Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
File:                     9HOLangCORiAdDf6GQfEytcpPvk.mft (raw, json)
Hash identifier:          Ecao4p+f3k3/wyOF9rzMuGfEq9M5jJekKwANLDaDixE=
Subject key identifier:   6F:59:9A:28:87:1C:AF:0D:31:2B:C6:45:D6:CD:75:09:2C:30:9F:F2
Authority key identifier: F4:73:8B:6A:78:02:39:18:80:74:37:FA:19:07:C4:CA:D7:29:3E:F9
Certificate issuer:       /CN=F3672E90AF/serialNumber=F4738B6A78023918807437FA1907C4CAD7293EF9
Certificate serial:       04B8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9HOLangCORiAdDf6GQfEytcpPvk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
Manifest number:          04B7
Signing time:             Sat 29 Mar 2025 02:23:50 +0000
Manifest this update:     Sat 29 Mar 2025 02:23:49 +0000
Manifest next update:     Mon 31 Mar 2025 02:23:49 +0000
Files and hashes:         1: 9HOLangCORiAdDf6GQfEytcpPvk.crl (hash: teIyz4l1Ke2f4MOMlosqu4IFDKHyWwyNQZ3650dqHS4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208 (0x4b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3672E90AF
        Validity
            Not Before: Mar 29 02:23:49 2025 GMT
            Not After : Mar 31 02:23:49 2025 GMT
        Subject: CN=67e759b6-9bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:cd:5f:a8:0a:1f:12:6c:77:53:96:97:eb:
                    ac:0a:e3:0b:1f:e8:3a:45:7f:34:df:ad:76:38:09:
                    56:f9:56:0c:a4:d1:1c:43:19:19:3e:4c:f5:4f:46:
                    b3:26:e7:40:2c:69:1e:cd:91:cc:ea:02:95:42:7a:
                    66:2a:4d:e6:3e:08:fe:ba:16:39:d5:fe:32:c8:5a:
                    48:77:22:bc:9c:54:35:52:9f:8d:c2:19:c0:03:77:
                    0f:6b:b2:36:14:38:d4:f5:20:51:76:c4:0b:ed:e8:
                    e6:77:67:b2:02:23:9c:49:df:39:47:d0:c5:52:1e:
                    a4:e0:a5:02:33:55:aa:c6:20:6b:c7:f4:66:ee:34:
                    a2:dc:4f:77:17:29:1f:54:a2:bf:1d:82:42:64:6e:
                    ed:25:89:1d:22:29:9a:ce:26:71:9b:10:fd:9d:29:
                    6f:4d:81:5e:28:c5:2c:68:ea:c9:2a:2e:32:70:f3:
                    f6:6a:f0:9d:fc:18:de:b5:4c:98:e9:3f:e6:13:f6:
                    12:c0:d9:46:e9:b0:0f:cb:bf:24:b4:c6:e1:45:d3:
                    e2:8a:66:82:d9:63:a0:4e:2f:58:e1:4e:70:ff:f6:
                    4b:ed:86:04:81:61:9f:8c:b7:76:c4:e4:a1:a1:47:
                    95:40:49:df:d2:1d:6d:fa:6d:24:16:6e:d0:b2:e6:
                    70:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:59:9A:28:87:1C:AF:0D:31:2B:C6:45:D6:CD:75:09:2C:30:9F:F2
            X509v3 Authority Key Identifier:
                keyid:F4:73:8B:6A:78:02:39:18:80:74:37:FA:19:07:C4:CA:D7:29:3E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9HOLangCORiAdDf6GQfEytcpPvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3672E90/D779C03273A511ECA57469985A40D577/9HOLangCORiAdDf6GQfEytcpPvk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:7e:24:24:97:47:1a:5a:6a:3a:e7:94:c2:73:c3:90:3f:23:
         5a:7d:fe:9b:19:93:6b:fc:39:28:24:c6:4d:11:48:4f:6c:f9:
         dd:aa:94:0d:bb:0c:be:84:8f:85:4a:9a:30:37:ad:0a:27:97:
         00:ea:0e:a3:34:9e:fa:4b:fa:0d:26:da:82:64:72:36:0f:82:
         c2:6c:47:1f:6a:dd:16:4b:7f:7c:6c:66:f7:57:a2:77:d0:78:
         f1:ce:75:9c:65:db:33:46:9f:8f:8b:84:20:00:56:a0:29:e0:
         67:ed:f4:e1:2f:2d:01:34:29:54:12:ec:5b:ef:a9:d9:ee:17:
         af:37:c9:aa:db:8c:f7:2e:be:f0:c3:49:3b:cd:c9:88:d8:91:
         a0:a3:00:25:82:b4:c9:15:7f:37:a3:75:08:59:7a:56:d8:49:
         19:16:17:a3:ba:54:45:14:f1:3f:ee:c7:49:a5:74:00:74:f9:
         ad:d8:a6:c5:88:62:97:d7:28:ac:c9:9b:fc:ad:ca:df:68:e1:
         3d:b0:fd:5b:fe:d1:ac:2e:33:d4:75:95:12:d3:42:4c:41:06:
         18:73:52:fa:ab:6e:ea:25:17:91:b1:1e:de:1b:5e:de:80:9f:
         33:4e:ae:4c:a1:27:09:14:87:80:bc:0c:52:7b:17:f9:e4:8c:
         50:bc:f6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:38:25 2025 by rpki-client