Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
File:                     Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft (raw, json)
Hash identifier:          J6j/GpHNflKMI0+X89c7oNhRogn+OUW2DEsqwoALEgQ=
Subject key identifier:   61:FA:7A:FB:A3:81:DC:93:3A:7C:9E:AE:D3:99:05:13:5D:64:78:FC
Authority key identifier: 26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44
Certificate issuer:       /CN=F36E4A6EAF/serialNumber=263ED1E56140214B1B2EBFB55667A67CE5594644
Certificate serial:       03A5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
Manifest number:          03A4
Signing time:             Sat 29 Mar 2025 02:41:41 +0000
Manifest this update:     Sat 29 Mar 2025 02:41:41 +0000
Manifest next update:     Mon 31 Mar 2025 02:41:41 +0000
Files and hashes:         1: Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl (hash: Bt6j0sVAJdn4q/o1fCoDzXMVoxcehn19fHMGMjyfOK4=)
                          2: B6E3EFEC4B2B11ED8B51B99DF1222468.roa (hash: SeEZMep8qUp7m/jfkKAlult6v7B0lE6Bk41ZD/YO3Aw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4A6EAF
        Validity
            Not Before: Mar 29 02:41:41 2025 GMT
            Not After : Mar 31 02:41:41 2025 GMT
        Subject: CN=67e75de5-45bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:81:2e:51:7d:c0:0c:a7:2f:79:47:0f:a7:
                    2f:3c:af:18:b6:08:0e:da:68:9e:cb:43:6c:18:58:
                    1d:e0:df:7e:1f:12:48:5a:d1:53:31:4a:6b:14:2e:
                    b7:96:08:74:d9:49:46:7a:3b:b8:d0:82:e0:e7:c3:
                    ab:a7:a5:92:ea:e8:9a:18:52:38:5d:af:d7:5c:9f:
                    ea:d2:41:ab:24:4f:47:62:8e:dd:ce:be:f8:bc:08:
                    2d:d3:5b:31:bd:8d:b4:a7:d5:f3:a0:2c:2c:73:02:
                    5a:89:1b:e8:ea:25:b8:6a:9a:69:41:06:f1:2f:7f:
                    c5:e1:69:55:9f:c5:b5:ab:f5:83:43:23:4d:3d:6c:
                    55:ba:ec:70:9c:a6:dc:db:e6:5b:21:d1:dc:ef:ad:
                    79:13:a9:82:4b:ff:52:ca:c3:73:44:49:ea:00:b4:
                    99:aa:59:fa:54:97:48:0e:6b:b5:bb:33:28:30:8a:
                    c3:0f:53:3e:4a:77:15:3f:76:b2:c0:1b:5f:9d:83:
                    bd:a5:ca:d6:be:87:08:82:5f:65:ea:db:c0:23:a4:
                    ef:7a:b1:e7:29:2c:84:e9:d5:4e:25:82:c5:b8:92:
                    50:8b:6d:0f:94:02:b9:f2:01:f4:df:f5:0d:f8:89:
                    a2:d4:51:cd:f5:88:e0:bd:a2:5a:33:cd:9a:c5:4e:
                    f9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FA:7A:FB:A3:81:DC:93:3A:7C:9E:AE:D3:99:05:13:5D:64:78:FC
            X509v3 Authority Key Identifier:
                keyid:26:3E:D1:E5:61:40:21:4B:1B:2E:BF:B5:56:67:A6:7C:E5:59:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4A6E/539E08E64B2B11ED8921BD9CF1222468/Jj7R5WFAIUsbLr-1VmemfOVZRkQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:2a:83:21:8f:9c:32:66:d9:45:c8:19:7b:f4:5b:8e:ee:cd:
         89:2f:a7:76:21:18:94:a1:52:cf:99:47:43:c6:25:38:d9:d9:
         18:10:e0:2a:b8:fc:bd:a0:dd:eb:3a:a6:18:e0:20:66:b6:02:
         7c:24:9e:bb:48:67:5d:87:73:56:cf:db:fa:c1:13:c8:00:89:
         c4:c6:65:11:c2:ff:16:df:73:3e:62:ff:59:eb:83:7e:c2:31:
         ee:e8:3f:97:2b:6c:3a:25:ff:c7:d4:95:31:8b:b4:65:cf:96:
         81:9d:6f:cb:00:2a:25:1f:75:5b:61:d5:51:e9:89:78:02:50:
         dc:04:a8:3d:5c:15:e6:b8:7e:24:c3:45:bd:dd:da:12:7b:09:
         b2:45:29:d8:27:5b:eb:2c:55:71:e7:7a:55:92:ec:a3:b4:c4:
         ec:4e:25:43:bc:49:b2:08:30:d2:f0:9a:ab:8f:48:3b:5f:ae:
         17:14:83:bb:dc:9c:e3:bc:cb:d5:3b:c4:d6:55:e8:1c:2a:03:
         81:94:b4:93:fe:dc:fd:65:a6:f8:61:0b:76:f5:61:6a:27:4f:
         5f:b7:72:32:88:51:d0:c3:60:97:54:e2:5c:69:65:43:28:58:
         60:9f:3f:5e:f7:c1:c0:34:c0:52:d1:8f:bc:49:dc:4b:31:3a:
         9f:5c:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:17:21 2025 by rpki-client