Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
File:                     04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft (raw, json)
Hash identifier:          LQc4dUaJM+NB1GWwk0jyHKZtH8aF0xHtL4yzSh+5WcU=
Subject key identifier:   33:36:6E:62:6E:7A:98:0A:C1:7E:0D:78:CB:36:5B:32:31:F5:12:9E
Authority key identifier: D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4
Certificate issuer:       /CN=F3669277AF/serialNumber=D38A85710FEFE6FA6BB5AC220802A8E49AAC6BE4
Certificate serial:       0523
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
Manifest number:          0522
Signing time:             Sat 29 Mar 2025 02:18:46 +0000
Manifest this update:     Sat 29 Mar 2025 02:18:45 +0000
Manifest next update:     Mon 31 Mar 2025 02:18:45 +0000
Files and hashes:         1: 04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl (hash: ubDthixoXXtwBkf1tgCLVG/vcXCZ97Hmr0SYKJr0kO8=)
                          2: F801051021E111ECA44DE462D8A014CE.roa (hash: nTH9YXhLp/XAxSwNODnbgqpCA63kmWCLMXXncguLAuk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315 (0x523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669277AF
        Validity
            Not Before: Mar 29 02:18:45 2025 GMT
            Not After : Mar 31 02:18:45 2025 GMT
        Subject: CN=67e75886-177a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:46:23:b4:9c:18:7e:e6:ef:a0:57:cb:cf:30:
                    f4:72:de:19:82:57:b8:a4:d5:63:6a:ca:1c:65:b0:
                    59:a9:1e:30:0d:4c:58:a7:dd:6d:5d:29:e4:c6:8e:
                    8d:d7:df:91:79:f5:c8:53:bb:47:bc:d3:d4:a8:15:
                    46:43:ae:7e:b2:34:ea:b8:e1:65:96:a7:13:4c:bd:
                    e5:21:55:92:63:33:61:f5:34:6f:88:b4:61:d3:d6:
                    b4:dc:0c:2f:ef:51:ed:18:1c:e1:df:43:eb:86:6b:
                    f6:48:b4:a4:d9:2d:e0:7a:94:a4:d1:a0:f1:00:22:
                    46:b4:60:97:6d:8d:1b:bc:ad:ae:2c:93:a9:7a:a7:
                    43:d4:86:7c:de:2d:1d:18:2d:9b:a6:8f:b0:ef:4d:
                    c1:c1:f1:c0:6a:95:bb:56:67:db:ff:ad:98:8a:93:
                    b1:7a:ae:fb:f2:a7:36:11:ec:56:52:de:58:82:da:
                    07:82:f1:97:6c:b0:36:25:83:59:9d:8a:e2:31:ab:
                    b7:60:4a:de:f4:13:a1:d1:31:d0:99:38:60:ff:c4:
                    9f:09:56:c2:57:72:1a:a1:0d:b6:95:fb:fc:a9:15:
                    ed:9d:5f:03:39:41:8d:ca:23:0b:2c:40:a3:72:b4:
                    94:87:42:ee:2f:71:0a:28:0e:1d:e0:44:8f:59:e9:
                    13:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:36:6E:62:6E:7A:98:0A:C1:7E:0D:78:CB:36:5B:32:31:F5:12:9E
            X509v3 Authority Key Identifier:
                keyid:D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e2:ab:21:82:62:da:a3:c3:62:59:f5:55:97:a1:04:b3:41:
         b9:d0:17:e6:16:99:b8:11:e5:bd:b9:ba:98:85:73:7c:1e:bd:
         39:70:ab:cf:b4:51:db:7a:f2:93:07:83:8f:6a:0d:38:59:5a:
         54:f4:1e:b6:76:68:45:85:45:2f:1b:c8:f2:75:2a:63:e4:1b:
         25:f0:75:fa:de:2e:93:01:0a:4b:90:44:dd:c1:b6:2d:43:a8:
         fb:86:7b:c2:10:df:83:e7:4c:a6:1b:65:40:f9:28:9a:91:45:
         da:61:0a:36:49:c0:88:6d:24:92:43:7f:52:1f:27:36:1a:c2:
         01:3d:09:b9:3c:d4:9c:1f:c9:58:4e:9f:59:de:9f:69:14:f3:
         40:22:ad:a7:93:7d:8b:5d:34:e0:e3:b7:90:d3:c9:f5:97:6c:
         75:45:fe:0c:de:87:b9:a4:8b:0b:4a:e5:a8:12:ea:9a:a7:c2:
         a2:6c:51:1a:12:9c:40:3e:5f:ec:5d:92:90:35:f0:79:cf:0b:
         a4:b3:ca:bc:52:13:6d:fe:c5:ba:4e:da:4f:6c:3e:61:64:6f:
         91:0c:5d:12:7a:26:ce:28:63:40:1a:6f:6f:25:2a:78:44:37:
         cd:cd:92:6f:da:6e:dd:ba:54:05:c2:14:67:e0:95:33:5d:b3:
         45:61:c2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:53 2025 by rpki-client