Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
File:                     HJG1r5tg6j8cHbh-rsbafC6gqHc.mft (raw, json)
Hash identifier:          rakCHZuuw3iC2C5cZjcBXEGSR9BZBdfIKsnFoV5Vy1c=
Subject key identifier:   F4:08:C7:48:BA:D5:BF:9F:9C:F0:C9:48:E3:FB:BC:96:12:60:73:E5
Authority key identifier: 1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77
Certificate issuer:       /CN=F36432B6AF/serialNumber=1C91B5AF9B60EA3F1C1DB87EAEC6DA7C2EA0A877
Certificate serial:       031A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
Manifest number:          0318
Signing time:             Sat 29 Mar 2025 02:49:43 +0000
Manifest this update:     Sat 29 Mar 2025 02:49:43 +0000
Manifest next update:     Mon 31 Mar 2025 02:49:43 +0000
Files and hashes:         1: HJG1r5tg6j8cHbh-rsbafC6gqHc.crl (hash: OeD0/ecqw0PZsCqgoti6HhHUg/2/PxcHr44KZrSZIRQ=)
                          2: A3334908B75911ED9D1DD491F1222468.roa (hash: kfeGWGsJ8YUWnbsW+Omh/kxV1I9agx30BHnCONag860=)
                          3: 4DDB7228038511EEAD70B94C4AD9E6FC.roa (hash: c2ddbCPHmmvJv1S8GCuUfE7hXuI9EaV9rtxUGDdpShs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36432B6AF
        Validity
            Not Before: Mar 29 02:49:43 2025 GMT
            Not After : Mar 31 02:49:43 2025 GMT
        Subject: CN=67e75fc7-b39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:e0:f3:91:c1:c4:ce:51:ec:0c:5c:8e:70:
                    ae:0c:07:06:f5:fc:cc:e9:9d:c7:cd:71:ae:ac:b6:
                    4b:89:91:59:4d:7a:27:13:10:e8:b3:29:d0:ee:03:
                    ba:7c:83:3c:32:51:44:85:7c:c8:ae:e2:03:66:7f:
                    b8:9f:59:ec:1f:97:fd:1b:b6:ed:14:d0:cd:a7:6e:
                    dd:22:e7:e0:30:d4:9e:f3:f2:f5:2a:af:a6:6e:80:
                    7c:99:93:60:f0:4b:fa:d7:1a:9c:fc:fc:e8:17:12:
                    db:4c:9c:3f:50:14:b0:f4:01:50:e9:46:99:c1:4e:
                    28:fc:b4:6b:5d:c2:cf:41:41:69:fe:32:cb:32:11:
                    99:43:37:c7:a1:27:6f:84:28:c4:61:9b:6b:1b:75:
                    c0:84:c2:3b:36:ee:35:ea:3d:a1:0d:9b:64:f7:20:
                    10:61:81:19:ce:ed:fa:fd:aa:95:7d:18:b4:50:5e:
                    96:ac:aa:6f:cf:9a:41:0d:80:c6:68:7b:32:bf:6f:
                    89:8b:5c:ed:85:2d:3b:01:01:96:c6:8d:e2:56:13:
                    62:07:b1:9a:35:0a:63:48:b1:d3:4a:cf:1c:c3:1a:
                    a2:47:17:fc:44:6d:8c:5b:f8:e2:9d:09:a6:62:81:
                    14:ee:70:6e:52:a5:02:65:8b:4a:d7:82:5a:c3:bf:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:08:C7:48:BA:D5:BF:9F:9C:F0:C9:48:E3:FB:BC:96:12:60:73:E5
            X509v3 Authority Key Identifier:
                keyid:1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:44:85:54:98:09:d3:c1:cb:a0:97:cf:95:b9:ff:90:8e:2f:
         7a:88:ea:16:6a:4c:06:3e:8f:b8:fe:82:fc:7a:1f:ad:62:62:
         56:f4:b3:5e:12:f0:51:51:cf:4c:06:ab:05:a0:0a:60:cb:fe:
         d1:af:0a:7c:43:9f:e3:85:d8:1b:96:34:5d:d8:57:f6:a2:94:
         04:a0:60:1f:65:09:d1:18:f5:4f:3e:ca:e3:0a:6f:15:ee:b5:
         d8:e2:10:6e:6f:31:07:7e:64:d1:72:9a:38:47:43:58:22:15:
         80:40:1f:2c:05:04:e7:fc:25:f5:ef:97:63:e4:65:0c:c0:63:
         c1:cb:5c:6c:98:c7:a7:aa:af:7b:08:66:ea:73:71:e0:e1:01:
         eb:9b:80:e0:4f:d2:e6:50:a1:2c:7f:61:12:48:60:26:8d:3c:
         68:43:ae:b1:e2:bc:20:f2:5c:d3:aa:8d:d1:4a:27:bf:b9:95:
         05:cf:b7:4f:16:ae:fb:9e:76:57:bd:c7:b0:c7:e6:e3:fe:3d:
         0f:09:c9:3c:8c:7e:16:84:aa:2f:b0:72:f7:57:e8:cc:91:d8:
         29:d9:e6:9b:6d:49:4f:38:d4:39:e1:02:b1:0b:c5:4a:4d:8b:
         aa:02:d7:3c:ae:69:3d:50:7f:02:5f:93:4e:d8:eb:a9:71:ff:
         70:d6:3f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----