Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
File:                     xwJ5nqS9Xbo-09BppxkblBtad5o.mft (raw, json)
Hash identifier:          QuASZcsvfBS1UAe+BmlxSxr71WDGBJOUlDCzR48SMOU=
Subject key identifier:   75:A2:7E:2E:87:84:6C:77:48:9A:3A:7A:5C:5E:C8:F1:32:F5:FE:EC
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Certificate issuer:       /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial:       0748
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
Manifest number:          073D
Signing time:             Sat 29 Mar 2025 01:52:46 +0000
Manifest this update:     Sat 29 Mar 2025 01:52:45 +0000
Manifest next update:     Mon 31 Mar 2025 01:52:45 +0000
Files and hashes:         1: xwJ5nqS9Xbo-09BppxkblBtad5o.crl (hash: mksfaGZNi9bmRgueSl6zJz0L48m+R+UKGOP1cDlC8N4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864 (0x748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AF
        Validity
            Not Before: Mar 29 01:52:45 2025 GMT
            Not After : Mar 31 01:52:45 2025 GMT
        Subject: CN=67e7526e-c0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:de:4d:e2:5a:cf:69:f1:15:a3:c1:28:92:
                    7b:71:a1:98:bb:6e:0c:ec:86:71:6b:11:2e:aa:d0:
                    9a:63:fe:d0:64:9a:35:3f:7f:7d:27:3f:a5:bd:15:
                    89:da:9a:c4:48:ee:80:35:7b:37:ee:19:ff:25:a4:
                    da:f9:0d:54:22:47:8b:da:8b:53:21:02:71:6b:3f:
                    c1:36:6e:e2:8f:92:6f:8c:a6:2f:c8:2f:1c:cd:35:
                    f9:69:87:ad:82:b9:08:e7:46:15:11:fb:13:60:39:
                    6f:5e:c7:41:36:49:97:42:51:84:db:06:3e:58:a9:
                    0c:2b:c8:06:71:39:32:43:3e:12:f7:4c:0a:50:17:
                    4e:a5:fb:96:45:e9:73:db:a4:71:ff:96:1d:12:c2:
                    dc:51:01:72:ce:c0:df:b8:19:55:c7:78:4a:5b:5b:
                    ce:75:71:b0:f0:80:c2:a7:d7:8b:2e:76:34:94:bc:
                    fd:6e:ae:f5:5c:37:51:3b:10:5e:97:67:29:f7:15:
                    5d:17:da:7b:f3:58:e3:f8:c1:ff:52:52:b8:c5:c3:
                    c4:39:7c:1b:1d:dc:8b:bd:a6:11:5e:8e:b3:1d:20:
                    52:2e:84:6a:55:fa:a3:8e:f9:38:41:31:c7:cb:f9:
                    18:74:c8:0c:03:42:50:33:1d:07:a9:5f:39:57:5b:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A2:7E:2E:87:84:6C:77:48:9A:3A:7A:5C:5E:C8:F1:32:F5:FE:EC
            X509v3 Authority Key Identifier:
                keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a2:55:9a:5b:87:25:2f:67:b0:6e:08:4c:5a:cf:fc:b9:0b:
         3e:9c:1a:b8:8b:d0:91:7e:50:98:9a:3b:41:84:26:03:93:74:
         fb:55:2d:78:d3:cf:94:3b:c4:e8:dd:0e:29:2b:f6:d6:2c:50:
         18:00:00:e5:76:27:67:c9:fc:7d:f3:eb:94:32:5e:72:cc:25:
         26:25:d7:11:aa:a1:99:11:73:b8:87:44:53:bd:c9:0c:08:5a:
         4f:27:05:39:1c:40:ab:37:19:6f:a5:44:20:9a:a4:0d:18:d4:
         b0:0a:1d:ee:a3:b0:9d:0e:de:05:c6:ef:97:b4:8a:6c:79:e4:
         fe:3e:33:e5:26:a6:b7:8b:4d:03:7e:98:77:3c:01:c0:a2:f3:
         9c:4c:d2:3e:01:7e:55:30:12:59:ae:c0:d2:2f:08:57:07:ab:
         f7:15:a4:3b:f0:cd:65:ee:23:55:cb:11:85:59:1b:8e:8d:a2:
         ae:4b:b7:65:e1:89:30:0a:73:78:04:86:bb:8a:09:82:b1:e2:
         20:4d:40:5f:67:9b:4d:89:df:23:c8:7e:11:29:2d:9c:8d:df:
         f6:90:8e:ca:9b:35:46:61:bc:7e:c0:4c:56:32:5e:4a:23:4f:
         08:05:7c:03:22:ae:4e:35:9e:45:d1:74:71:1f:bd:74:63:b5:
         46:2a:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----