Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
File:                     2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft (raw, json)
Hash identifier:          qLVbFUCq9D+qb1u/Og+i11wO0UUp6H2ITTVNU8bYfjk=
Subject key identifier:   B7:2A:91:08:C1:A8:0E:6F:8F:35:7A:B7:78:D9:FD:39:32:CC:80:50
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Certificate issuer:       /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial:       0347
Authority info access:    rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
Manifest number:          032F
Signing time:             Sat 29 Mar 2025 02:50:14 +0000
Manifest this update:     Sat 29 Mar 2025 02:50:14 +0000
Manifest next update:     Mon 31 Mar 2025 02:50:14 +0000
Files and hashes:         1: 2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl (hash: USU9tGQUHaxfo+JyWFbGwytzNrUuUXocZpXwtT64AKU=)
                          2: 93BA6A5CB91011EDB8B1D6BEF1222468.roa (hash: YGRgzaAb/YnXWVOOBNYrhEjo30QCRb8Fkzjl0qt2wDc=)
                          3: F03028BEB90911EDBC9A54ABF1222468.roa (hash: zsopuqLK1tSA7mCbtNRUucoV89sK9pi/Z0DfSXu183E=)
                          4: 725FFABAB90711EDB1D81DA4F1222468.roa (hash: hA3fXTJjixJwU74ELVWAzBoVh5Eq9yEcbw2wYbLFpug=)
                          5: 62851EB0B90A11EDB17EB2ACF1222468.roa (hash: KD/gAMizoiFtTVnStO9eX0QYZblw85vUZmHKsND2pTk=)
                          6: 80FB063EB90A11EDAC5617ADF1222468.roa (hash: tcO5PBtvjVtzT9CotWVqRB4g/7fT/bhyCK302/ETGn4=)
                          7: D91F7F7CB90811EDB45839A8F1222468.roa (hash: /AqBc8JhP+3lngt9NO9tWOXFsemAbOAmvNyWVZaSbTk=)
                          8: 37AD41C2B90A11ED8DAB4CACF1222468.roa (hash: mSWIE5KDecVcRW4iDL50SkMiLWpIwV3bXouL+7gPuPY=)
                          9: 8E6F51EAB90911EDA8C54FAAF1222468.roa (hash: KvGFnoqgX8e0sSQhns9l0emB0PuLl/3GyT/+80nye1M=)
                          10: E003396AC31611EDB96E7A92F1222468.roa (hash: ciPrkOvWkb92NsuX/kyyg0kAtFWJDiK6NuIcmVMrgcc=)
                          11: 167339ECB90711EDBA63E8A2F1222468.roa (hash: P6GYbIzzDRnYG9vPerasAeKE8Sl8/Wi2snWy1lcXWII=)
                          12: B4BE92AEB90711ED8CC2D9A4F1222468.roa (hash: JOPBR+tvvjRemnu4y66+pd4vjEJr1OisV+nPw742BIY=)
                          13: 106D8FAEB90A11ED92569AABF1222468.roa (hash: qK+8unBWnLw2np+P2NhG+s7+ILZtJurSMer/MKTF4BU=)
                          14: 0865B3AAB90911ED97A2A4A8F1222468.roa (hash: pdcXV4eLH/kKSfrIo7tx7o4UGrO2CmzeLDzg/+WYsSU=)
                          15: 96B78CCAB90711EDBA777CA4F1222468.roa (hash: uOnkXwg8nnGMr5yR+AMaHSyknnzaFzGFvAqM7gh72MY=)
                          16: C5187DA6B90F11ED9E1D69BCF1222468.roa (hash: Q/8/zDvHcN2wrHKQW8W02X9WyzRYnpfJIkvMItRNi4w=)
                          17: CFB27832B90711ED9BD407A5F1222468.roa (hash: Fc+yb6vnJZ72A2kr3CBvN+GPLPr4BeE+HzXozlQerQI=)
                          18: B8FA1F04B90811ED81AABBA7F1222468.roa (hash: 0MNSurAaP8AIdMB01conZnP9fR7ARG/ikiFuWorUpQM=)
                          19: 58D3E21AB91011EDB68C04BEF1222468.roa (hash: eYmtu3W0WuAq9vif5Te4vSxu2C52E3LM0QU3hP8gC68=)
                          20: 7DA334A6B90611ED9F8335A1F1222468.roa (hash: vI2mWrJeCXdlck7gnjH32CU1uLtmyntFBr7jkV0U+3w=)
                          21: 3EE2E920B90911EDB9134AA9F1222468.roa (hash: 8bv1IHhzCMs75pQpQOE/yQFazZySPytY2fmDfaDhtTo=)
                          22: BF1A3F7CB90311ED89E10799F1222468.roa (hash: rwAEgPmNu1oCkwCCMO8yD3xcFwvwFNOX5FgfPlQ3CKM=)
                          23: EB7417DEB90611EDB12879A2F1222468.roa (hash: LX5dEoKskjg1UzAxu1yMfDnMjaz10pgGYsI2RAGqcbc=)
                          24: BDBEE206B90611EDA2D90EA2F1222468.roa (hash: RwYDsP8oUi5D60UunyJRJ4NBv+mub9g/n60P1c16VCc=)
                          25: B99DB078B90911EDBDC7B3AAF1222468.roa (hash: H/tRMckT8rHTn7SdTgbzu/5+nMj3GvGhZ276hkZG2jg=)
                          26: 36C1DE70B91011ED88D79DBDF1222468.roa (hash: W36hnklCxUmaZlJyHZv7Qp792C5Vr81CjD4AlpjIwhA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839 (0x347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36886B3AR
        Validity
            Not Before: Mar 29 02:50:14 2025 GMT
            Not After : Mar 31 02:50:14 2025 GMT
        Subject: CN=67e75fe6-eaff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:ac:43:20:20:fc:1a:2d:dd:8b:9d:03:45:
                    1e:8b:0f:44:79:5c:e2:e0:59:51:77:50:46:6a:c9:
                    33:39:5b:55:3e:e8:94:0a:b7:be:84:1b:5d:37:72:
                    ca:5c:1b:fa:e3:e8:f0:65:57:b1:94:25:05:d1:0a:
                    97:4f:dd:b0:2b:ba:98:8d:88:2f:67:51:22:4b:20:
                    e3:2d:1a:8f:b3:aa:23:8c:d8:39:0d:13:a7:a7:9c:
                    e4:77:86:31:f4:8b:80:0f:56:f0:48:ff:a7:b4:c7:
                    f2:30:52:2c:7a:fe:7b:cc:4c:c0:9a:31:49:87:57:
                    fe:05:40:f8:f5:0a:9c:2f:5c:18:31:1c:9b:16:c9:
                    ae:99:9b:ab:ac:45:4a:14:2d:1e:d6:ba:d1:e6:3a:
                    56:91:c6:f1:4a:40:8e:59:6f:e2:31:28:7f:b7:03:
                    52:41:4a:81:4e:93:45:c9:0b:4b:50:be:0b:e2:4e:
                    38:7b:0b:07:d7:c3:69:5c:ee:ae:ac:87:1f:a3:cb:
                    41:ac:1a:24:e8:d7:f2:78:9d:3d:0a:66:c9:12:df:
                    52:30:14:ed:51:3e:cf:b9:44:f3:af:12:39:13:96:
                    90:f1:48:01:91:ea:e2:e1:22:81:1f:67:aa:e9:e7:
                    5c:84:0e:ed:3a:f2:77:b5:cf:56:db:d8:19:9b:83:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2A:91:08:C1:A8:0E:6F:8F:35:7A:B7:78:D9:FD:39:32:CC:80:50
            X509v3 Authority Key Identifier:
                keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:c3:a0:28:95:57:e5:86:ce:14:10:66:93:73:32:53:e0:8e:
         2e:d5:ea:ae:cb:df:69:bb:2c:f2:1e:e1:69:5b:89:2d:53:22:
         fe:0d:48:74:2f:d0:4b:33:45:fc:83:27:86:63:1e:63:a9:63:
         a8:a0:55:f7:ee:8c:46:f2:c9:b6:af:40:da:48:27:8f:f3:43:
         e4:24:09:c4:67:3d:4c:4e:9c:b6:4e:52:fb:f4:d8:63:c3:9b:
         b7:ae:07:31:3e:73:e3:f9:90:ea:b4:85:41:39:c8:20:4d:3a:
         db:63:a3:95:36:7e:d0:f5:23:34:7d:29:18:2c:2b:e6:27:50:
         e1:6f:fd:ff:40:26:d2:58:97:0d:ec:82:e3:e1:98:a5:f5:48:
         92:33:78:67:f2:dc:2c:51:8d:2c:a9:a7:17:fb:6b:55:61:7a:
         b8:6d:6b:88:c9:59:bc:7e:b3:fb:1f:63:32:ac:32:b0:8d:bc:
         60:12:e4:dc:42:bd:3a:21:57:34:b8:ab:d1:eb:c5:3d:92:88:
         f6:9d:fc:0c:aa:c8:1a:40:a2:4a:35:94:8c:41:ef:62:e2:31:
         73:08:6a:fe:af:ef:0c:cb:75:2c:81:ea:ff:4f:15:c9:4a:11:
         75:aa:ce:f8:0c:9c:ad:04:16:67:61:ba:0f:06:2a:8f:47:8d:
         7d:c2:87:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:30 2025 by rpki-client