Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
File:                     GAGTeoaGkejdxAoaQ6Y47cyb134.mft (raw, json)
Hash identifier:          eu/ShSgTz8v0ZpR3jkEu9TWFEGe+wuqVdleoHGOXa5g=
Subject key identifier:   07:25:BB:5F:FF:EF:7F:B6:0A:86:71:28:C7:15:38:D2:76:4D:B7:FF
Authority key identifier: 18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E
Certificate issuer:       /CN=F3645A60AF/serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
Certificate serial:       029B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
Manifest number:          029A
Signing time:             Sat 29 Mar 2025 03:00:08 +0000
Manifest this update:     Sat 29 Mar 2025 03:00:07 +0000
Manifest next update:     Mon 31 Mar 2025 03:00:07 +0000
Files and hashes:         1: GAGTeoaGkejdxAoaQ6Y47cyb134.crl (hash: GvJEUcTopo1yvv3iat1Tx0wJzEN861WkMRSuc5YJvGA=)
                          2: D9BB7DAA119111EE9EC8824F4AD9E6FC.roa (hash: z8n6q+oUQGHtnZrxmlHyDPpdETGxOMXPu63Xt71Wevg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667 (0x29b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645A60AF
        Validity
            Not Before: Mar 29 03:00:07 2025 GMT
            Not After : Mar 31 03:00:07 2025 GMT
        Subject: CN=67e76237-0b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:71:c0:82:ec:f0:d6:f0:37:82:40:97:83:
                    0e:2d:ce:fa:a9:5d:87:d0:33:d8:25:ea:0c:6e:82:
                    bb:65:8b:4b:25:db:02:d7:57:d9:91:3a:40:68:ae:
                    c1:83:8e:69:20:4a:81:74:30:92:63:35:54:6d:6b:
                    81:65:a8:27:fd:fc:8e:19:80:1e:f2:0c:4a:31:aa:
                    56:92:96:0a:72:e1:70:c2:e5:44:33:4c:c2:b6:3f:
                    c3:52:66:99:c0:0a:2b:3d:d0:4e:e6:1f:55:f7:c7:
                    02:91:45:3d:02:70:55:f7:3a:4f:dd:f6:f8:45:74:
                    6f:e3:45:bb:dc:dc:2b:68:51:77:dd:ca:f8:31:1b:
                    03:5d:9c:da:78:d7:92:03:d5:9a:62:5a:fd:b6:5b:
                    bb:06:3a:28:c2:34:ce:52:4d:21:95:3b:f2:e1:14:
                    30:28:bd:d5:49:77:11:39:b7:66:b8:b8:f1:54:0f:
                    10:2b:13:91:40:4a:b9:f9:8f:ee:c2:66:58:d1:c5:
                    85:b1:4e:97:04:9c:33:1a:de:b0:a3:23:ed:f3:54:
                    f1:65:ec:e4:83:07:09:d0:fc:d0:5c:36:a0:94:f6:
                    0a:d2:3a:36:0e:fc:54:00:5a:fe:50:e2:9a:6a:99:
                    f8:60:85:03:bf:b1:08:47:da:bf:7c:85:17:80:81:
                    26:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:25:BB:5F:FF:EF:7F:B6:0A:86:71:28:C7:15:38:D2:76:4D:B7:FF
            X509v3 Authority Key Identifier:
                keyid:18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e6:a5:a2:dd:ef:f4:8a:ec:62:b7:5c:f3:d6:71:53:a3:8b:
         d9:ef:fe:c6:6d:19:3d:42:6a:a4:be:84:92:3b:2c:9c:b6:b5:
         9e:40:51:b1:6a:60:2f:ac:f6:bc:ef:bb:fc:14:53:90:9b:93:
         fb:16:1f:8a:76:f7:0b:40:9a:da:89:bc:63:65:84:3e:fb:44:
         1f:ab:0f:12:e0:d3:35:86:8d:90:5b:d5:5f:e5:13:28:b9:bd:
         45:46:88:1c:e8:9e:00:39:ec:27:8e:fc:39:74:fe:06:93:74:
         ed:a9:a4:44:43:c5:21:75:2d:2e:b3:ad:7e:e5:47:eb:77:2c:
         19:c1:fb:40:04:f2:23:39:d2:44:9d:99:c4:4d:04:24:19:c5:
         b2:ac:3c:3c:42:c8:6f:ad:4f:43:93:3c:46:48:11:31:58:b7:
         51:66:28:44:96:89:cd:cd:a3:44:6b:ef:fd:f8:17:ea:08:39:
         b5:4c:e3:d5:40:54:fc:c3:a2:ae:2c:dc:46:49:03:c7:89:0f:
         29:e5:2e:e8:ca:06:39:a4:71:b6:31:55:63:e2:9c:72:35:3c:
         1c:ed:59:d4:ce:d0:ad:b0:36:4e:99:ee:59:b3:e7:10:44:1c:
         48:ec:fc:a0:70:2e:ad:be:29:4d:58:61:28:f8:94:13:af:fb:
         dc:99:d8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----