Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
File:                     OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft (raw, json)
Hash identifier:          UeIyLQ6UDS2DSgmKmZkZms+OCvzACbE/7WhXx5iQUcM=
Subject key identifier:   33:23:39:E0:CD:27:0A:FE:67:21:92:97:0B:1E:FB:79:87:2C:19:F8
Authority key identifier: 39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5
Certificate issuer:       /CN=F365E0EFAF/serialNumber=399D04F1168E65976D1AD6E8ECC5C01414781ED5
Certificate serial:       0435
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
Manifest number:          0433
Signing time:             Sat 29 Mar 2025 02:29:34 +0000
Manifest this update:     Sat 29 Mar 2025 02:29:33 +0000
Manifest next update:     Mon 31 Mar 2025 02:29:33 +0000
Files and hashes:         1: OZ0E8RaOZZdtGtbo7MXAFBR4HtU.crl (hash: C18Y1bKniAqRL7lJaXuAvaioB1w7z28LLfRRkFuHow0=)
                          2: D763DBA871A111EF9436E86F762E951A.roa (hash: qropYAoqucax6ncLs9eruJFo9UBTM6S+IM1PViOJCTw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077 (0x435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E0EFAF
        Validity
            Not Before: Mar 29 02:29:33 2025 GMT
            Not After : Mar 31 02:29:33 2025 GMT
        Subject: CN=67e75b0e-41b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4e:38:78:bf:ef:17:27:44:72:72:f5:45:5f:
                    f1:af:0e:45:db:8e:c2:83:b4:41:d4:67:25:27:cf:
                    8a:cb:82:32:c6:73:36:80:6d:d7:81:78:8d:2e:96:
                    8c:4d:00:b9:40:0c:73:d1:1e:59:1c:23:f6:70:7b:
                    be:25:f5:04:b0:cc:e8:89:6b:71:8d:b1:4d:ed:88:
                    fc:0d:45:6a:e7:c2:2c:da:92:04:0d:54:f0:b9:b8:
                    27:fa:64:e2:ec:57:3e:53:17:c4:26:68:32:ee:fe:
                    20:00:72:f0:b9:cb:16:d7:ab:77:ee:e5:af:38:a6:
                    f2:dd:37:2d:77:87:8b:8e:9a:44:10:17:b2:53:b8:
                    08:8c:f0:48:f7:cd:14:99:04:64:5c:da:39:2c:55:
                    7e:f1:5c:28:3b:65:4e:18:00:95:13:06:04:c7:d6:
                    19:14:c7:cf:59:bd:9d:fe:52:0e:7a:69:f8:16:4b:
                    fc:d3:ce:08:6d:85:e4:bb:1c:30:59:d4:8d:43:f4:
                    4c:10:63:71:e3:5a:da:ab:a3:f7:2d:72:7a:ad:a0:
                    29:54:a5:ed:55:eb:15:5e:90:df:eb:c6:6c:03:a5:
                    f1:78:08:12:f1:89:44:27:10:83:5f:ca:c8:5e:45:
                    ef:c4:e2:c3:68:9a:38:54:f1:70:26:e8:56:fe:1d:
                    e6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:23:39:E0:CD:27:0A:FE:67:21:92:97:0B:1E:FB:79:87:2C:19:F8
            X509v3 Authority Key Identifier:
                keyid:39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:9a:4c:5c:86:6b:3d:43:f0:2d:3a:41:14:80:8e:3f:6d:00:
         a2:55:2f:51:b9:b6:bc:a3:7f:f7:fc:ce:17:ab:75:d1:09:c4:
         ec:a7:b9:60:77:e1:51:31:28:94:9d:e4:f3:93:b7:fb:66:7c:
         95:a7:76:66:cd:eb:36:5e:eb:e2:e0:8c:1b:59:51:b2:99:32:
         96:01:4d:99:c3:8a:35:7b:c3:59:9d:2c:20:31:44:bb:9d:89:
         61:d0:9d:14:72:37:f3:3f:8d:70:fb:aa:3b:97:a1:73:d0:75:
         9b:3f:09:62:72:89:ae:1b:48:9f:42:b5:9c:2d:f4:40:8f:a8:
         cc:95:c4:90:6a:28:c1:56:c8:a1:0e:57:2f:ab:83:dc:81:40:
         65:df:c8:11:83:b0:25:e3:b3:77:ba:82:40:dd:d8:63:3c:3a:
         28:c1:f4:c6:5e:78:d9:96:4a:e3:02:b2:ee:06:fc:52:65:09:
         a1:1e:6c:82:fa:a7:f4:0d:1e:1b:b0:06:ad:6c:61:c4:06:de:
         ca:22:64:fa:0c:4d:5d:d0:49:3f:6e:7d:ec:08:5c:d5:1e:3e:
         03:da:f0:06:23:11:b0:a1:c1:a3:a8:e8:10:53:ac:91:98:58:
         84:e2:ce:06:df:75:07:b2:0d:3b:08:e5:f8:a0:73:c7:a8:89:
         c8:ad:ea:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:49:54 2025 by rpki-client