Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
File:                     qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft (raw, json)
Hash identifier:          b6IIIW7kzqetPe0bOc+Yo4jNdymz57cwUSBJvi+oAf4=
Subject key identifier:   98:ED:60:22:FC:5C:A3:8C:CC:5A:88:B3:B3:40:3F:26:93:4F:CA:4E
Authority key identifier: AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65
Certificate issuer:       /CN=F36C684FRI/serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
Certificate serial:       081D
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
Manifest number:          081D
Signing time:             Sat 29 Mar 2025 01:44:45 +0000
Manifest this update:     Sat 29 Mar 2025 01:44:45 +0000
Manifest next update:     Mon 31 Mar 2025 01:44:45 +0000
Files and hashes:         1: qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl (hash: SEiKbsQh1Pz8AigN/9L7YBs4Iw2Q0oLRWD58MLNgJLY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C684FRI
        Validity
            Not Before: Mar 29 01:44:45 2025 GMT
            Not After : Mar 31 01:44:45 2025 GMT
        Subject: CN=67e7508d-eca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:fe:37:20:ec:cd:df:a8:34:5d:0e:15:29:
                    15:8a:c6:fc:8d:e3:20:bf:94:80:11:51:ad:c7:30:
                    d2:82:e0:8b:a5:75:a0:05:aa:0c:b6:41:dc:ad:a1:
                    ae:5b:f6:28:27:27:16:a1:05:12:b3:42:1a:c8:1e:
                    58:26:54:a0:b2:eb:bc:9b:89:bb:24:58:7d:7a:10:
                    d5:f2:43:f8:65:dd:f5:82:ec:92:af:d8:79:45:97:
                    e1:42:4c:7a:38:ba:60:34:9c:79:56:8c:09:d6:46:
                    81:66:ef:ab:a3:0b:7f:9a:a9:0e:00:d0:33:96:8a:
                    32:4d:25:11:5a:c6:6a:76:c7:1a:d6:6a:fc:6c:03:
                    ca:e9:2e:a8:40:70:ac:a7:2e:25:99:b7:23:d4:c6:
                    23:09:c1:78:73:e0:71:7b:3c:99:fb:58:9f:01:05:
                    dd:9b:09:34:1e:3a:25:bd:8c:e7:ea:08:f6:39:e1:
                    da:c3:72:9a:a5:61:59:19:ed:e8:d3:7e:f8:ed:1b:
                    3e:f4:d1:73:60:30:6e:3a:e3:1b:3e:ae:07:45:dc:
                    89:96:92:8b:cf:a0:f3:57:37:c7:1a:2d:57:7f:c0:
                    c3:16:50:41:80:4f:7b:05:47:5d:1b:26:c6:07:ac:
                    44:ae:90:3a:d0:7f:89:1f:c6:35:ed:4f:10:47:94:
                    2d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:ED:60:22:FC:5C:A3:8C:CC:5A:88:B3:B3:40:3F:26:93:4F:CA:4E
            X509v3 Authority Key Identifier:
                keyid:AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e0:19:28:c2:7c:13:42:11:14:91:eb:2c:bd:ca:63:e2:5a:
         fc:73:cd:44:e6:cb:8d:d3:4d:7f:59:0e:5e:92:f1:e5:c5:fa:
         c5:d1:4b:27:e8:b3:73:8f:0d:57:ab:3e:23:62:b1:ea:f3:07:
         ff:cf:bd:6e:d9:29:d8:90:31:e2:37:7c:cc:02:0c:d0:47:86:
         31:90:0e:e1:36:20:4b:a9:72:33:e3:13:c4:fd:b2:8d:c6:0b:
         0c:14:0f:1e:15:3f:e9:c4:bc:e8:42:be:14:c8:c3:54:0c:f3:
         77:48:de:4d:9d:bc:86:eb:60:18:35:7d:4f:d5:b9:c0:1d:c9:
         88:ef:6c:24:88:d1:3e:b4:eb:15:a4:3f:23:9a:2a:4b:e3:03:
         fd:ae:fc:8f:e1:99:f5:9e:77:f1:21:be:c3:c3:95:22:37:21:
         57:7e:c1:97:66:61:48:5b:72:55:d7:e3:09:21:1e:57:73:1d:
         f7:94:fe:57:54:ca:73:e8:28:98:aa:34:8d:b7:63:bb:2f:6f:
         ed:b7:6f:44:3b:00:e4:ae:01:b4:3a:51:a1:52:41:e6:1e:f9:
         1a:b9:bb:09:dd:fe:85:aa:09:ef:d5:b9:68:37:fe:e6:17:b3:
         a8:ab:ee:2e:0e:71:e9:95:00:11:53:e2:ba:a7:d3:19:05:b3:
         64:77:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----