Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
File:                     h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft (raw, json)
Hash identifier:          p37kQccFnOOZy0/I0+436rfatq3TXkx6ddrWJPavElg=
Subject key identifier:   53:65:29:CF:B3:9C:69:2C:FC:2A:93:2C:D5:73:7E:BB:64:E3:03:30
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Certificate issuer:       /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial:       03D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
Manifest number:          03CF
Signing time:             Sat 29 Mar 2025 02:39:41 +0000
Manifest this update:     Sat 29 Mar 2025 02:39:41 +0000
Manifest next update:     Mon 31 Mar 2025 02:39:41 +0000
Files and hashes:         1: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl (hash: FRf4c45ofL022yT/K6Zf/GxratktsilYiDtZ0pRcFMw=)
                          2: 05B9E9DAD17D11EF95C142AC762E951A.roa (hash: Q5K3U35zeD2bPxUENFXhYZ30yazfguSFLvJ7/QgC/Ko=)
                          3: 23ABB3A2D17C11EFB156ACA7762E951A.roa (hash: JnjC+h0l3NXiTvyHQEAdv5zJ5PF/QKPMrh4aJd626Kc=)
                          4: 9D138D4CD17B11EF890791A3762E951A.roa (hash: YtOzzIAfQEjwyVcS0gx7UZKyYqAnn55LoVoqNlpKMPw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984 (0x3d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645721AF
        Validity
            Not Before: Mar 29 02:39:41 2025 GMT
            Not After : Mar 31 02:39:41 2025 GMT
        Subject: CN=67e75d6d-5bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:45:9d:ef:67:a1:f2:d4:a9:ce:cc:d3:99:74:
                    22:ff:25:37:32:3e:69:29:a4:95:f6:a4:6d:6f:18:
                    7a:7f:c4:27:4e:1f:0a:06:47:51:e8:00:27:a4:45:
                    c1:ec:e6:96:c8:91:fa:e1:6b:bb:07:d2:82:66:75:
                    47:83:eb:bf:e1:90:7c:16:c8:a0:ee:1f:9a:ec:ea:
                    78:57:b4:dd:2c:32:ce:50:bf:5f:ff:7e:c4:2c:82:
                    d4:3b:87:b2:13:fe:d0:fc:75:b0:56:4f:7c:6d:92:
                    13:bc:42:fb:9b:7e:13:14:91:68:a2:c5:d5:a5:60:
                    11:76:a7:c4:4b:58:e4:13:4c:9a:15:a6:b9:a3:03:
                    78:34:6e:0a:cd:05:c0:32:59:4d:c0:d1:df:72:37:
                    64:1d:a7:99:8f:cb:88:fc:92:3e:0c:8c:90:f9:c6:
                    2d:3f:3c:ad:53:bf:9e:23:e3:3f:30:bb:12:1f:bc:
                    e1:93:c4:c2:fa:a0:c3:e0:9a:70:29:76:cf:c1:3f:
                    fd:77:7c:96:c4:d6:54:fe:2f:44:0f:30:da:de:12:
                    17:06:fa:b8:2e:95:98:17:d7:68:a7:fd:96:84:96:
                    f7:fb:95:2a:18:24:99:47:d0:38:9e:d4:03:a4:24:
                    10:d5:9e:1a:d0:34:07:0d:43:ac:34:c8:69:6a:13:
                    ee:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:65:29:CF:B3:9C:69:2C:FC:2A:93:2C:D5:73:7E:BB:64:E3:03:30
            X509v3 Authority Key Identifier:
                keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a8:8d:e6:8b:6a:91:97:a4:a8:fe:a0:25:3e:3b:f8:dc:88:
         7b:11:8f:24:72:89:c0:87:45:a0:fe:07:23:4d:ff:2d:b2:52:
         e7:11:9b:12:91:30:df:44:0e:27:67:ad:cf:b9:93:a0:76:c2:
         10:8c:58:2a:ed:62:ec:6f:0a:af:c5:f5:ba:65:c6:83:81:5f:
         5f:91:21:f9:7e:da:dc:94:10:ce:c3:04:20:9e:36:17:9f:10:
         37:6e:70:06:ca:d0:55:6a:1b:48:27:c4:03:e0:97:df:0a:51:
         04:ba:9c:2a:9f:3e:9e:7c:e0:8f:6c:2c:57:b1:8d:21:45:a9:
         49:f0:e5:e2:f3:ff:e2:6b:51:bf:1b:dd:9c:d8:0c:69:b5:c8:
         b4:f7:42:ca:2b:bc:e0:6a:a8:26:9e:74:87:db:03:11:60:c8:
         85:20:b8:08:40:d4:5e:5a:d0:83:a7:ca:ee:81:76:95:42:c9:
         78:e8:0a:ef:69:97:c2:4d:a6:b1:45:b1:de:8f:b7:c6:08:56:
         21:cb:ba:8d:2a:79:3e:a0:06:19:ea:bb:cf:c2:c7:5f:69:2a:
         b6:cf:57:b2:4f:c3:a5:78:d7:19:0b:f9:36:58:0b:4c:09:a5:
         77:ac:0f:62:54:7f:88:80:28:ff:fb:99:2e:35:ad:3d:bd:37:
         7e:bd:8e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:11 2025 by rpki-client