Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File:                     shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier:          uSePp47pV17PGJEPzkR6HOIu8dMo3gEOLrL1FviqONc=
Subject key identifier:   FF:E8:90:BF:28:36:5A:45:C4:AD:D2:AC:93:66:D6:68:F0:53:AC:51
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer:       /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial:       01CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number:          01C8
Signing time:             Sat 29 Mar 2025 03:15:14 +0000
Manifest this update:     Sat 29 Mar 2025 03:15:14 +0000
Manifest next update:     Mon 31 Mar 2025 03:15:14 +0000
Files and hashes:         1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: WP3++tbBKtgrrDBgRnsT46VMzNXcsKo8MOcxirILgFY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675681AF
        Validity
            Not Before: Mar 29 03:15:14 2025 GMT
            Not After : Mar 31 03:15:14 2025 GMT
        Subject: CN=67e765c2-5eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:4f:a4:76:a5:cd:9f:e9:73:39:ae:0c:0a:
                    29:4a:21:03:52:cf:1d:ab:88:7f:a3:d4:94:71:2c:
                    dc:39:f1:87:51:a4:5d:62:11:48:e8:02:fb:d9:38:
                    b3:c6:6b:9b:27:47:4e:5d:8d:9f:63:ac:bb:d5:df:
                    37:ad:6f:6c:1a:de:7e:3a:e0:db:74:8a:ba:39:2d:
                    d9:8f:eb:96:8a:f2:a2:b7:d2:29:c8:9e:5c:e7:43:
                    aa:e1:ee:61:84:ac:a2:19:54:80:f3:16:7a:06:82:
                    9c:b5:19:f0:65:33:ea:14:c2:22:d0:39:47:66:73:
                    f9:b4:64:d8:83:ab:45:56:58:17:5e:37:1f:32:c2:
                    58:73:2b:68:eb:37:35:12:84:1e:df:72:5a:20:49:
                    c2:80:4e:51:81:e7:0a:0c:e0:67:13:3f:f9:58:26:
                    75:02:7c:fb:54:e0:ee:4d:41:00:d2:5a:72:27:2b:
                    7c:10:6c:e3:5b:39:78:71:8a:84:e6:18:b1:70:7b:
                    91:8c:b3:ab:85:f2:bf:3f:ed:71:d7:c0:f7:9a:bb:
                    90:9d:8c:ed:bb:d4:a6:37:1b:dd:3a:99:b1:87:48:
                    5e:06:16:2e:dc:70:83:e9:62:4a:bb:2b:0f:63:46:
                    a8:7e:85:c9:52:8b:ff:00:0a:b3:4c:c2:a7:ed:c4:
                    66:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E8:90:BF:28:36:5A:45:C4:AD:D2:AC:93:66:D6:68:F0:53:AC:51
            X509v3 Authority Key Identifier:
                keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:93:c4:ec:06:81:2e:19:af:60:d1:63:ad:20:73:2b:d1:09:
         c0:1b:db:5c:90:c4:aa:85:99:23:3e:a1:a9:39:78:27:bd:78:
         92:a3:6f:43:36:19:bd:b7:42:35:fc:46:66:37:f5:a6:cd:c3:
         29:b4:e5:d9:8d:c5:89:1c:34:ad:f8:df:f4:44:1c:5a:a0:9e:
         13:87:dd:4a:cb:f5:87:32:e2:de:a0:59:b8:8d:75:92:04:7a:
         0d:77:a1:f9:4a:00:b2:c6:b2:79:0e:a3:f2:a9:ef:e0:48:86:
         e4:cd:b1:59:f1:5c:aa:b6:63:06:22:8c:7f:be:06:e3:05:b6:
         47:68:8b:68:5d:26:25:5b:f9:b9:18:b3:37:30:9b:40:76:a8:
         18:f0:75:ad:be:ed:60:70:35:74:4d:9d:16:c6:2c:5d:5c:42:
         34:ae:ad:cc:cf:04:30:38:30:40:6c:47:eb:b7:ca:3a:3a:fd:
         7c:ea:c1:7e:88:d4:b1:a7:9f:62:88:65:da:ef:51:30:60:70:
         7d:bd:73:13:d3:6a:c4:da:3a:81:8a:10:bb:eb:4f:e1:4f:a8:
         88:1e:58:41:f1:47:6a:a6:f2:6e:15:a9:ec:e5:ba:da:b9:eb:
         ed:97:22:bc:ac:a8:10:ba:9b:b8:ab:f4:26:3c:f9:46:71:eb:
         8e:27:d7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:35:38 2025 by rpki-client