Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
File:                     KnzueRgruFkbsTXdv7vulMHfQIc.mft (raw, json)
Hash identifier:          BR/N25pZLNzjQnHHqJgYZDesIZr+2CnFloav1MwXeCM=
Subject key identifier:   EC:03:99:D9:27:F8:2B:C6:72:B1:8B:58:CD:90:9E:B6:F3:45:60:1F
Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
Certificate issuer:       /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Certificate serial:       023D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
Manifest number:          0234
Signing time:             Sat 29 Mar 2025 03:08:12 +0000
Manifest this update:     Sat 29 Mar 2025 03:08:11 +0000
Manifest next update:     Mon 31 Mar 2025 03:08:11 +0000
Files and hashes:         1: KnzueRgruFkbsTXdv7vulMHfQIc.crl (hash: FCCnohMZZiD5OwgzAZPF6OQok6SV84TGI+bzbSluYlY=)
                          2: 1A85425E69BB11EEBF5E904C4AD9E6FC.roa (hash: Kx/Y8dEbUYeqoToY5LpNSdsXIlBKib23+2DqdNa43/Y=)
                          3: FD189F0E69BA11EEBE81314C4AD9E6FC.roa (hash: UK6i2dFbIWYL9h4T/dpZ4yF8qA519gysmxncwqhjDNc=)
                          4: E44337C869BA11EE88CB094C4AD9E6FC.roa (hash: 1d8FtYAZsHDPTXDngJ49htpRva8POmc7nirQyWgiDXo=)
                          5: 3BB28D0269BA11EEABA4ED494AD9E6FC.roa (hash: Q1XgZ9ZmDeVtE4gxia+GOYWXfxLUPO9DALH0Nrtl+eg=)
                          6: B8B5DACA69BA11EEBD303C4B4AD9E6FC.roa (hash: uoqftiTs2TQ3rEVnLUYDWPuBL54Tw5Qh6vFz0fe7JV4=)
                          7: 98FDCD4669BA11EE95130C4B4AD9E6FC.roa (hash: V8tXop4xNSLK7NTMuObTNFw9mcHKdpwbwIJqeSi9teo=)
                          8: 6399788A69BA11EE9D71534A4AD9E6FC.roa (hash: kaAHuzndBPzeMjc2nNN3ZcTB7Ew41AHipGqkh1wKLvg=)
                          9: C7D92E1869B911EE953F70484AD9E6FC.roa (hash: SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366CE6FAF
        Validity
            Not Before: Mar 29 03:08:11 2025 GMT
            Not After : Mar 31 03:08:11 2025 GMT
        Subject: CN=67e7641b-defc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:ba:56:90:f5:63:f5:43:bc:80:f7:a8:04:
                    12:24:88:2e:65:88:00:64:29:92:1c:b0:6d:14:cd:
                    24:fd:12:03:24:8b:a7:99:a9:dc:e9:d4:f2:40:ea:
                    64:f0:9c:f7:67:bb:49:2c:77:c9:25:a3:3e:7a:a0:
                    7a:8b:80:df:59:01:19:94:86:e3:1b:60:bc:d0:47:
                    0e:5e:7f:26:83:db:c6:c1:f4:0f:b2:44:77:40:88:
                    40:60:08:5a:9b:87:db:d3:8b:31:9b:ea:a5:0a:2e:
                    9a:f0:df:37:9c:90:74:aa:45:0c:f3:c1:3d:46:3f:
                    ac:07:4a:52:e6:bf:68:ba:3e:37:d0:33:63:67:c8:
                    54:71:95:39:13:fe:ef:ae:1a:b5:dc:b9:86:01:cc:
                    0a:92:42:84:4b:51:54:77:7e:5b:5e:00:2b:6e:fc:
                    88:20:12:13:f0:a5:3c:be:43:59:e1:96:46:aa:2d:
                    8e:16:3d:82:bc:d5:1d:8c:0a:c3:d7:2f:2e:d8:48:
                    92:45:c0:2a:c7:be:89:f3:14:c2:01:20:fd:cc:a9:
                    d8:3d:5a:a6:8e:4f:c2:b1:15:8d:57:b4:1d:e9:f4:
                    e9:70:bb:9e:a4:c9:56:39:9a:af:9a:66:9b:6d:cd:
                    7c:92:86:0a:ef:91:45:f7:4d:3d:5f:cc:f3:71:f7:
                    b3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:03:99:D9:27:F8:2B:C6:72:B1:8B:58:CD:90:9E:B6:F3:45:60:1F
            X509v3 Authority Key Identifier:
                keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:64:3a:ea:cc:80:36:d6:87:44:b6:5e:bc:d6:c2:37:b6:2a:
         5d:29:60:61:8c:1e:36:e2:78:de:f8:15:fd:e9:34:e0:cd:09:
         04:1b:af:c4:6b:30:cb:6a:4d:34:3e:ad:ed:ac:a7:80:ca:4d:
         7b:1f:22:e2:9c:7c:1c:99:81:b1:ca:a4:5e:f2:85:6c:44:eb:
         93:8c:5c:4d:b2:05:f0:46:a4:3a:8b:42:ad:09:6e:a4:49:1e:
         91:a1:6f:03:00:d1:ac:1e:04:c6:93:85:f1:24:c4:90:d9:7f:
         78:34:a5:bc:64:ac:0e:68:49:4f:3d:ce:4f:a2:7e:0e:95:35:
         d3:49:a8:d3:9f:d0:47:af:13:9a:7f:db:80:76:85:58:39:b4:
         23:a3:8b:55:c1:a5:5d:cc:65:63:7b:6b:c4:b0:65:68:6e:fa:
         bc:09:84:e8:88:27:ab:87:f3:dc:f0:9c:3b:13:10:25:63:59:
         3d:4e:5d:01:b0:ad:f3:6b:d6:d6:13:0d:65:54:3f:15:d7:bb:
         9e:43:ee:33:40:7a:64:8e:4b:f6:17:9f:4d:c7:bc:fe:37:22:
         f4:9b:7f:33:b0:3f:50:2c:be:dc:d8:27:62:0c:c4:61:e2:a6:
         35:eb:d3:4e:45:2b:ab:a9:33:4e:13:7d:98:c7:1e:98:0e:c1:
         cc:15:d2:a5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkNFNkZBRjExMC8GA1UEBRMoMkE3Q0VFNzkxODJCQjg1OTFCQjEzNUREQkZCQkVF
OTRDMURGNDA4NzAeFw0yNTAzMjkwMzA4MTFaFw0yNTAzMzEwMzA4MTFaMBgxFjAU
BgNVBAMTDTY3ZTc2NDFiLWRlZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0yLpWkPVj9UO8gPeoBBIkiC5liABkKZIcsG0UzST9EgMki6eZqdzp1PJA
6mTwnPdnu0ksd8kloz56oHqLgN9ZARmUhuMbYLzQRw5efyaD28bB9A+yRHdAiEBg
CFqbh9vTizGb6qUKLprw3zeckHSqRQzzwT1GP6wHSlLmv2i6PjfQM2NnyFRxlTkT
/u+uGrXcuYYBzAqSQoRLUVR3flteACtu/IggEhPwpTy+Q1nhlkaqLY4WPYK81R2M
CsPXLy7YSJJFwCrHvonzFMIBIP3Mqdg9WqaOT8KxFY1XtB3p9Olwu56kyVY5mq+a
ZpttzXyShgrvkUX3TT1fzPNx97OrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU7AOZ
2Sf4K8ZysYtYzZCetvNFYB8wHwYDVR0jBBgwFoAUKnzueRgruFkbsTXdv7vulMHf
QIcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZDRTZGL0Q5QTQ2NzZDNjk5QTExRUVCQ0M1RkI2NzRBRDlFNkZDL0tuenVl
UmdydUZrYnNUWGR2N3Z1bE1IZlFJYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tuenVlUmdydUZrYnNUWGR2N3Z1bE1IZlFJYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkNFNkYvRDlBNDY3NkM2OTlBMTFFRUJDQzVGQjY3NEFE
OUU2RkMvS256dWVSZ3J1Rmtic1RYZHY3dnVsTUhmUUljLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAZDrqzIA21odEtl681sI3tipdKWBh
jB424nje+BX96TTgzQkEG6/EazDLak00Pq3trKeAyk17HyLinHwcmYGxyqRe8oVs
ROuTjFxNsgXwRqQ6i0KtCW6kSR6RoW8DANGsHgTGk4XxJMSQ2X94NKW8ZKwOaElP
Pc5Pon4OlTXTSajTn9BHrxOaf9uAdoVYObQjo4tVwaVdzGVje2vEsGVobvq8CYTo
iCerh/Pc8Jw7ExAlY1k9Tl0BsK3za9bWEw1lVD8V17ueQ+4zQHpkjkv2F59Nx7z+
NyL0m38zsD9QLL7c2CdiDMRh4qY169NORSurqTNOE32Yxx6YDsHMFdKl
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:34:18 2025 by rpki-client