Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
File:                     pmHmEV84xQtNTFvj-kiO2AWMwvE.mft (raw, json)
Hash identifier:          qYAXanlad4wSPCAaQ0lV2U5gevRiewdqoy5+nXOJSSY=
Subject key identifier:   F4:F4:1C:D1:62:83:38:C6:B3:4D:4F:6F:57:64:CF:AC:5E:AD:CF:E2
Authority key identifier: A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1
Certificate issuer:       /CN=F3672189AF/serialNumber=A661E6115F38C50B4D4C5BE3FA488ED8058CC2F1
Certificate serial:       A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
Manifest number:          A7
Signing time:             Sat 29 Mar 2025 03:40:42 +0000
Manifest this update:     Sat 29 Mar 2025 03:40:42 +0000
Manifest next update:     Mon 31 Mar 2025 03:40:42 +0000
Files and hashes:         1: pmHmEV84xQtNTFvj-kiO2AWMwvE.crl (hash: sGlyiL6qixlArYrqv3z7l8M6X+7+m27Y2AvN8VtcJm0=)
                          2: 84121498949611EFBE8BA57F762E951A.roa (hash: XaqvhZS4unq9+u8DbG/XQq/y/o0dswE+yS72E0NeXdI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672189AF
        Validity
            Not Before: Mar 29 03:40:42 2025 GMT
            Not After : Mar 31 03:40:42 2025 GMT
        Subject: CN=67e76bba-37d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:3c:0e:8d:6c:9a:21:3c:91:d5:57:3d:64:
                    68:ba:00:d8:df:86:9e:1b:55:17:77:6a:75:18:f6:
                    39:5f:34:6c:98:5c:12:0e:e5:1b:eb:36:66:79:e0:
                    0f:97:8f:29:47:c8:21:4c:b6:e6:21:8b:c2:81:98:
                    61:f8:63:ea:bc:e2:ca:5a:2f:e3:03:5f:53:a1:ef:
                    fc:8a:97:e7:b0:d1:43:7a:97:40:2f:56:3b:56:a8:
                    91:84:33:9b:1b:a5:ff:4a:9e:33:d9:9d:b4:05:81:
                    18:66:f1:17:80:3b:8d:5e:21:9a:df:05:60:3c:ee:
                    3c:38:e1:0f:fb:e0:a2:97:46:0b:50:d5:7d:ce:67:
                    29:70:85:37:12:2f:68:e4:e3:af:14:8e:83:68:87:
                    c3:7d:9c:56:16:02:82:a5:06:c4:8f:c1:1c:0a:2a:
                    7f:90:bc:f6:81:8b:31:0c:08:09:92:6d:a0:d7:e6:
                    55:0f:21:a3:bf:0c:60:52:9c:b9:26:95:df:b1:86:
                    de:5f:8a:49:28:e5:3f:a6:10:4b:24:e1:12:e8:5f:
                    51:e2:9d:eb:46:80:e3:1e:37:c6:53:50:ec:d7:5b:
                    c1:3e:69:10:fe:1e:8e:de:b9:1b:c4:2e:30:01:c9:
                    e8:b3:c2:a9:02:d3:32:36:41:ae:f5:af:69:95:b3:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F4:1C:D1:62:83:38:C6:B3:4D:4F:6F:57:64:CF:AC:5E:AD:CF:E2
            X509v3 Authority Key Identifier:
                keyid:A6:61:E6:11:5F:38:C5:0B:4D:4C:5B:E3:FA:48:8E:D8:05:8C:C2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pmHmEV84xQtNTFvj-kiO2AWMwvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672189/38C85C46912A11EF98AA067A762E951A/pmHmEV84xQtNTFvj-kiO2AWMwvE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:21:12:e2:60:b5:ef:7e:6b:26:e8:56:ef:cd:4e:88:04:53:
         7f:2c:98:75:3a:d4:a0:45:b4:42:7c:e7:a8:d3:a9:8b:19:db:
         39:3a:53:64:a4:0d:4d:1a:5f:48:4c:f2:fa:6a:1c:93:f4:5b:
         fb:08:79:13:a0:53:69:61:9e:4d:1c:41:c4:b0:86:b3:2a:8b:
         db:e0:27:a3:0c:ce:99:b7:2e:71:e8:e8:f7:17:72:72:c5:4e:
         98:25:e8:8d:b3:d7:ee:ef:8d:eb:86:6b:9d:f2:f5:65:e3:30:
         68:70:9c:7b:1f:51:9d:80:83:a0:0c:2a:61:80:75:c2:40:ef:
         b8:4e:87:61:98:c0:9a:95:6a:7c:75:89:d5:30:07:74:3c:81:
         a1:d5:73:35:c3:bb:8a:25:b6:88:93:1f:cf:5e:ca:93:9e:07:
         fa:dd:54:28:94:b1:f0:25:fd:63:61:09:ff:86:44:1a:26:1a:
         84:ac:e1:7d:49:c3:4a:d6:92:43:cb:86:27:83:66:28:02:7b:
         4b:9a:12:0e:f6:e1:f1:48:0f:38:e2:23:67:60:b8:38:19:70:
         bc:d6:80:a6:00:86:dd:ce:6e:98:25:bd:eb:0a:c8:17:73:f9:
         cc:00:35:85:b5:47:3e:a5:5b:e0:6c:02:d9:75:c6:ec:ae:f4:
         1e:6e:81:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----