Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
File:                     5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft (raw, json)
Hash identifier:          VQTeDBiG6Tpj9668HiLQnjTTzWQ7FbVL0li/Fw41oWA=
Subject key identifier:   70:A9:E0:EA:48:DB:FE:F9:5A:D7:B7:45:D9:BC:EE:E7:C8:3B:B3:27
Authority key identifier: E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D
Certificate issuer:       /CN=F3691854AF/serialNumber=E7F809AA6A3166B8C5AEC98FCFA8F6550E0FE85D
Certificate serial:       021D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
Manifest number:          021D
Signing time:             Sat 29 Mar 2025 03:08:50 +0000
Manifest this update:     Sat 29 Mar 2025 03:08:49 +0000
Manifest next update:     Mon 31 Mar 2025 03:08:49 +0000
Files and hashes:         1: 5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl (hash: pg4c2pl5b2KkENKI+PgFv9ynMAFS5TKZO/B7c/J1Pns=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AF
        Validity
            Not Before: Mar 29 03:08:49 2025 GMT
            Not After : Mar 31 03:08:49 2025 GMT
        Subject: CN=67e76442-61e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:5b:2c:e8:32:80:48:96:bc:3c:bb:fd:38:
                    be:9e:a2:f4:98:0b:a4:d8:f7:bd:ae:70:b6:f2:b9:
                    a0:cd:02:70:66:39:17:4f:53:64:29:40:7e:aa:28:
                    7c:ab:5c:5c:56:9d:09:39:0b:c0:95:68:16:c5:ef:
                    71:eb:51:4e:35:88:b1:d7:5f:b2:f1:33:e5:70:29:
                    e7:71:35:48:3a:c9:9a:94:f1:ae:70:c8:07:87:9e:
                    79:84:2f:3b:20:58:9c:a7:01:b9:6a:cc:12:56:70:
                    3e:a4:62:de:78:62:07:43:b2:33:b7:f7:a6:44:07:
                    db:c3:5f:ee:9e:3a:7c:0b:d6:36:45:7d:70:04:b2:
                    44:9a:97:5b:cf:77:ae:0e:4d:45:72:1f:36:9a:c2:
                    92:a9:6c:85:36:61:06:3a:60:3c:5d:f9:4d:94:8d:
                    43:c3:ac:f8:3c:85:43:88:65:92:9b:10:cd:2d:f9:
                    e4:ff:78:b6:31:7c:f2:5c:f6:45:9c:14:a9:59:89:
                    07:ca:dd:32:ee:12:40:a6:c9:3c:95:87:8e:03:37:
                    f8:2b:90:2c:d8:f3:36:1f:ca:74:23:6d:8b:60:89:
                    7c:6b:45:56:62:e5:d1:da:9f:ba:77:11:2c:6e:75:
                    7f:db:2c:3d:4c:fc:eb:10:e9:a3:35:3a:37:81:17:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A9:E0:EA:48:DB:FE:F9:5A:D7:B7:45:D9:BC:EE:E7:C8:3B:B3:27
            X509v3 Authority Key Identifier:
                keyid:E7:F8:09:AA:6A:31:66:B8:C5:AE:C9:8F:CF:A8:F6:55:0E:0F:E8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/5CFF4AE071AD11EEA2EC74334AD9E6FC/5_gJqmoxZrjFrsmPz6j2VQ4P6F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:02:28:27:a1:3c:00:59:18:a9:18:4b:7a:a1:e1:15:46:
         8f:28:f7:e4:11:a0:43:38:13:ed:4e:22:df:e5:fc:24:71:56:
         39:1f:2a:34:24:ad:ec:ad:a0:5f:dc:d7:3f:50:3a:0a:44:93:
         4d:41:1c:5c:32:86:ce:93:84:d1:70:67:5f:e6:29:0f:b0:6b:
         57:4f:4c:31:93:f6:3a:68:d6:a6:0d:63:74:4f:f1:da:86:9a:
         7a:be:b7:0e:f3:b5:d1:59:aa:98:07:20:7b:70:af:cf:81:8d:
         0b:73:6c:58:86:79:14:26:07:7b:e1:8c:c5:cf:a8:ae:6d:30:
         25:bb:91:88:42:56:b3:dc:57:e4:64:33:86:cb:5c:b5:79:33:
         3a:92:af:a6:2d:e2:c3:78:d9:6b:88:21:7c:c9:4d:2e:30:49:
         54:6f:65:a5:a6:c5:35:10:90:99:7f:ae:fb:9e:cb:a0:5a:7c:
         51:0c:79:13:69:d8:64:df:2b:70:89:5d:ac:62:b8:7a:86:51:
         1a:e3:f6:ec:97:e1:2c:2a:67:2f:87:a5:d1:ca:01:7a:b4:0b:
         1c:dc:8e:76:44:cc:66:99:70:8f:d1:8e:36:12:d5:fc:68:f5:
         3d:cf:a0:84:68:20:8f:09:4d:62:f8:a7:63:52:65:d8:4d:30:
         78:6e:e5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:15:02 2025 by rpki-client