Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft
File:                     -MJNS9gKXwIabYXN0P8HaD3hcWc.mft (raw, json)
Hash identifier:          SOak8AIwfRQHVPZ3ksN1vvUIZNmN7r5QkM+d1Q364mM=
Subject key identifier:   B4:2E:19:94:69:1D:51:B9:82:F5:65:4D:FD:84:CF:5B:AD:A3:E3:D4
Authority key identifier: F8:C2:4D:4B:D8:0A:5F:02:1A:6D:85:CD:D0:FF:07:68:3D:E1:71:67
Certificate issuer:       /CN=F36FCE84AF/serialNumber=F8C24D4BD80A5F021A6D85CDD0FF07683DE17167
Certificate serial:       03B1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft
Manifest number:          03AF
Signing time:             Fri 31 Jan 2025 02:09:05 +0000
Manifest this update:     Fri 31 Jan 2025 02:09:05 +0000
Manifest next update:     Sun 02 Feb 2025 02:09:05 +0000
Files and hashes:         1: -MJNS9gKXwIabYXN0P8HaD3hcWc.crl (hash: rEaLknArZcfEEb/o0tXvKYMrWS4IodQec0ZcyfXvojM=)
                          2: 6B81950217F211ED90291AC3F1222468.roa (hash: 9rMuozHD63olOv1qL+NCuYVweBLtAzHOnZZr7cPZiqE=)
                          3: D8C3181A903911EDA6ED2F8BF1222468.roa (hash: 9oYuZpgRg7gfP3iqjBXKbTbo2hKXqsEWnWr1xA+1M28=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945 (0x3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FCE84AF/serialNumber=F8C24D4BD80A5F021A6D85CDD0FF07683DE17167
        Validity
            Not Before: Jan 31 02:09:05 2025 GMT
            Not After : Feb  2 02:09:05 2025 GMT
        Subject: CN=679c30c1-aaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:24:d9:c7:2e:4b:fc:1c:20:95:93:93:21:
                    0b:1f:80:06:e3:ae:9a:02:14:6c:f6:70:7d:56:f8:
                    9f:f7:e2:3a:cd:80:91:d3:7b:68:70:97:1f:93:c1:
                    0d:95:40:eb:62:df:5c:6b:db:6b:88:ec:37:47:b8:
                    f8:3f:2b:96:82:11:eb:90:e6:99:2b:e7:8a:2c:ea:
                    1c:a5:d4:88:81:ba:53:8f:20:5b:78:ee:17:fe:84:
                    b9:33:bc:46:6d:d6:2e:20:11:10:5b:28:69:5b:cd:
                    22:21:74:fc:e3:5a:4b:dc:48:d5:46:ae:1f:9f:cc:
                    ad:66:ba:1c:42:33:67:cd:4e:6d:55:01:34:1c:d4:
                    29:aa:35:d3:4b:2c:ba:9e:6e:ee:0f:9a:3d:b7:92:
                    b7:f9:fc:d4:1f:c5:9b:71:8a:45:73:94:1b:75:7c:
                    5c:33:1d:72:ce:99:6c:bd:89:88:a8:db:f5:8a:47:
                    95:64:5f:4a:88:5a:52:57:fa:77:8d:02:70:25:3d:
                    41:3a:99:d0:c0:62:56:ea:de:26:54:6a:4f:55:fa:
                    46:5b:99:6d:e9:f7:c2:22:ea:28:c9:3c:1d:cc:72:
                    d3:c8:e6:f2:3a:86:8a:b1:d7:40:e2:cd:32:37:62:
                    c3:91:d8:9d:ba:8f:00:9e:2f:61:d4:6d:c5:41:b0:
                    6a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2E:19:94:69:1D:51:B9:82:F5:65:4D:FD:84:CF:5B:AD:A3:E3:D4
            X509v3 Authority Key Identifier:
                keyid:F8:C2:4D:4B:D8:0A:5F:02:1A:6D:85:CD:D0:FF:07:68:3D:E1:71:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-MJNS9gKXwIabYXN0P8HaD3hcWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCE84/A8E1336817F111ED9F98A8C0F1222468/-MJNS9gKXwIabYXN0P8HaD3hcWc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8c:46:15:26:47:1e:d6:cf:f7:86:9e:3a:f9:3b:35:ed:16:
         c7:bb:dd:92:94:3d:82:8c:38:d1:87:64:6f:3c:9b:ac:60:4c:
         ed:20:32:81:21:1c:b2:13:a5:05:2c:91:72:5e:6e:9e:37:dc:
         69:0a:14:d1:87:8a:7f:55:bf:cb:12:07:c5:f2:08:03:10:86:
         ed:3c:31:cf:ac:60:11:3c:20:98:f1:22:6b:6d:49:35:8b:30:
         97:de:7d:ad:f6:82:30:10:10:4d:cb:28:95:a7:45:a3:f1:25:
         73:bf:2b:3f:fb:fe:da:79:32:c5:08:3f:d1:24:83:c9:db:40:
         c8:5a:2d:c5:a4:2f:3c:6d:ae:0e:91:bd:97:75:ae:47:35:1b:
         eb:0d:2f:70:ec:18:bd:24:c9:32:35:89:01:44:a3:fa:51:d1:
         67:92:bf:0f:24:38:c5:1d:46:a2:0c:67:93:9a:3e:51:72:20:
         12:78:ee:dc:ac:f6:23:4d:16:00:5a:e6:b1:a0:b7:db:35:10:
         aa:2f:c5:3f:c5:ca:31:3d:ad:18:2f:cc:ce:79:ba:08:a7:1d:
         f9:1f:ab:ea:78:85:c4:3c:28:be:58:6a:75:29:6f:bc:b0:95:
         c1:20:9e:be:43:84:b6:7d:74:6c:80:cc:7f:3a:0d:ff:e5:11:
         66:6c:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:29 2025 by rpki-client