Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
File:                     LNMcPCUfXtoYP5OOf8s6Sh26id0.mft (raw, json)
Hash identifier:          PTi5Oh2oCB+aVULGNxzYmG3uj/q5IfJ2BEVBN/bRTcg=
Subject key identifier:   B7:BA:0B:A4:7B:CC:89:E0:50:63:CF:B3:00:6D:B5:68:6A:A4:73:62
Authority key identifier: 2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
Certificate issuer:       /CN=F36FDDEEAF/serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
Certificate serial:       0716
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
Manifest number:          070A
Signing time:             Sat 29 Mar 2025 01:54:55 +0000
Manifest this update:     Sat 29 Mar 2025 01:54:55 +0000
Manifest next update:     Mon 31 Mar 2025 01:54:55 +0000
Files and hashes:         1: LNMcPCUfXtoYP5OOf8s6Sh26id0.crl (hash: x/uflro3n5U5s8HzMglS1EnCtE8lwENCkpl1ZEg47vY=)
                          2: F7D8787848AB11EEADAF4F784AD9E6FC.roa (hash: BlPqUJdFk7PaeN09GKNIO2ahqGdvXILNOufI5zoiIug=)
                          3: 64DCEAF6B4AA11EA9C29961EF8AEA228.roa (hash: d/4OnBDyWSejLXwa+f/dKrVlxUkVeUHuXDdPCuQ7oCY=)
                          4: 2784247EB49D11EA83FF3B11F8AEA228.roa (hash: 3npVwgpBE20PVcA5u5lrTYW4p2BPmihiNcM0JsUxVdE=)
                          5: F1E13460B49C11EAAD5FFC10F8AEA228.roa (hash: BIJuAi9AxI0PjKWpBYTgVMncK8MVrrG+hBM39gZwnbw=)
                          6: 54964A9CB49C11EA954A5910F8AEA228.roa (hash: Sz8kShfd3kR/xyiKfp0ikKE/RLPnZrOAd+EAh5NYAxA=)
                          7: F62E7268F00611EEBD2D4DC0775412E6.roa (hash: 39PLNy0Igm7znzscAfw7YYJqKxESbSw3glXaPuZTX3c=)
                          8: 593ED270B49D11EA9B256E11F8AEA228.roa (hash: raqsrh/hwYX8p2YBJuBFt0I5htQVCTXZHNv6JWkB1z0=)
                          9: 9DA32534F00711EE898986C5775412E6.roa (hash: TQ1/8BV5zm3Y2ZTtbjmsP2mRNnDdpHUUQ/EORWgyJDM=)
                          10: 53CAE622F00711EEA5267AC4775412E6.roa (hash: 9lY/fKc7t2R7nbClIr5t2e4jW9EP7+ZXryECYNAkiGI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1814 (0x716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDDEEAF
        Validity
            Not Before: Mar 29 01:54:55 2025 GMT
            Not After : Mar 31 01:54:55 2025 GMT
        Subject: CN=67e752ef-7eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:0e:af:69:0b:ea:74:68:c4:80:34:40:75:
                    1f:d1:a5:cd:3e:4a:b0:5d:07:06:49:2f:b6:59:f3:
                    a7:b9:7b:f8:3e:28:a2:43:d9:f8:3d:bb:ef:6a:bf:
                    47:bf:eb:1e:2e:e3:9b:7a:ac:34:ed:e3:a2:41:fe:
                    d9:f1:94:39:24:f3:ff:d8:69:49:72:b3:c8:5f:78:
                    8d:4d:15:9c:76:f3:06:6b:e7:f2:b3:70:33:a5:f9:
                    86:15:f7:2c:f8:57:17:31:c5:7a:21:7d:e9:7d:5b:
                    77:67:44:08:2f:fd:35:3e:2b:9f:87:49:0a:5e:a9:
                    69:20:51:d7:3c:81:1b:6d:95:ec:7c:15:46:63:64:
                    dc:0c:21:1f:22:bc:66:43:b3:fe:2c:42:c1:05:37:
                    4a:7e:df:ca:b4:a8:13:04:27:63:a3:eb:b3:60:d6:
                    37:32:5b:82:8f:cb:9e:65:1a:64:58:50:a3:b3:50:
                    2e:11:4a:cc:5b:84:72:a0:c0:ad:79:85:b5:83:fe:
                    e4:90:75:ca:7b:f5:d6:82:3a:91:c6:9a:8a:cb:98:
                    e7:f0:af:50:d9:7b:a2:dc:fb:d5:21:0b:d9:ac:8b:
                    f7:57:7d:10:2e:ce:15:47:19:32:f9:2f:d8:31:1c:
                    cb:4b:9f:ee:fc:7e:30:76:06:ef:38:23:a6:e5:cf:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BA:0B:A4:7B:CC:89:E0:50:63:CF:B3:00:6D:B5:68:6A:A4:73:62
            X509v3 Authority Key Identifier:
                keyid:2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:69:dc:ce:e2:e4:e5:bb:1d:c1:0d:54:8a:c7:e8:bf:29:66:
         ad:e0:84:5b:5f:96:c1:02:cf:00:43:13:4a:72:d5:b8:bb:a4:
         ce:18:53:07:df:16:d3:a4:e4:d3:0d:5d:15:4f:bd:d9:4f:3f:
         60:b3:5c:36:f1:ec:01:aa:4d:7b:c2:3b:dd:24:b0:e9:2a:92:
         b9:7e:e7:11:5d:1d:e1:6e:d7:d6:88:90:14:85:21:fc:8c:47:
         c4:65:30:e6:5a:74:41:b3:08:ba:37:94:31:28:e7:ec:50:96:
         18:3c:b1:34:52:f7:1c:0d:26:c1:43:7e:a9:a6:e5:4f:ea:69:
         6d:fb:83:74:3a:0f:f8:2b:c2:da:7a:8e:e0:5b:ff:69:13:cc:
         ca:30:bb:94:05:7e:1a:bc:0f:19:aa:6d:7b:27:dc:71:d0:c3:
         af:eb:9b:c0:bb:7b:97:c2:a5:13:f4:4f:fe:b5:d1:09:5e:4e:
         dc:1d:3f:cc:3c:f2:8e:7e:ee:11:5e:80:38:7c:97:b4:38:8b:
         ea:be:22:6d:ea:56:4c:6b:f6:25:2e:9e:18:21:91:32:67:3e:
         38:2a:58:ff:44:f7:fa:0b:08:a9:16:45:97:ba:48:f6:ef:14:
         3e:30:12:4a:18:57:40:0f:48:57:f1:e5:1e:d8:73:e5:f5:3d:
         20:be:3f:01
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkRERUVBRjExMC8GA1UEBRMoMkNEMzFDM0MyNTFGNUVEQTE4M0Y5MzhFN0ZDQjNB
NEExREJBODlERDAeFw0yNTAzMjkwMTU0NTVaFw0yNTAzMzEwMTU0NTVaMBgxFjAU
BgNVBAMTDTY3ZTc1MmVmLTdlZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCS5A6vaQvqdGjEgDRAdR/Rpc0+SrBdBwZJL7ZZ86e5e/g+KKJD2fg9u+9q
v0e/6x4u45t6rDTt46JB/tnxlDkk8//YaUlys8hfeI1NFZx28wZr5/KzcDOl+YYV
9yz4VxcxxXohfel9W3dnRAgv/TU+K5+HSQpeqWkgUdc8gRttlex8FUZjZNwMIR8i
vGZDs/4sQsEFN0p+38q0qBMEJ2Oj67Ng1jcyW4KPy55lGmRYUKOzUC4RSsxbhHKg
wK15hbWD/uSQdcp79daCOpHGmorLmOfwr1DZe6Lc+9UhC9msi/dXfRAuzhVHGTL5
L9gxHMtLn+78fjB2Bu84I6blzzELAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUt7oL
pHvMieBQY8+zAG21aGqkc2IwHwYDVR0jBBgwFoAULNMcPCUfXtoYP5OOf8s6Sh26
id0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZEREVFLzIxNEM1QUVDQjQ5QjExRUFBM0Y2MUYwRkY4QUVBMjI4L0xOTWNQ
Q1VmWHRvWVA1T09mOHM2U2gyNmlkMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xOTWNQQ1VmWHRvWVA1T09mOHM2U2gyNmlkMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkRERUUvMjE0QzVBRUNCNDlCMTFFQUEzRjYxRjBGRjhB
RUEyMjgvTE5NY1BDVWZYdG9ZUDVPT2Y4czZTaDI2aWQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC8adzO4uTlux3BDVSKx+i/KWat4IRb
X5bBAs8AQxNKctW4u6TOGFMH3xbTpOTTDV0VT73ZTz9gs1w28ewBqk17wjvdJLDp
KpK5fucRXR3hbtfWiJAUhSH8jEfEZTDmWnRBswi6N5QxKOfsUJYYPLE0UvccDSbB
Q36ppuVP6mlt+4N0Og/4K8Laeo7gW/9pE8zKMLuUBX4avA8Zqm17J9xx0MOv65vA
u3uXwqUT9E/+tdEJXk7cHT/MPPKOfu4RXoA4fJe0OIvqviJt6lZMa/YlLp4YIZEy
Zz44Klj/RPf6CwipFkWXukj27xQ+MBJKGFdAD0hX8eUe2HPl9T0gvj8B
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:07:02 2025 by rpki-client