Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
File:                     3Y7gOV77NMQJjlduH6lWEvCuEIw.mft (raw, json)
Hash identifier:          hcFJfih5PFn767/zBslzfBD5ihK1f9yHyTcQC7Rub/Y=
Subject key identifier:   19:36:8D:69:DE:DC:3D:16:BF:B8:AF:2E:25:EE:C3:DB:3B:00:EA:57
Authority key identifier: DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C
Certificate issuer:       /CN=F36EE14CAF/serialNumber=DD8EE0395EFB34C4098E576E1FA95612F0AE108C
Certificate serial:       0199
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
Manifest number:          0195
Signing time:             Sat 29 Mar 2025 03:20:31 +0000
Manifest this update:     Sat 29 Mar 2025 03:20:30 +0000
Manifest next update:     Mon 31 Mar 2025 03:20:30 +0000
Files and hashes:         1: 3Y7gOV77NMQJjlduH6lWEvCuEIw.crl (hash: ijveo7SOYMez3gPjwB2haCbj3+l4nni05Hfhldsbi1s=)
                          2: 41ED69D60D1511EFA8396400017001B1.roa (hash: x3aVslqCzMfioshN80Dla6JteewrsmH2GjIbIFA+j2M=)
                          3: 1A07CB8EDBEA11EEA45EFA81775412E6.roa (hash: Pkjs2jgzXCv29HKkqLFfvU1IeY4hITiyODVD/2YyWlE=)
                          4: A07BB004DBEA11EE8E03CC82775412E6.roa (hash: 5FeX+dqvUeIECgzm38Ru/fnBhkIsH4lq/tNWx1MCZM8=)
                          5: 6B9CD7800D1511EFB6A61201017001B1.roa (hash: ssvUYk5x0OzQ7Q0Xp7UErygVy3MmZIG7nazU7zgnCUM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE14CAF
        Validity
            Not Before: Mar 29 03:20:30 2025 GMT
            Not After : Mar 31 03:20:30 2025 GMT
        Subject: CN=67e766ff-5334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:aa:23:8c:66:aa:3b:52:35:ba:b8:7a:be:0c:
                    20:95:1c:20:c1:6c:22:04:7e:21:1c:b8:56:bf:ce:
                    ef:fd:40:02:62:d4:40:25:ea:50:c7:2d:95:3e:8f:
                    cb:6b:a6:04:97:7d:f9:fd:05:70:36:10:00:fa:64:
                    e5:e0:89:8a:a7:01:3c:43:ef:98:c2:e9:47:15:63:
                    74:dd:13:39:cf:0a:6b:23:47:c6:35:f8:ea:ea:53:
                    9d:dd:e7:a1:2f:92:a8:17:0e:a5:dd:6d:a4:16:6f:
                    d9:87:ac:78:e3:f4:5c:92:b1:b5:c3:74:5e:f1:f2:
                    15:9e:11:4f:bd:b0:7b:13:7d:15:c1:89:ba:90:60:
                    9d:4b:c9:42:3c:ab:66:44:75:5d:94:45:1e:8e:2c:
                    ee:98:ba:0a:b0:d4:7e:fa:95:60:85:57:f6:8b:1d:
                    0b:6a:67:6c:49:9d:35:d5:94:86:68:f2:f4:a3:f7:
                    01:9a:23:1b:5a:64:24:a0:ee:b4:5b:7f:a0:1b:ae:
                    f4:47:46:42:36:1e:2f:86:a4:20:3e:be:2a:47:d5:
                    bc:96:42:9f:70:f6:44:b4:2e:01:8c:96:9f:fd:a6:
                    6d:6e:bf:0f:69:95:84:76:d6:b2:ee:3d:57:17:41:
                    56:38:88:3a:83:75:2e:98:72:39:57:96:88:9d:ad:
                    a4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:36:8D:69:DE:DC:3D:16:BF:B8:AF:2E:25:EE:C3:DB:3B:00:EA:57
            X509v3 Authority Key Identifier:
                keyid:DD:8E:E0:39:5E:FB:34:C4:09:8E:57:6E:1F:A9:56:12:F0:AE:10:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Y7gOV77NMQJjlduH6lWEvCuEIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE14C/5EA2D1DCDBE811EE89324E7F775412E6/3Y7gOV77NMQJjlduH6lWEvCuEIw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:41:85:95:7e:c3:54:97:d1:34:f3:39:4e:48:5a:a8:dc:c7:
         8d:c9:74:bb:b8:10:23:0c:54:88:42:a2:d3:32:30:3e:52:ce:
         65:84:a6:72:7b:d2:55:97:0a:f9:64:a8:1e:ef:07:c7:3d:cc:
         3c:76:aa:90:bc:7c:fc:a6:b4:6d:47:54:19:36:22:d1:99:0c:
         c6:de:d6:f0:99:c9:65:99:5d:ba:7f:b2:fb:9e:57:be:29:31:
         f9:c9:0c:e9:26:5a:1b:1b:71:68:e0:35:6e:13:ce:c9:31:09:
         5d:e9:d4:a4:d1:1f:eb:21:84:6b:fa:92:d9:70:49:23:56:74:
         13:8c:66:fe:27:2e:f1:33:8b:5d:a1:e6:57:35:f2:ae:a8:86:
         82:11:89:2d:fa:04:f2:fa:d8:b3:e5:35:d2:ee:dc:59:d7:08:
         25:f9:b7:37:62:87:42:38:ea:cc:b5:9c:ea:eb:ef:68:8f:a8:
         91:a6:f7:b3:c7:c4:ab:24:b7:98:01:51:0f:ea:b0:e1:fe:cd:
         01:40:4d:e1:be:ca:21:ae:a6:e3:94:61:0c:35:31:26:d1:1c:
         61:e4:a0:1d:80:c6:99:8c:99:12:eb:a1:d9:fb:07:6c:36:53:
         02:cb:d6:5a:d6:0d:ec:ce:17:06:cf:76:8b:b7:a0:8d:69:dd:
         f6:6f:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:35:36 2025 by rpki-client