Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
File:                     yLuITQS6vBYFq333lYeWBZySwmo.mft (raw, json)
Hash identifier:          e1ioKTif4jhRnEKBZ49v04dLmwQlHf2xRbry90oJt8Y=
Subject key identifier:   5C:4D:47:25:95:1B:40:02:9A:2E:6C:87:87:1D:74:53:0E:F7:DD:2D
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Certificate issuer:       /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial:       04AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
Manifest number:          04AB
Signing time:             Sat 29 Mar 2025 02:24:26 +0000
Manifest this update:     Sat 29 Mar 2025 02:24:26 +0000
Manifest next update:     Mon 31 Mar 2025 02:24:26 +0000
Files and hashes:         1: yLuITQS6vBYFq333lYeWBZySwmo.crl (hash: SmLozi2wJa7nJOOl7lAJjN/MgrDKAcrOpzuNAe7kw90=)
                          2: DBE0F6EE7E8C11EC9A551E885A40D577.roa (hash: e+LkqN78DWuhBsqL8FFr5mWtusQpgR9pzmjfGcJQ5/w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196 (0x4ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AF
        Validity
            Not Before: Mar 29 02:24:26 2025 GMT
            Not After : Mar 31 02:24:26 2025 GMT
        Subject: CN=67e759da-117b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:45:6e:ac:41:c6:31:74:62:e0:e2:b1:bd:
                    f3:53:7a:4f:90:a4:b5:0d:98:bb:ed:ca:6b:f4:5e:
                    4f:d6:db:67:87:01:6c:93:f0:10:21:bf:08:11:ab:
                    f4:9a:e5:6d:02:b7:b2:e9:29:06:28:19:df:42:df:
                    8b:fc:98:48:93:06:39:39:ca:dd:22:0b:a3:1f:82:
                    24:eb:24:a1:0e:ce:46:d8:01:ec:4a:27:6d:36:8b:
                    d1:0a:4e:63:25:e3:97:65:3a:01:b1:b0:0c:29:9a:
                    16:c7:6a:03:b6:25:9b:12:d8:6e:2b:db:0a:23:3d:
                    1d:78:f0:ed:9b:d4:60:5b:5b:da:6d:04:cb:96:81:
                    f8:04:88:b0:1a:b7:e8:f8:93:9f:b5:8b:b6:ba:4e:
                    09:d2:d8:d4:06:70:ba:d4:02:6e:85:22:8f:40:81:
                    d9:1d:6b:aa:7c:25:38:1b:20:22:72:57:53:65:80:
                    df:10:9b:e6:69:26:c4:85:38:1a:60:12:00:61:b7:
                    0a:2c:4d:22:23:12:d0:3e:ce:42:e3:eb:91:74:8f:
                    62:f8:71:75:b5:5a:8a:6e:c9:f8:4e:db:47:f1:1b:
                    ac:38:22:5c:cf:95:04:a1:f6:7f:eb:fd:a6:09:6b:
                    66:4a:34:27:ba:dc:70:42:78:e7:90:6b:1e:d4:d4:
                    1d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4D:47:25:95:1B:40:02:9A:2E:6C:87:87:1D:74:53:0E:F7:DD:2D
            X509v3 Authority Key Identifier:
                keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bb:7e:fd:43:ed:c1:0e:74:84:9b:18:07:58:2b:2a:dc:61:
         dc:b7:15:6b:fb:66:47:c2:9e:aa:88:86:f9:22:e5:c5:b2:18:
         70:c2:3a:6a:6c:8f:85:7a:01:8a:53:7b:cc:dc:4c:49:c8:dd:
         72:5e:a2:f4:ad:5d:55:aa:42:4b:e4:18:8d:96:e6:1f:50:85:
         5a:e3:21:5c:31:50:95:af:d3:de:a9:6e:1d:b6:f0:83:b1:89:
         9f:0b:fd:bc:72:7a:e5:ba:fa:90:20:73:92:fc:42:3c:67:3e:
         0a:a0:4c:1f:da:66:c4:5a:39:dd:6e:9d:8d:cf:6a:6b:12:fe:
         b0:7e:33:6d:9c:a0:d8:2e:35:5e:8d:94:af:08:38:73:87:7d:
         9f:e3:2b:8c:c5:20:94:f7:c9:45:11:73:bb:17:78:40:42:99:
         f6:46:20:c3:cc:d5:55:6d:d7:b4:cb:f7:c4:88:71:c6:66:83:
         2f:11:9b:49:70:75:f0:99:31:f0:fa:91:3d:68:05:ef:15:58:
         d2:67:83:e8:fc:c7:b3:7e:9c:3f:c5:00:0e:8b:ef:3c:66:c0:
         91:ab:eb:f9:29:e3:18:82:ef:50:b2:7f:50:3c:12:8f:fc:a7:
         6c:3a:c3:fa:ae:27:21:de:3b:87:48:88:ec:ae:2d:3a:a0:94:
         08:bc:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----