Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
File:                     Wob5iKEjH4bJcjMShVh-z4ZL25A.mft (raw, json)
Hash identifier:          9uROlNz2xL2EcyrPEpqvi3ccY6mwQtbXVCUYBdYTS1o=
Subject key identifier:   43:97:F0:44:99:C6:9E:E5:2C:9D:68:63:B3:6C:7C:A8:99:1E:1B:10
Authority key identifier: 5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
Certificate issuer:       /CN=F36FA13FAF/serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Certificate serial:       083F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
Manifest number:          083A
Signing time:             Sat 29 Mar 2025 01:43:29 +0000
Manifest this update:     Sat 29 Mar 2025 01:43:29 +0000
Manifest next update:     Mon 31 Mar 2025 01:43:29 +0000
Files and hashes:         1: Wob5iKEjH4bJcjMShVh-z4ZL25A.crl (hash: TL3FJfx9WtB1gSFNIYf2kRIx89xGStsc77yia/lAQYg=)
                          2: BC46616C9AFB11ECA18A8A895A40D577.roa (hash: siGB+YyYJADyfug/WgaGsUNasPkOvZWP4/Iz9BLePsI=)
                          3: 4C64BF4C9AFB11ECB58B52885A40D577.roa (hash: 58jy1C6d3WrJ/oJASDCkngyvBXzia2JH2GYnHdN661A=)
                          4: 508536209AFA11ECA56176855A40D577.roa (hash: AdNPqjJ7lYb3Mhu0FE9KQ9W5o9LsUhKXMO54oXl/coM=)
                          5: 19F651E6C4DA11E9AB3B1D27F8AEA228.roa (hash: 6cNifU+dnh2iNhQgpKvyLDNVbFzFJJzW3fscpRBY7Yw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2111 (0x83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA13FAF
        Validity
            Not Before: Mar 29 01:43:29 2025 GMT
            Not After : Mar 31 01:43:29 2025 GMT
        Subject: CN=67e75041-5813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:c5:9c:05:41:49:99:75:53:fc:88:c6:da:
                    c7:35:c3:11:bc:95:f0:7d:1e:c5:8b:80:7c:67:dc:
                    4f:57:a5:02:9b:63:c2:f8:b7:3c:41:db:d5:35:ff:
                    64:9a:72:8f:40:11:17:95:99:e3:52:88:11:4c:b1:
                    77:ca:cc:da:5a:c1:ca:4a:3c:18:2b:11:48:db:1d:
                    a5:14:a8:2d:99:58:57:4e:de:b8:3d:47:a6:a9:2b:
                    26:8d:05:50:4e:d9:99:08:6a:d9:27:26:36:bf:fe:
                    58:0b:05:32:1d:34:45:c7:4a:04:dc:96:79:4e:1b:
                    f9:1f:01:54:cd:47:a0:dc:58:9c:33:1e:91:3c:05:
                    a3:cc:66:c4:a2:59:bd:08:47:8c:5a:03:99:57:52:
                    54:8f:ad:8f:20:5b:84:d9:78:9b:e8:86:df:95:c8:
                    f2:55:43:ae:c6:5a:6f:0e:33:8e:f3:ca:d6:03:67:
                    09:62:29:e8:c5:b9:43:34:5b:77:1c:a2:d2:ab:5c:
                    0e:5c:3e:bf:72:e8:a7:e2:11:95:c4:4f:f5:cd:a8:
                    95:43:8d:b9:b8:4e:f5:a3:43:a4:ec:f3:9e:c9:cd:
                    8e:57:3c:84:7d:ef:ab:49:32:b1:74:b1:cc:b8:42:
                    88:3a:8e:ff:9f:79:f0:13:db:16:7f:dd:57:0e:4f:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:97:F0:44:99:C6:9E:E5:2C:9D:68:63:B3:6C:7C:A8:99:1E:1B:10
            X509v3 Authority Key Identifier:
                keyid:5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8e:f3:a1:18:1f:66:07:67:7b:36:33:17:bb:48:ba:f0:03:
         b1:67:13:38:dc:79:79:3a:44:25:63:e3:be:af:3e:c9:f8:0d:
         8e:99:c7:f9:b1:76:22:c7:7a:51:1a:84:ee:6f:06:80:a8:73:
         66:24:68:82:cd:01:42:7a:cd:53:61:da:b0:34:d3:1b:f8:d1:
         39:86:c7:b9:ed:e7:51:0c:d9:80:98:4a:5c:62:4c:b5:af:21:
         a7:dd:21:f4:bb:f1:eb:b1:8c:e5:2c:a7:58:7c:af:92:57:b6:
         0a:b0:4d:5c:1d:f0:c1:cb:30:37:e9:17:8d:4b:54:d8:b2:04:
         5d:8e:4e:e0:f1:16:5d:3e:a8:76:ae:5d:53:ee:5c:ce:66:a6:
         b2:59:78:27:56:4d:95:67:37:ee:1d:f1:d0:14:1c:d3:a5:ae:
         18:e3:81:bb:ab:e6:fc:43:5b:ba:f7:f6:3e:bd:1f:71:f8:0e:
         b9:5d:c5:ee:a9:9c:06:94:4e:81:75:0b:1e:1e:4b:21:d4:17:
         66:6d:8c:13:19:f9:da:3a:bf:8e:8e:18:d5:7a:ae:bf:f4:71:
         7f:5d:22:47:4f:8c:12:e3:25:92:bc:1c:a8:7d:df:42:f4:03:
         8d:36:72:cc:0d:d4:fa:91:b5:f0:8b:f4:f2:f9:4b:ad:f2:d5:
         55:3f:0a:d4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExM0ZBRjExMC8GA1UEBRMoNUE4NkY5ODhBMTIzMUY4NkM5NzIzMzEyODU1ODdF
Q0Y4NjRCREI5MDAeFw0yNTAzMjkwMTQzMjlaFw0yNTAzMzEwMTQzMjlaMBgxFjAU
BgNVBAMTDTY3ZTc1MDQxLTU4MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0i8WcBUFJmXVT/IjG2sc1wxG8lfB9HsWLgHxn3E9XpQKbY8L4tzxB29U1
/2Saco9AEReVmeNSiBFMsXfKzNpawcpKPBgrEUjbHaUUqC2ZWFdO3rg9R6apKyaN
BVBO2ZkIatknJja//lgLBTIdNEXHSgTclnlOG/kfAVTNR6DcWJwzHpE8BaPMZsSi
Wb0IR4xaA5lXUlSPrY8gW4TZeJvoht+VyPJVQ67GWm8OM47zytYDZwliKejFuUM0
W3ccotKrXA5cPr9y6KfiEZXET/XNqJVDjbm4TvWjQ6Ts857JzY5XPIR976tJMrF0
scy4Qog6jv+fefAT2xZ/3VcOT12xAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQ5fw
RJnGnuUsnWhjs2x8qJkeGxAwHwYDVR0jBBgwFoAUWob5iKEjH4bJcjMShVh+z4ZL
25AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTNGL0NEREJDNEM4QzRENzExRTk4QTA3NjMyNUY4QUVBMjI4L1dvYjVp
S0VqSDRiSmNqTVNoVmgtejRaTDI1QS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1dvYjVpS0VqSDRiSmNqTVNoVmgtejRaTDI1QS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkExM0YvQ0REQkM0QzhDNEQ3MTFFOThBMDc2MzI1RjhB
RUEyMjgvV29iNWlLRWpINGJKY2pNU2hWaC16NFpMMjVBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCFjvOhGB9mB2d7NjMXu0i68AOxZxM4
3Hl5OkQlY+O+rz7J+A2Omcf5sXYix3pRGoTubwaAqHNmJGiCzQFCes1TYdqwNNMb
+NE5hse57edRDNmAmEpcYky1ryGn3SH0u/HrsYzlLKdYfK+SV7YKsE1cHfDByzA3
6ReNS1TYsgRdjk7g8RZdPqh2rl1T7lzOZqayWXgnVk2VZzfuHfHQFBzTpa4Y44G7
q+b8Q1u69/Y+vR9x+A65XcXuqZwGlE6BdQseHksh1BdmbYwTGfnaOr+OjhjVeq6/
9HF/XSJHT4wS4yWSvByofd9C9AONNnLMDdT6kbXwi/Ty+Uut8tVVPwrU
-----END CERTIFICATE-----