec:7f:52:5e:38:ac:5d:f2:23:c8:80:
         28:f3:e0:a5:e8:a3:18:cc:80:a2:fe:c1:c5:6b:72:37:0a:c5:
         51:b0:dd:12:80:19:e7:59:fb:1d:3b:2f:5a:95:39:03:05:b4:
         67:da:1d:f8:ad:23:88:4f:f2:e0:bc:75:b3:5a:12:0d:1a:b1:
         84:b1:68:ae:b1:f4:8a:e2:99:dc:15:c7:2f:92:f8:45:73:a1:
         9b:b9:14:94:d5:13:2c:1c:4c:76:6e:30:99:fc:a5:a0:ce:9b:
         65:1e:32:f9:fa:bd:2f:a5:1b:5a:18:f6:69:98:54:e4:76:7d:
         23:c2:0d:72:51:ba:d9:7a:10:a7:75:4b:c7:17:9b:2d:7e:48:
         7a:71:0f:62:ae:f1:e7:5d:e9:98:e6:4b:cf:b9:39:fe:62:61:
         9e:2a:3d:e4:a8:77:cc:75:0e:90:c9:b6:1c:b7:65:3d:44:74:
         83:de:cb:0e:87:67:a5:d2:f4:25:d8:95:4f:18:53:21:d4:69:
         0a:6a:65:a9:89:ab:d5:cc:a2:17:0f:6a:8a:bc:0f:fa:1d:a1:
         27:cb:d1:48:37:e1:d5:1b:0f:e2:cb:90:28:fa:7a:a2:ae:28:
         c3:c3:bc:a4:02:d0:de:11:cb:f3:d4:f0:4f:77:b0:15:57:08:
         72:51:d1:3a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkFCREVBRjExMC8GA1UEBRMoNzhGQ0IyRTZEMEM4MjBGQkI5QkQ1ODEwNjFGQTIw
NEEyRDUxRjQxMjAeFw0yNTAxMzEwMjM5NTlaFw0yNTAyMDIwMjM5NTlaMBgxFjAU
BgNVBAMTDTY3OWMzODAwLTMzNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDINnvXOE8KoKPzp65OfvAnjcL+zlLLEXpkesgl4hCIHC2crVQz/dioasKy
gdOenAAySHjC65/ZaDYdfi/LFRi+tvb919zZ0CNhd77yHAU3jNGR3ULlq5TNJnUF
28VA0X4Mt49DGu/WZvIUdF5wb8nqnQLsPh6Hq3kHC5qW765wzyVfKrLvgpjX42d4
aNrIwOD0E/xptxXakPLZ/Nyllmn1cf7lf1RTjcr8eHVsVHXwbJLmcW+NwIENmU7r
7h2j1uQ7GVap42ZWmeNo+ibykKWW5hH4mqW4rNwa04zmUGnAGV1P2T5WEnv/irMC
KFOrHsyqVCziX8H7c/DzwYIH7cVbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJgh8
5pHmc26NtEGAA7HSN87MuacwHwYDVR0jBBgwFoAUePyy5tDIIPu5vVgQYfogSi1R
9BIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBQkRFLzI0MjkxRTA4NjcxNzExRUU5NkI0OEY2NTRBRDlFNkZDL2VQeXk1
dERJSVB1NXZWZ1FZZm9nU2kxUjlCSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2VQeXk1dERJSVB1NXZWZ1FZZm9nU2kxUjlCSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkFCREUvMjQyOTFFMDg2NzE3MTFFRTk2QjQ4RjY1NEFE
OUU2RkMvZVB5eTV0RElJUHU1dlZnUVlmb2dTaTFSOUJJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9pFsRlUCZ7H9SXjisXfIjyIAo8+Cl
6KMYzICi/sHFa3I3CsVRsN0SgBnnWfsdOy9alTkDBbRn2h34rSOIT/LgvHWzWhIN
GrGEsWiusfSK4pncFccvkvhFc6GbuRSU1RMsHEx2bjCZ/KWgzptlHjL5+r0vpRta
GPZpmFTkdn0jwg1yUbrZehCndUvHF5stfkh6cQ9irvHnXemY5kvPuTn+YmGeKj3k
qHfMdQ6QybYct2U9RHSD3ssOh2el0vQl2JVPGFMh1GkKamWpiavVzKIXD2qKvA/6
HaEny9FIN+HVGw/iy5Ao+nqirijDw7ykAtDeEcvz1PBPd7AVVwhyUdE6
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:01:30 2025 by rpki-client