Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
File:                     2qhy_5oERGtxio2fR1VL-lgbOg4.mft (raw, json)
Hash identifier:          7DCbmh1hTYROEqHGy3eE97GrAceU/axjZjyc+T4F34Y=
Subject key identifier:   F8:CA:47:B3:E8:C0:91:76:FA:07:24:67:2F:C3:2B:BD:12:46:BD:A8
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Certificate issuer:       /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial:       BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
Manifest number:          A7
Signing time:             Sat 29 Mar 2025 03:41:58 +0000
Manifest this update:     Sat 29 Mar 2025 03:41:58 +0000
Manifest next update:     Mon 31 Mar 2025 03:41:58 +0000
Files and hashes:         1: 2qhy_5oERGtxio2fR1VL-lgbOg4.crl (hash: HBAoS713H/oKTYBYK9n4BrpmnmqAi+W5iVmxjqA9n/I=)
                          2: 7D874958B87D11EFB3643257762E951A.roa (hash: onul5/YLBBz+YGmXUqj+3gM9pVUef26/bXQij1jV9rY=)
                          3: 3D775376B87D11EFAB4FF956762E951A.roa (hash: b6euF38rD57vl3/+UQug0tSlMLOGy1TjPgA9WLcJx/k=)
                          4: 5A3BE2FAB87E11EF981C545D762E951A.roa (hash: iiNCcB7diX0XVv+jA4F51IRnj9i5QGDFj/H4TV2LPnA=)
                          5: 8BF912DCB8C311EFBA768387762E951A.roa (hash: 4MzJryMeE1qGlBnjDKdwaAv93aYiFWEXltRxjKpruGs=)
                          6: 378108EEB87E11EF81427D5B762E951A.roa (hash: pvxHcsYPa0Lv9jDaQ8hW3DYwerAD0pRgtEnW8FTTQOg=)
                          7: B3D4A0FAB87D11EF99011259762E951A.roa (hash: pJknO3SfyaIF7Mf7TXt63Y5B2q/zY499L4XbyGAJGWw=)
                          8: 5C024D8CB87D11EFB7C42257762E951A.roa (hash: NFBzy2Yi/mXJiGIrYLnb6yECZlLOSbsf4t2bOiNIZd8=)
                          9: 98F59802B87D11EFBDAE0659762E951A.roa (hash: McIOupeXZ3ZuHvVifTjAnpDUlUDytTyutBT9QiQDcHw=)
                          10: FC601FE8B87D11EFB11B5D5B762E951A.roa (hash: kMhymzWCs2TuT+6gLYGn8unjH29vHiUNHpcIxz2N4+Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362793FAF
        Validity
            Not Before: Mar 29 03:41:58 2025 GMT
            Not After : Mar 31 03:41:58 2025 GMT
        Subject: CN=67e76c06-9b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:53:07:9c:50:40:81:c0:a2:3c:5e:1c:cc:
                    9c:ca:01:63:bc:62:cc:d9:fb:f8:74:a5:b5:8e:a9:
                    ea:de:5c:af:15:36:c0:dd:c2:04:75:0f:0d:67:c2:
                    5c:62:44:00:d9:fe:ce:e6:03:e6:b9:fd:96:2e:15:
                    6f:c2:75:5c:c4:78:27:f2:11:b6:33:a8:43:41:18:
                    bc:2d:ce:c2:68:eb:32:f4:f0:16:f3:ef:61:b5:ab:
                    74:87:7e:c6:7f:24:b0:79:eb:3f:e7:f3:27:87:2f:
                    f4:96:74:e3:4f:cc:41:b5:31:01:47:39:1a:3b:2d:
                    66:e7:11:74:e6:80:30:c8:1d:e8:a4:17:89:0b:be:
                    ac:c5:b4:e6:39:a2:bd:e2:e4:55:10:9b:2a:a2:a7:
                    54:e7:73:69:6b:f1:c3:e1:11:48:eb:72:ee:56:cd:
                    26:20:60:2c:96:a5:96:2d:db:6a:6c:6f:58:8f:b6:
                    a6:d2:af:52:fb:95:17:ca:c5:2d:19:2e:9a:03:9f:
                    f4:c9:3d:45:63:2b:9b:9e:a7:b8:10:6e:14:61:b3:
                    75:0c:a5:67:f7:2c:02:5a:d1:f0:e8:7b:9c:d9:d9:
                    64:1e:d2:9c:34:29:b4:e8:de:60:46:be:b4:56:26:
                    ba:52:2e:8e:8d:e2:bd:f0:20:e7:25:8f:e7:4c:fb:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CA:47:B3:E8:C0:91:76:FA:07:24:67:2F:C3:2B:BD:12:46:BD:A8
            X509v3 Authority Key Identifier:
                keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4e:ee:a2:fc:21:29:d4:b5:ee:fe:55:94:49:34:74:7d:39:
         9b:81:aa:7f:b0:0d:ad:18:02:70:bc:73:55:1a:a5:b9:92:27:
         7e:55:96:2d:8f:77:65:43:97:dd:f5:2b:44:0b:56:24:0a:e7:
         09:79:a4:ad:ea:a8:8f:d8:84:8a:81:74:03:f9:12:30:d0:b7:
         e2:73:29:81:df:95:77:3e:6c:ab:37:e0:04:c4:49:34:1f:0d:
         17:db:a6:ec:86:f8:6c:55:3e:2f:86:4b:cd:25:f5:9b:d5:f2:
         58:2e:59:f1:07:e1:25:3a:b8:7e:81:48:85:15:ac:47:3f:70:
         d4:36:1e:3e:2e:59:6e:8b:15:7e:b7:0f:61:9b:a1:c6:09:a4:
         9c:06:d6:c9:f9:24:ec:92:1a:53:8e:f1:da:b8:a4:fe:09:45:
         59:a9:35:03:02:ed:be:90:f0:3f:4e:5b:d2:39:ae:e2:a7:5a:
         e7:ee:04:cf:91:6d:ed:83:c7:28:7c:0a:a1:32:d3:b1:43:24:
         d2:cc:94:5f:97:b9:46:ed:79:ed:41:cb:3c:fa:74:c6:2f:d8:
         0d:0f:98:82:86:d8:2a:72:0e:e9:cb:ae:93:76:26:30:d8:2b:
         2f:86:5a:90:8e:8b:90:a8:b3:f8:a5:ed:5d:cc:27:67:03:b8:
         7e:a7:d7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:12:37 2025 by rpki-client