Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
File:                     9ghiikaC9VOASvOrLlihnDCordI.mft (raw, json)
Hash identifier:          a/GVYftL2Ty72hnt8yt2KreD4knuSLbX8fXVRGCVKwk=
Subject key identifier:   40:A7:13:DA:5C:AA:5C:1F:CC:82:93:1D:5E:DC:71:78:B7:8A:63:7B
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Certificate issuer:       /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial:       E2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
Manifest number:          D5
Signing time:             Sat 29 Mar 2025 03:38:09 +0000
Manifest this update:     Sat 29 Mar 2025 03:38:09 +0000
Manifest next update:     Mon 31 Mar 2025 03:38:09 +0000
Files and hashes:         1: 9ghiikaC9VOASvOrLlihnDCordI.crl (hash: 96QqXqyxGecJsRSIiuUZROVMXmCOe5vqgNngEZlTMTo=)
                          2: AA0B58347DA411EFB8CC7D67762E951A.roa (hash: 5YDNgf0+VLyh6+ND2QqrN6n6jYygpFUHbynpQVD+h+c=)
                          3: E331093A782A11EF8C72A468762E951A.roa (hash: BY9ne/1N16RAQitVEfvm4jFlat7DlCCnlCV+oKN285U=)
                          4: 2844069E782B11EFBBB9D268762E951A.roa (hash: lvbgbCGhMPXk48qld0omu7UI7xIcHWWn2r28UwSXXQY=)
                          5: C560F066782811EF85A3AB5B762E951A.roa (hash: XNr7AGnPwbQE/D3xP8IY8aKue4URy6+4l1rKO9IzQu8=)
                          6: 3A33BF1C783911EF9D168E42762E951A.roa (hash: SbDFlPM/kLoyf4fvU/1Ejh3tm02iphb6lWKgQsjJHfQ=)
                          7: BE2FF656783311EF917DDFA0762E951A.roa (hash: z8nixkak1Z9FbFmjVKmFts76NducTIptQiFywilzw7U=)
                          8: FC15DD3C783811EF9979F0BE762E951A.roa (hash: MW47slV99G/yGTe9SKd2CHFA6+RVEIQxNsNq9ck50UI=)
                          9: 8784F33A783911EF9F858C44762E951A.roa (hash: hIWxFQxDj+ptIohIYjSlVXPkKf+GIrXgvl1fh/xb2HA=)
                          10: 6A068618782D11EFA6D4A078762E951A.roa (hash: chV4S9m3KoPgfqu5cP7sLILuVr+qgeQ1n/geuKlaFME=)
                          11: E769688C782D11EF8476D37A762E951A.roa (hash: thC6FZeaZiOSMFn9F9KF2EnTdtaLKjgNCq4/9EPu+tU=)
                          12: E527D8DA7DA311EFBFCA4063762E951A.roa (hash: jRt85MJWwA9IU+IpxCsOMCI0hYKPMjQQitzeHDuVxys=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AR
        Validity
            Not Before: Mar 29 03:38:09 2025 GMT
            Not After : Mar 31 03:38:09 2025 GMT
        Subject: CN=67e76b21-5dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:e9:50:ee:d0:47:2a:7c:c5:e4:70:8b:f6:
                    d0:71:06:30:83:ed:fc:09:02:6e:01:34:43:9b:60:
                    c3:e2:f7:e5:d5:5a:60:70:c1:2d:6f:c4:1e:c6:cc:
                    22:bd:96:f9:a9:9c:f2:f0:39:a8:0e:f1:9f:90:2a:
                    3c:76:0b:19:86:90:ae:32:0c:85:3b:c2:8a:5d:5a:
                    aa:da:c1:9f:fb:90:b8:b3:bb:0b:9f:52:d4:82:8b:
                    9a:25:35:da:15:6b:08:4c:b0:9d:ef:f2:69:07:f2:
                    94:56:bd:74:36:56:c3:58:94:54:5f:fe:9a:14:43:
                    88:28:7c:a4:35:69:c6:c8:e5:d0:1b:81:9e:9a:68:
                    ea:8f:96:19:dd:de:24:19:ad:28:3b:6f:b5:13:7f:
                    31:3f:fa:2f:5b:51:c7:b5:7c:67:26:b7:f4:f7:e2:
                    01:2e:80:1a:8c:62:68:fe:8a:c9:75:5d:4f:60:b9:
                    19:ad:0a:1d:40:37:54:ab:19:b2:8e:64:19:71:73:
                    76:b3:8e:69:5b:1b:87:3c:b5:9f:1e:b0:e7:1f:5b:
                    d2:12:a0:58:62:86:14:93:5e:89:25:64:e7:22:95:
                    90:ce:bf:1b:ed:93:5e:8f:76:b1:93:5c:7f:74:4b:
                    13:b0:85:04:7e:73:5a:8a:22:28:41:94:86:cc:2e:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A7:13:DA:5C:AA:5C:1F:CC:82:93:1D:5E:DC:71:78:B7:8A:63:7B
            X509v3 Authority Key Identifier:
                keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:13:d3:4a:a6:16:1f:de:c8:e8:d7:92:a9:d5:98:af:a2:65:
         76:ff:8d:34:12:a7:45:b5:17:8e:be:1f:cb:18:9f:63:f6:53:
         2e:25:d2:75:19:ad:ef:74:88:c8:78:aa:f4:11:7e:cd:f4:91:
         8d:ef:03:46:49:19:f5:b4:14:60:58:00:75:5b:01:5b:0b:da:
         d5:85:eb:92:2b:3a:88:3d:cd:1d:8e:48:ea:6a:c8:66:e5:1b:
         ba:b3:14:fe:50:c8:ed:ea:9f:33:db:06:81:ad:95:dc:7b:31:
         6a:04:02:ed:ff:20:ae:e1:f1:b5:c8:7e:2f:97:69:cf:da:02:
         48:cf:78:ca:15:d9:4d:0d:de:33:f3:37:ff:ae:a9:ee:80:8a:
         5a:0f:66:fc:ea:25:5d:97:8e:19:23:4f:68:05:d1:59:c7:08:
         6a:b1:68:b9:0c:a0:97:91:b3:fa:ef:be:aa:aa:85:48:4d:1b:
         e7:64:34:af:f4:4b:55:d0:0a:ed:cb:52:3e:f1:c6:32:6f:1e:
         cf:35:b6:aa:f7:41:77:68:e5:30:89:0a:cb:06:05:ec:0d:b2:
         05:47:61:d4:8e:6e:51:62:1c:b2:c4:e4:e3:6e:6a:41:a3:89:
         4c:31:f4:23:53:96:f3:6e:ef:76:e2:88:26:7a:38:db:b3:56:
         11:49:d2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:41:52 2025 by rpki-client