Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
File:                     cvCHQUzi30S8T03_W-EUenpxqa4.mft (raw, json)
Hash identifier:          D0zSoyUKAalp/WuQSZ4Q7oc1VRyCIwVvy1f28IHKIcA=
Subject key identifier:   C1:6A:5E:24:F2:2F:AB:A5:60:9A:BE:7E:97:DD:6B:4C:FF:13:0E:26
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Certificate issuer:       /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial:       041C
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
Manifest number:          0419
Signing time:             Sat 29 Mar 2025 02:32:14 +0000
Manifest this update:     Sat 29 Mar 2025 02:32:13 +0000
Manifest next update:     Mon 31 Mar 2025 02:32:13 +0000
Files and hashes:         1: cvCHQUzi30S8T03_W-EUenpxqa4.crl (hash: mdW3D2ZKZru87tJj4IO3nTR7ztK3y5bncgClxFIvdIM=)
                          2: F4B1DA0EF3B111ECBA4AC98DF1222468.roa (hash: BVR/waIvVkSnH8oG4jnugPkg0mpFTH8yh9hr63T0ym4=)
                          3: 467B6CDCF25A11ECB0A197C5F1222468.roa (hash: nyazJHmgaeSaThwXQennWPk+RG7afiy2fNVDqJDY42s=)
                          4: 435EB3FCF3B211EC9945E28EF1222468.roa (hash: qvMEmdrAoicNI7c3xjrgpNk9h06NSfKZgjizbA2v3kE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1052 (0x41c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617560AP
        Validity
            Not Before: Mar 29 02:32:13 2025 GMT
            Not After : Mar 31 02:32:13 2025 GMT
        Subject: CN=67e75bae-924d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:55:e0:00:7e:0f:3f:aa:dc:dd:ee:fc:72:f7:
                    9d:53:25:86:cb:9a:ad:99:ae:97:ae:07:54:7c:a1:
                    a4:0f:0e:7c:7b:c9:b0:77:7f:47:65:76:07:69:93:
                    9f:02:9e:fc:6e:2d:c7:f8:4c:d4:ef:84:7f:f9:d9:
                    7d:d0:e8:9c:19:f1:f3:0f:ad:93:bd:34:54:53:79:
                    15:90:3f:ee:1e:2e:3d:e2:20:3e:a0:5a:b1:38:65:
                    ee:39:cd:82:ce:2d:9c:28:70:c2:3e:1d:96:13:6a:
                    5f:07:3d:17:31:71:dc:7c:8b:36:cb:98:59:d6:3c:
                    69:2f:e2:8b:12:d2:bc:9c:78:b9:27:c1:c7:85:51:
                    fd:c5:f8:72:ad:32:c1:04:0a:95:66:00:4b:a4:1e:
                    71:48:31:66:07:29:28:87:b7:d2:76:b1:5c:63:2f:
                    37:14:40:a1:d9:a3:54:d8:2d:30:3b:e1:a4:e7:52:
                    8f:33:14:8c:45:11:72:f0:cb:f9:87:9f:e2:44:b9:
                    0e:1b:2b:96:5f:67:81:07:73:6a:10:c9:87:3d:05:
                    24:d4:d4:02:9e:28:ed:62:a3:9a:74:06:d7:25:da:
                    14:29:60:31:fb:ae:ac:ad:c6:3a:70:e8:7c:61:a8:
                    87:b4:1e:92:d0:47:5b:3c:a2:4c:f7:69:c2:2f:8a:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6A:5E:24:F2:2F:AB:A5:60:9A:BE:7E:97:DD:6B:4C:FF:13:0E:26
            X509v3 Authority Key Identifier:
                keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:5b:f8:1d:2d:14:a7:90:39:33:42:5f:a9:31:db:bb:7a:30:
         e4:ce:c2:81:be:41:bc:f6:09:f5:ea:81:a5:5b:1c:51:2a:5c:
         8c:32:ac:34:b6:64:52:27:21:36:b3:71:38:2e:9d:9e:e7:1b:
         b0:4b:cd:98:ca:7f:98:94:80:42:ed:f2:0a:3d:5e:e0:6a:c4:
         5e:01:a1:b2:20:b2:12:3f:d7:e1:c8:cd:c6:18:42:57:82:4f:
         a5:4e:41:bc:46:ca:a1:fd:45:8c:56:b2:7d:4f:c3:cc:02:d1:
         d0:c1:09:c8:ae:cf:8b:d0:f0:24:1b:eb:92:c6:85:45:25:93:
         0d:db:b1:43:08:74:d1:53:44:1e:2c:47:06:d4:cd:7f:76:d0:
         13:46:70:6e:15:58:f0:37:43:65:24:08:d0:a2:5d:d9:98:54:
         c4:49:c7:17:d7:47:84:02:8a:9a:d2:86:4a:c9:cf:10:ec:f7:
         40:2a:d7:53:fa:41:ef:d5:40:3e:14:35:db:5f:e3:84:9c:ed:
         d1:e0:9c:3e:b6:91:63:4a:30:db:f8:38:20:1a:09:2b:2b:8b:
         89:df:95:79:23:55:d9:4b:d2:4a:1b:eb:8d:81:e7:f2:25:f2:
         35:be:e5:1d:46:8d:3f:f3:73:e9:23:f2:34:d3:ce:5b:87:e5:
         7a:ac:92:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----