Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
File:                     zr6Z7rC-POjbGbpEdmyj48gHqYk.mft (raw, json)
Hash identifier:          fwcMdqr3K8xpUhXBLDwpg04J/UHKpMGPsaHI5wXC7X8=
Subject key identifier:   9B:89:21:A4:E5:70:88:3D:D4:D5:C3:1E:D6:F7:51:FA:26:F6:92:C3
Authority key identifier: CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89
Certificate issuer:       /CN=F36C4A3BAF/serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
Certificate serial:       01DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
Manifest number:          01DC
Signing time:             Sat 29 Mar 2025 03:14:06 +0000
Manifest this update:     Sat 29 Mar 2025 03:14:06 +0000
Manifest next update:     Mon 31 Mar 2025 03:14:06 +0000
Files and hashes:         1: zr6Z7rC-POjbGbpEdmyj48gHqYk.crl (hash: vK0ibh7kMdLZH6Q20NcH4yIhH2BtaURtxqezZVavyOQ=)
                          2: B4ABD18CA48E11EEB808FE65D25BE465.roa (hash: S5XSL+t01DymTgJeqFWNkxH4TrI/NWZhOLYNwLD+7Qs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4A3BAF
        Validity
            Not Before: Mar 29 03:14:06 2025 GMT
            Not After : Mar 31 03:14:06 2025 GMT
        Subject: CN=67e7657e-5eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:a1:90:b1:91:9e:8a:98:5e:cb:b8:9b:ea:
                    f3:d6:b1:73:f0:21:99:ab:f9:58:86:d4:99:48:e3:
                    d2:4f:c8:c9:a0:87:59:d6:55:d2:db:64:f7:4e:84:
                    a5:3f:c1:3c:35:b3:d3:f6:e1:83:b1:a5:76:e0:fc:
                    e5:7f:3e:8c:97:2b:d2:03:bf:32:19:6f:4b:47:f9:
                    9d:85:a0:98:37:b9:da:3c:ad:61:0b:bd:37:6d:06:
                    ef:2b:20:25:cb:16:bf:a5:eb:c2:f9:32:bf:e4:28:
                    53:97:0c:4c:b0:f1:c3:b4:f0:e8:ca:92:12:0d:1b:
                    92:7f:c4:ac:20:6a:24:ed:04:d9:59:c1:ad:3e:12:
                    8d:84:0d:58:a5:94:e4:10:ce:2b:12:9e:cd:94:63:
                    23:0b:10:71:5d:57:0a:bd:64:cb:68:c8:29:00:21:
                    d7:5a:97:87:83:54:f9:ff:a4:73:8e:bf:0b:9c:9a:
                    b6:94:77:7e:35:93:f8:ae:09:4e:f8:90:3d:1b:91:
                    13:49:25:5f:e4:25:75:c0:09:ff:18:ea:4a:87:72:
                    21:ae:73:64:5f:a1:3a:e8:ab:10:7d:b9:98:a5:6a:
                    88:27:b7:62:9f:81:da:c7:fd:50:e5:68:d2:6e:72:
                    9e:53:31:cb:ce:23:94:45:ab:b4:71:0e:54:b6:7a:
                    ec:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:89:21:A4:E5:70:88:3D:D4:D5:C3:1E:D6:F7:51:FA:26:F6:92:C3
            X509v3 Authority Key Identifier:
                keyid:CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ef:52:85:14:92:45:91:22:65:2d:ea:8b:00:e2:6c:7e:45:
         f1:a3:59:ae:11:d4:aa:23:e3:b8:a7:8e:00:3d:9a:2d:dd:66:
         b0:fe:7f:67:e4:25:3f:9a:bb:76:db:04:69:9e:66:b2:82:b1:
         ce:40:e0:76:43:18:6d:fa:06:8b:82:db:c4:6d:66:ef:93:e4:
         ec:f6:20:e2:52:b7:5b:b6:d2:01:04:cc:80:a1:58:e1:81:ea:
         26:bb:93:a4:1c:b1:a7:6f:48:83:ab:ea:a2:c1:aa:2f:3c:aa:
         35:e6:80:4e:3e:56:dc:77:da:1d:56:f3:4b:13:b9:0d:d1:91:
         19:3c:f4:0d:24:db:cc:71:5e:11:df:cb:0a:9c:39:30:47:c7:
         1b:03:5a:06:6f:83:63:89:10:05:62:f5:9f:f8:be:89:81:74:
         a3:b6:9a:69:89:5c:81:39:3d:f0:fd:04:c3:c8:15:09:32:5c:
         63:48:0c:45:68:79:59:d6:9d:eb:a6:c3:a0:67:b6:a0:f6:a5:
         02:ac:84:73:28:a9:63:33:c9:bd:a1:57:c4:8d:e3:e9:8b:7f:
         6f:3d:5b:35:66:88:61:26:e1:5a:4b:e3:fe:c0:f7:32:d4:49:
         c0:6a:ed:66:9a:c0:34:7f:45:9d:8a:66:9d:ab:30:b8:eb:e8:
         ae:5d:b6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:56 2025 by rpki-client