Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
File:                     9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft (raw, json)
Hash identifier:          H7/XoPuo3uJACjUwPYXkA+8k3/JtnJTvI8eZzL/FJ3E=
Subject key identifier:   E9:DA:1A:FE:C2:12:E9:C5:EB:8B:95:13:CC:2B:68:0A:CB:5D:62:74
Authority key identifier: F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74
Certificate issuer:       /CN=F36EED3EAF/serialNumber=F59284D76678851F7AA743B13F6C067479550074
Certificate serial:       02A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
Manifest number:          02A3
Signing time:             Sat 29 Mar 2025 02:58:25 +0000
Manifest this update:     Sat 29 Mar 2025 02:58:25 +0000
Manifest next update:     Mon 31 Mar 2025 02:58:25 +0000
Files and hashes:         1: 9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl (hash: pEqNdn9DBidDWcAOLBY0sDDv9L93Naxr2sDjFu0MEpk=)
                          2: C226B7D40AA411EEAEA4A5484AD9E6FC.roa (hash: Qm72goTpyMAJ3Op/uLoxMku/eqrMrQ5Gy2DoW/t8FVs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 676 (0x2a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EED3EAF
        Validity
            Not Before: Mar 29 02:58:25 2025 GMT
            Not After : Mar 31 02:58:25 2025 GMT
        Subject: CN=67e761d1-29c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:92:1e:2d:f5:3c:50:03:01:fa:1e:18:8e:
                    28:81:bf:7c:7e:88:e2:af:0b:f1:28:11:b4:ec:1a:
                    2b:21:db:36:ba:55:e2:18:55:76:4e:04:2d:54:d8:
                    19:59:4d:8f:08:f9:20:26:b3:d6:61:e8:c1:2e:1c:
                    dc:25:c2:45:63:8f:06:01:93:aa:75:05:e9:b0:96:
                    cf:b5:a5:e9:97:ba:de:5e:57:3d:64:e4:e0:54:58:
                    bf:e7:11:c7:1b:46:65:54:92:3d:36:65:2e:63:0a:
                    ce:1f:e1:b9:2a:42:e7:36:b2:0f:f2:1f:05:bf:28:
                    85:d1:5c:e4:bd:90:b7:af:aa:97:f0:38:6b:43:ac:
                    fe:8e:0e:e2:ce:27:07:ea:33:3a:40:9d:56:12:93:
                    60:db:97:31:f8:f5:19:41:82:01:72:d5:a0:a5:9b:
                    ae:84:62:d0:a5:2d:8c:d7:99:28:39:6a:32:9f:74:
                    dc:71:d3:7a:8f:36:8f:33:a3:f4:92:a7:b4:08:5a:
                    a4:82:65:1b:d9:b4:d2:7c:f4:a8:79:7d:68:78:19:
                    76:79:a4:5b:de:61:f3:9c:d4:d8:95:ce:e1:b1:86:
                    88:93:97:f7:bb:ae:35:da:e7:d7:b5:ba:a7:a5:f5:
                    ed:cb:b1:b3:d3:46:72:6f:92:84:79:54:25:f5:33:
                    73:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DA:1A:FE:C2:12:E9:C5:EB:8B:95:13:CC:2B:68:0A:CB:5D:62:74
            X509v3 Authority Key Identifier:
                keyid:F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c3:d8:e0:ed:3b:7e:e5:94:de:8c:58:26:c0:b4:3a:d7:d9:
         bc:54:b5:7d:6b:9e:66:7a:66:ba:23:fe:cf:2e:17:cb:88:e7:
         7a:d0:78:0b:e2:77:9c:cd:43:ca:35:09:29:2c:b7:3a:12:22:
         d1:8b:2e:ff:1b:e1:24:3b:7b:50:b5:8f:b1:3b:73:76:5c:19:
         a0:5b:f3:e0:51:f2:d1:a7:b1:2f:9f:43:14:e5:1d:ee:ea:3d:
         f2:11:f6:06:49:36:0b:3d:36:9a:32:40:91:20:41:cb:d3:4e:
         69:30:b3:32:a6:c4:80:18:8f:71:f1:e8:5d:f5:f7:ed:45:a6:
         ca:5d:49:73:f4:81:c7:6a:5a:c4:ad:c5:c1:77:c8:8f:55:ba:
         86:a1:fb:4f:0d:50:9f:24:bf:7d:01:b4:f8:86:11:62:ab:b4:
         ca:3a:5b:0b:5a:6e:a2:34:1b:21:3e:89:33:6b:03:76:f3:cd:
         3d:76:57:c2:6e:7f:3c:5d:62:fa:d3:5b:b8:37:40:30:85:a2:
         6f:60:a6:8b:1e:5c:1b:f3:0f:96:49:62:80:07:87:7e:4f:f1:
         27:bd:da:c4:b9:df:00:17:cc:fc:e9:6c:e3:06:b9:09:07:35:
         9f:32:98:30:fa:95:01:3c:82:46:b9:db:1d:a7:7b:f3:84:20:
         c1:3a:23:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----