Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
File:                     UJrkB4CHuVMUvanvade7dIgcL94.mft (raw, json)
Hash identifier:          Q0UWIco2bbcoV8mhb8iAwZAusZYM02IvxNIrxqHlUQs=
Subject key identifier:   75:A2:3A:73:D9:3B:C4:BA:0F:45:BF:A8:FE:64:5D:FF:26:75:C7:BA
Authority key identifier: 50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE
Certificate issuer:       /CN=F3630501AF/serialNumber=509AE4078087B95314BDA9EF69D7BB74881C2FDE
Certificate serial:       CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
Manifest number:          C6
Signing time:             Sat 29 Mar 2025 03:38:25 +0000
Manifest this update:     Sat 29 Mar 2025 03:38:24 +0000
Manifest next update:     Mon 31 Mar 2025 03:38:24 +0000
Files and hashes:         1: UJrkB4CHuVMUvanvade7dIgcL94.crl (hash: EnMC0qDzfOipaROrabfgRTV9yUIWsSU2yeeZnXKkeII=)
                          2: FCFCC1C67A7111EF9AF36551762E951A.roa (hash: qrAboZUTqac+Q2mxl59aHmWOevvURvqrYd1DnspbsRc=)
                          3: 8CB5168E7A7111EFA28C7C4D762E951A.roa (hash: wxbx8f56MZI34oPvLMhsBGgkuRggcFGrbjCG/8PfNq8=)
                          4: 077D2872950A11EF882E6662762E951A.roa (hash: FmMHw1MbWECOIR2uR6bUIj//ZenNUVJQZYWgci9jbBo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630501AF
        Validity
            Not Before: Mar 29 03:38:24 2025 GMT
            Not After : Mar 31 03:38:24 2025 GMT
        Subject: CN=67e76b31-e39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:ef:5d:ef:d0:27:59:5b:06:ff:4f:87:22:
                    72:4c:11:9e:9d:b6:e2:e1:75:83:72:27:e0:26:5e:
                    3a:30:2d:62:ce:19:70:f2:ab:82:ca:35:87:1a:01:
                    71:e4:20:f8:ce:60:0c:6d:27:16:64:c2:22:d6:4f:
                    23:7a:92:ed:c0:c4:b6:30:04:1b:14:6a:d9:66:10:
                    e4:57:56:ba:1f:fe:3e:bf:7e:83:44:00:b2:89:80:
                    7f:61:0d:7b:82:3e:32:48:d7:cc:aa:dd:2f:4c:41:
                    13:af:78:dd:78:7b:61:a3:3e:71:b6:13:7f:08:31:
                    37:b8:78:19:2e:5c:c6:12:f8:34:d8:14:17:b1:00:
                    a5:dc:e0:f1:2d:79:d6:a5:2c:54:1f:bf:0a:d9:ff:
                    30:fd:8c:1d:e9:99:48:1b:6f:21:19:87:3b:3d:5e:
                    1a:55:ad:d2:b1:79:15:9a:58:24:e7:b0:94:93:77:
                    07:a6:53:5a:fa:74:75:df:69:24:0a:5c:68:15:56:
                    f7:c3:8b:04:b1:20:11:e1:25:2b:0a:6c:ed:19:8e:
                    b8:e1:64:2d:83:b3:b4:03:ea:a3:27:0b:da:77:86:
                    69:e3:15:0e:21:32:1b:ab:61:51:c6:d7:16:5e:87:
                    aa:5a:40:15:4f:40:80:c4:51:f4:79:4a:84:9f:5e:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A2:3A:73:D9:3B:C4:BA:0F:45:BF:A8:FE:64:5D:FF:26:75:C7:BA
            X509v3 Authority Key Identifier:
                keyid:50:9A:E4:07:80:87:B9:53:14:BD:A9:EF:69:D7:BB:74:88:1C:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJrkB4CHuVMUvanvade7dIgcL94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630501/D8156D107A6F11EFAB637B44762E951A/UJrkB4CHuVMUvanvade7dIgcL94.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:4e:ba:18:fe:83:9e:3e:2e:e8:ff:18:54:51:af:18:95:89:
         4b:bd:c5:16:a0:76:86:69:7f:8a:7a:4e:76:7d:ce:34:e5:6e:
         00:5e:9d:80:43:a5:bb:fa:4e:89:4c:b6:89:10:03:21:cb:16:
         34:93:7e:68:da:41:c5:d7:5f:ff:5f:fe:b2:60:09:7a:ff:f4:
         b7:ac:89:6b:5d:e4:3f:c4:3b:67:84:0a:8f:30:1f:b9:bd:93:
         1e:d1:4f:34:cb:d4:c7:97:f7:d6:84:ec:47:d8:c7:a2:87:08:
         f6:67:a3:c4:7e:90:b3:46:26:c5:ac:ab:bf:0e:0f:c8:3d:c8:
         ec:6f:88:ba:28:b2:e3:39:de:d6:dc:6f:bc:20:e3:b2:91:14:
         d5:16:b0:b3:15:26:1d:4c:bf:a2:a3:0d:6e:6b:94:f4:be:e9:
         33:a1:98:e5:69:a2:15:f7:88:89:23:d1:22:f0:bd:0d:e4:48:
         c8:85:83:c1:c3:7e:92:2b:0e:1f:f6:c8:30:58:b2:56:71:83:
         83:04:98:2a:3c:a9:95:d0:b1:a0:de:f2:62:85:d9:cb:2d:d3:
         bd:eb:ea:5a:50:6f:b0:96:d0:c9:cc:79:e6:a0:9f:63:c6:99:
         79:d5:b4:bc:47:e7:dd:35:8c:c7:6f:7b:75:42:2b:c2:46:9d:
         4f:64:15:67
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAMowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzA1MDFBRjExMC8GA1UEBRMoNTA5QUU0MDc4MDg3Qjk1MzE0QkRBOUVGNjlEN0JC
NzQ4ODFDMkZERTAeFw0yNTAzMjkwMzM4MjRaFw0yNTAzMzEwMzM4MjRaMBgxFjAU
BgNVBAMTDTY3ZTc2YjMxLWUzOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkMe9d79AnWVsG/0+HInJMEZ6dtuLhdYNyJ+AmXjowLWLOGXDyq4LKNYca
AXHkIPjOYAxtJxZkwiLWTyN6ku3AxLYwBBsUatlmEORXVrof/j6/foNEALKJgH9h
DXuCPjJI18yq3S9MQROveN14e2GjPnG2E38IMTe4eBkuXMYS+DTYFBexAKXc4PEt
edalLFQfvwrZ/zD9jB3pmUgbbyEZhzs9XhpVrdKxeRWaWCTnsJSTdwemU1r6dHXf
aSQKXGgVVvfDiwSxIBHhJSsKbO0ZjrjhZC2Ds7QD6qMnC9p3hmnjFQ4hMhurYVHG
1xZeh6paQBVPQIDEUfR5SoSfXi59AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdaI6
c9k7xLoPRb+o/mRd/yZ1x7owHwYDVR0jBBgwFoAUUJrkB4CHuVMUvanvade7dIgc
L94wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMwNTAxL0Q4MTU2RDEwN0E2RjExRUZBQjYzN0I0NDc2MkU5NTFBL1VKcmtC
NENIdVZNVXZhbnZhZGU3ZElnY0w5NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1VKcmtCNENIdVZNVXZhbnZhZGU3ZElnY0w5NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzA1MDEvRDgxNTZEMTA3QTZGMTFFRkFCNjM3QjQ0NzYy
RTk1MUEvVUpya0I0Q0h1Vk1VdmFudmFkZTdkSWdjTDk0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDGTroY/oOePi7o/xhUUa8YlYlLvcUW
oHaGaX+Kek52fc405W4AXp2AQ6W7+k6JTLaJEAMhyxY0k35o2kHF11//X/6yYAl6
//S3rIlrXeQ/xDtnhAqPMB+5vZMe0U80y9THl/fWhOxH2Meihwj2Z6PEfpCzRibF
rKu/Dg/IPcjsb4i6KLLjOd7W3G+8IOOykRTVFrCzFSYdTL+iow1ua5T0vukzoZjl
aaIV94iJI9Ei8L0N5EjIhYPBw36SKw4f9sgwWLJWcYODBJgqPKmV0LGg3vJihdnL
LdO96+paUG+wltDJzHnmoJ9jxpl51bS8R+fdNYzHb3t1QivCRp1PZBVn
-----END CERTIFICATE-----