Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
File:                     2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft (raw, json)
Hash identifier:          Ws8JNgNWeiPRNOysGA25Y0k9pq8qUKcXZqW27WJU56I=
Subject key identifier:   98:D4:3C:18:A2:4E:98:31:01:4F:8E:03:4E:0C:DB:1A:4A:60:E0:81
Authority key identifier: D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
Certificate issuer:       /CN=F3686F75AF/serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
Certificate serial:       052B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
Manifest number:          0529
Signing time:             Sat 29 Mar 2025 02:17:37 +0000
Manifest this update:     Sat 29 Mar 2025 02:17:36 +0000
Manifest next update:     Mon 31 Mar 2025 02:17:36 +0000
Files and hashes:         1: 2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl (hash: qwlPJNXR6Wf3HP/AY7NrUa85R752VTGH3i464ujizzQ=)
                          2: 0B32AD4A1D5611ECBB40873AD8A014CE.roa (hash: 4tBbSju8TJUrXsAaoMtdSxK8ImrTHKlcKaiey6wbers=)
                          3: BDB5A7FC1D5511EC9EEE033AD8A014CE.roa (hash: 2cjNPvlR7PUwI2VKGhKfkSFLYcnzPu/tOkW6A4CpmKI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3686F75AF
        Validity
            Not Before: Mar 29 02:17:36 2025 GMT
            Not After : Mar 31 02:17:36 2025 GMT
        Subject: CN=67e75840-1c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:9b:ea:ab:69:e0:79:00:fc:c2:90:07:02:
                    11:e6:6a:fe:c7:9f:72:38:e6:1e:a4:31:bc:cf:6e:
                    fc:80:c1:95:0b:0e:68:ff:ef:c5:e1:10:b4:ff:e2:
                    92:d9:96:33:1a:04:6c:65:73:45:6e:07:73:62:40:
                    98:6f:f8:07:45:cf:06:12:89:89:4c:2c:ac:d7:5b:
                    86:04:1a:00:99:08:1e:7d:cf:17:4a:16:a1:8b:3d:
                    52:ba:40:22:75:02:47:41:ba:32:a5:1a:35:3d:88:
                    30:8c:16:f0:9e:52:43:01:21:a3:64:28:83:7f:49:
                    18:e6:88:e4:bb:ba:3d:8b:9d:40:a3:d7:b7:5c:41:
                    0b:7d:0e:39:1c:1f:4a:84:89:96:72:cc:4f:5e:82:
                    41:ff:6c:93:39:38:57:04:0e:1b:d7:83:71:9a:41:
                    a2:b4:17:3a:71:b0:47:d8:b3:34:06:f7:79:dc:1f:
                    e4:41:71:51:17:a2:b2:35:8a:53:cc:cd:37:2a:90:
                    3e:fb:c4:10:3e:1d:e9:7c:00:51:09:2b:bc:35:4c:
                    82:8c:65:4e:74:0a:b2:4e:d2:2e:d1:de:57:05:47:
                    6b:ac:e1:2c:fd:dc:b8:91:43:d7:cc:e4:a7:a5:19:
                    74:f8:cf:07:2c:15:9d:2e:fd:fa:d0:c4:a4:85:7b:
                    b9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D4:3C:18:A2:4E:98:31:01:4F:8E:03:4E:0C:DB:1A:4A:60:E0:81
            X509v3 Authority Key Identifier:
                keyid:D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a6:75:6a:48:d8:6b:53:8c:bd:53:aa:c7:66:cf:ee:74:9c:
         cb:93:82:86:b0:7f:6c:2c:59:9b:84:92:fb:92:ae:9a:07:ed:
         28:e3:fc:50:5b:de:29:ad:d1:75:82:f1:41:a6:5d:5a:f8:c7:
         2b:b8:87:2c:b5:b1:20:d4:b9:fd:87:a0:1f:b2:63:9f:60:3c:
         c5:65:ec:c3:0a:89:59:4c:28:a4:ff:b6:a0:51:74:ab:87:c3:
         26:d0:65:70:b4:c6:39:4f:62:0f:e9:cb:c9:f1:c2:8d:de:89:
         36:d9:0a:13:46:6d:94:73:76:e8:49:c5:49:3e:cd:94:8b:b1:
         4d:ab:98:62:31:6b:0b:28:de:1f:d9:ba:4d:d9:87:b6:3a:ef:
         dc:c8:3f:18:d3:0d:b1:c3:d8:25:1a:2a:df:0b:e7:68:f0:5d:
         d7:ae:d3:be:42:34:ef:93:fc:c7:23:03:d3:2a:05:b4:db:f4:
         c4:22:ef:da:a6:9e:ad:5d:81:b9:0e:81:0e:d3:aa:91:74:e0:
         b1:d4:68:c2:fe:91:7b:b7:28:17:68:c4:07:b3:99:53:0a:37:
         76:5a:79:e2:03:e8:f9:e0:6e:ae:a7:94:e5:f5:85:f3:20:f2:
         cb:37:2b:d5:9c:f9:f7:c0:89:f3:0c:7d:a7:2f:1e:83:d9:64:
         fa:87:31:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----