Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.mft
File:                     qTyToDhGqGjBZRyD_VmonbSAVE4.mft (raw, json)
Hash identifier:          oNFFyKzTrnRlgAreKHr5uAKXVhs2PoV/M2g5sFNrzx8=
Subject key identifier:   B8:08:6C:3D:EF:BA:64:A5:1B:5E:F8:CF:40:3E:1B:15:83:FB:73:F5
Authority key identifier: A9:3C:93:A0:38:46:A8:68:C1:65:1C:83:FD:59:A8:9D:B4:80:54:4E
Certificate issuer:       /CN=F36A2CA0AF/serialNumber=A93C93A03846A868C1651C83FD59A89DB480544E
Certificate serial:       070C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qTyToDhGqGjBZRyD_VmonbSAVE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.mft
Manifest number:          0708
Signing time:             Sat 29 Mar 2025 01:54:40 +0000
Manifest this update:     Sat 29 Mar 2025 01:54:40 +0000
Manifest next update:     Mon 31 Mar 2025 01:54:40 +0000
Files and hashes:         1: qTyToDhGqGjBZRyD_VmonbSAVE4.crl (hash: nqh107j0uHKdm2gsGqjgc7EX1VEJHqanIFti18REzPE=)
                          2: 101079CE3C7711EC8C3E4239D8A014CE.roa (hash: jB0xIl80rdfHsMSZYfYO09Z2DJcH9xvEYlOsAEua2i8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1804 (0x70c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2CA0AF
        Validity
            Not Before: Mar 29 01:54:40 2025 GMT
            Not After : Mar 31 01:54:40 2025 GMT
        Subject: CN=67e752e0-a037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:4d:2d:0b:30:01:5f:4a:f7:67:43:b2:1d:
                    ef:3a:41:73:7a:29:3f:31:6f:bf:ac:8b:e7:57:c2:
                    9c:59:e3:42:ab:74:5e:2c:41:32:63:78:e1:88:6c:
                    12:9f:59:52:a2:4b:c0:a6:4c:5b:5d:2d:8e:c6:50:
                    36:bc:5e:fe:5e:70:f3:46:0b:d3:7b:43:8b:b6:90:
                    bb:70:f8:86:31:65:38:cf:a5:0c:6f:1a:32:a0:b7:
                    22:51:55:9b:6c:0f:1d:b0:ed:c9:70:6a:59:39:25:
                    79:09:dc:aa:38:c3:40:57:12:de:cd:45:3a:98:b7:
                    76:a7:e9:4f:62:de:27:5f:e0:27:ad:8f:cb:ec:69:
                    f6:09:00:bc:ff:4e:63:f3:be:2c:bc:61:2a:db:3c:
                    cf:eb:8e:8b:74:86:ce:b0:ca:49:fc:04:ef:ca:5a:
                    0a:cb:af:df:a9:01:ce:66:1d:0b:37:9c:d5:d1:0b:
                    1a:4a:ed:55:b2:81:a6:15:c1:6b:c1:80:a4:f4:62:
                    03:7a:6a:ce:5b:13:c7:fc:a0:6f:22:ad:c1:82:b2:
                    5c:64:63:13:1e:27:88:3b:e6:f4:36:a1:a4:25:f9:
                    4a:52:70:65:17:c7:10:18:ef:7a:9c:5c:ea:95:ae:
                    85:0e:2c:02:d2:c4:bb:f5:81:ee:a6:22:17:9b:4a:
                    78:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:08:6C:3D:EF:BA:64:A5:1B:5E:F8:CF:40:3E:1B:15:83:FB:73:F5
            X509v3 Authority Key Identifier:
                keyid:A9:3C:93:A0:38:46:A8:68:C1:65:1C:83:FD:59:A8:9D:B4:80:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qTyToDhGqGjBZRyD_VmonbSAVE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CA0/DFAEDC70AC9F11EA8B649748F8AEA228/qTyToDhGqGjBZRyD_VmonbSAVE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e8:b4:4a:7f:4a:65:8b:47:cb:45:81:4c:db:1b:ec:da:2e:
         71:02:be:46:a3:33:53:04:7d:e1:00:31:b7:54:f5:a1:ea:dc:
         c7:c0:35:a7:4b:59:f3:cf:19:8f:b4:f1:68:bf:84:0b:f6:74:
         f8:4f:64:08:d7:fe:53:a6:fb:51:da:4b:92:7a:88:7c:9f:35:
         71:e9:ac:31:cc:24:23:83:1f:ad:27:96:89:22:be:e6:15:07:
         c8:16:38:53:73:68:17:81:5c:5e:f0:84:20:54:13:cf:22:51:
         6a:fd:27:f4:44:8d:88:06:dd:22:6f:60:48:37:32:9e:11:23:
         a4:78:d9:98:52:46:bd:eb:72:38:4b:a3:41:2a:0b:88:96:21:
         71:d8:bc:19:63:4b:d0:78:97:54:ad:16:cf:8e:c8:ff:a2:4f:
         a7:87:8c:50:14:f7:f5:a0:88:7b:57:57:81:23:7e:02:05:e3:
         d9:50:28:38:49:5a:af:16:23:f0:07:5d:2d:91:a8:e5:f9:fc:
         4b:35:07:33:28:39:b2:d8:4a:a4:a6:0a:14:48:d7:c7:d6:66:
         d3:2d:61:e1:1d:ad:11:fd:95:7e:cd:26:a8:1a:8a:bc:7d:3b:
         45:3d:55:67:84:7d:62:30:d1:b5:44:91:b3:ab:0a:dd:61:7b:
         88:09:1d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:06:09 2025 by rpki-client