Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
File:                     kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json)
Hash identifier:          PIc+KBy/V4xKTiXuYKOFUIPuDtRhKSSuOjrtL0pkbdE=
Subject key identifier:   29:36:41:57:D5:F4:7E:BF:14:07:8A:58:F6:B1:EF:01:90:6D:0D:1F
Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
Certificate issuer:       /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Certificate serial:       03C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
Manifest number:          03C6
Signing time:             Sat 29 Mar 2025 02:38:49 +0000
Manifest this update:     Sat 29 Mar 2025 02:38:48 +0000
Manifest next update:     Mon 31 Mar 2025 02:38:48 +0000
Files and hashes:         1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: DxgmAh4Ot9HnWoFPGTZ7JoL+Xa3HijQNBsanjXER9zw=)
                          2: AD72D8203AC511EF8BAB4075762E951A.roa (hash: uGjLeTcQtjvoi+G1lNbi/6hF5oa6IK/lI55KybZViDM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 968 (0x3c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647FF0AF
        Validity
            Not Before: Mar 29 02:38:48 2025 GMT
            Not After : Mar 31 02:38:48 2025 GMT
        Subject: CN=67e75d39-af60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:87:c4:c5:3d:b7:fa:da:ba:50:f1:f4:8c:
                    7d:1f:5e:80:20:79:6d:05:74:63:eb:c7:f3:72:7a:
                    a2:9e:e6:f5:52:41:15:b3:90:16:c2:9c:96:93:3f:
                    39:86:97:f8:b2:29:b5:3d:fe:09:89:24:74:fc:01:
                    32:41:68:bd:fe:6e:ea:5b:51:af:ff:a8:08:bc:e7:
                    26:85:9c:ce:6c:bf:fc:8f:e9:6d:01:ee:3e:19:a4:
                    85:0e:a5:13:3d:80:d1:10:0e:fb:62:c0:49:1b:48:
                    fd:41:1f:91:79:12:d3:46:d1:c6:9e:2b:94:a0:b8:
                    4d:2b:31:fd:4c:23:07:69:9c:bb:2f:4e:36:fd:14:
                    b1:13:ee:88:4b:02:c6:c7:1a:46:69:1f:77:b1:43:
                    04:ea:91:e2:b8:55:d7:c2:c9:ae:ac:c1:63:63:84:
                    88:f3:0c:c7:e2:37:2d:01:b6:b1:a1:63:e5:ae:25:
                    1f:11:08:90:b1:f3:d9:dc:e2:e1:e4:25:92:fb:4a:
                    2d:ab:62:55:c7:4d:70:ed:4b:fc:70:4d:70:c9:e6:
                    b1:05:a5:f4:a3:b6:48:c0:ea:68:85:1e:bc:06:dd:
                    3c:a4:43:6c:c0:3b:0b:95:57:2c:8c:7a:61:47:2a:
                    7e:52:f0:3b:8c:28:11:66:31:d1:ef:9c:87:68:d3:
                    10:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:36:41:57:D5:F4:7E:BF:14:07:8A:58:F6:B1:EF:01:90:6D:0D:1F
            X509v3 Authority Key Identifier:
                keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e2:82:f6:28:73:f3:42:79:3d:59:d2:d4:72:3d:2f:2a:7c:
         77:a1:59:52:24:d6:7f:5c:57:75:9c:3d:db:f0:3a:69:cc:54:
         01:ff:a0:ee:29:1f:bc:b3:fe:13:a4:2e:0d:26:31:d7:8c:17:
         53:59:de:d4:01:57:83:1c:f5:71:51:c0:28:21:78:03:34:ab:
         fb:0b:29:ed:67:16:20:19:08:7b:4c:60:e8:ca:b6:e9:a4:ad:
         10:91:57:3f:f6:7b:eb:5b:16:ed:04:e9:68:8b:4c:64:5b:18:
         6a:44:2f:37:65:cf:3b:e8:d1:a6:60:63:21:9e:e7:e9:ba:6a:
         10:45:d4:19:c3:9e:6c:be:3b:29:59:68:1a:e3:3c:b3:e2:cf:
         d2:93:79:b6:7f:35:11:02:38:23:3d:28:db:1a:a1:c6:fd:13:
         d0:6a:87:d7:25:7b:c4:92:12:c7:45:31:68:e9:23:c2:e9:ec:
         eb:07:45:bd:10:a8:91:cb:ed:a2:ca:c8:12:d9:cc:11:f2:31:
         96:4a:c7:8a:68:b3:da:68:6a:cc:46:a7:56:1d:65:3b:dd:77:
         b9:35:b6:3f:0f:e6:98:90:ce:f0:7a:7c:0d:e7:41:3a:de:ab:
         dd:c3:83:92:22:14:c2:3a:f2:8c:90:a0:85:c1:3d:b3:6f:4e:
         20:17:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:40:55 2025 by rpki-client