Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
File:                     lyz9rusSb2_NRpalkPcBiDeqX_I.mft (raw, json)
Hash identifier:          OHYFFEvVLF+3imAPiJ01nm5MAt0o0Pti7oTRfaMxSAU=
Subject key identifier:   2C:40:7A:21:18:41:28:8E:54:5A:47:B7:5D:D4:83:C0:14:AE:66:1D
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Certificate issuer:       /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial:       05A8
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
Manifest number:          05A7
Signing time:             Sat 29 Mar 2025 02:06:40 +0000
Manifest this update:     Sat 29 Mar 2025 02:06:39 +0000
Manifest next update:     Mon 31 Mar 2025 02:06:39 +0000
Files and hashes:         1: lyz9rusSb2_NRpalkPcBiDeqX_I.crl (hash: I+zMljuvNyLh74QVaNe3heDI4u+3Fp4uA4cpgVIyx50=)
                          2: FCF2744EE4DD11ED83CFE7E95C736454.roa (hash: 7tfnNvaHIqZ7VHDcLuyEzEdaFsax5cOARy6FVza2SjE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448 (0x5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBDD7RI
        Validity
            Not Before: Mar 29 02:06:39 2025 GMT
            Not After : Mar 31 02:06:39 2025 GMT
        Subject: CN=67e755af-0bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:0e:f4:8b:8e:da:5e:ca:08:92:81:ae:02:
                    3a:b9:00:a7:ce:49:de:ab:52:19:51:a8:90:b6:72:
                    a7:8b:59:9c:b6:e3:38:0a:92:b4:5d:f9:17:7e:3c:
                    82:52:23:6b:47:99:0a:f4:64:de:fd:9a:8d:4d:b2:
                    61:32:42:8d:66:13:b8:81:f6:f5:80:93:24:57:f4:
                    17:e0:76:6b:45:12:3e:1f:58:8f:85:3f:a3:62:8e:
                    30:f5:73:02:be:3d:2a:bc:f4:1f:8f:5c:bd:5c:59:
                    49:c3:f8:d1:54:e5:1f:57:56:d9:44:7e:1f:2f:42:
                    40:b6:a6:ce:b0:7c:6d:02:75:ea:82:93:c2:8c:d8:
                    be:b6:d8:0c:bc:f6:0e:a6:30:f3:f2:7b:46:73:a6:
                    ee:40:8b:93:d4:47:c1:1c:f4:06:c1:b2:e0:41:51:
                    86:5f:33:11:00:14:a6:91:28:38:69:92:4c:65:0e:
                    74:ae:6f:2d:f9:12:94:cd:ea:b8:76:a4:af:8f:5a:
                    8e:9c:1e:a5:c9:03:2f:be:cb:7c:47:10:9d:f4:c3:
                    f2:fc:41:04:0b:ca:1a:20:cc:60:6b:46:40:22:8a:
                    db:9e:ff:8e:21:76:25:ed:06:38:0b:1e:a4:10:3f:
                    6e:5a:5b:eb:12:e2:c7:49:6a:58:3a:55:2c:7a:3e:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:40:7A:21:18:41:28:8E:54:5A:47:B7:5D:D4:83:C0:14:AE:66:1D
            X509v3 Authority Key Identifier:
                keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:57:d0:4f:52:05:a5:66:b4:1d:1f:5a:3a:c9:4c:2e:7d:c0:
         a8:58:f5:fd:a7:9c:66:b7:bd:c1:41:a1:5e:9d:b8:d2:16:63:
         55:a9:dd:d8:e9:59:5e:f0:79:9d:8e:fa:95:db:a0:a3:7b:72:
         dc:4c:3f:f9:d8:da:cd:a2:4d:04:c6:7d:14:f5:a6:96:90:ee:
         ed:3d:9a:0e:f6:cc:b2:e3:53:57:bf:01:66:9d:52:90:3a:09:
         c1:1e:93:e1:96:cb:8c:d7:0a:44:96:b7:b0:57:e8:ce:7c:e7:
         80:73:61:6d:b1:68:56:2f:13:48:d3:24:7d:96:aa:41:49:cd:
         ad:2e:24:65:a5:b4:bc:cf:d9:08:a1:13:3e:a1:d3:db:3d:9b:
         68:e3:44:ac:85:4b:2e:dc:03:8a:86:3f:e1:cb:7c:da:74:66:
         00:e2:4e:fc:a9:96:75:cf:7b:37:84:3b:36:0d:24:d2:08:57:
         8f:58:63:1a:1c:dc:5b:85:ab:82:d0:23:86:7b:61:a6:e2:fb:
         e1:70:0b:29:0e:ab:39:d8:00:ab:c5:8a:93:11:2b:bb:cd:b8:
         97:b7:1a:25:67:2e:8f:10:0e:e1:c8:9b:97:60:a0:98:2d:3e:
         bd:cf:a9:a9:44:92:09:c8:0c:b4:89:62:a3:6b:82:fb:03:e3:
         08:31:92:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----