Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36178E7/5FFDB5A62BF011EC95312330D8A014CE/lcjqgvlXgCaGSYmyy7KauMTEjz4.mft
File:                     lcjqgvlXgCaGSYmyy7KauMTEjz4.mft (raw, json)
Hash identifier:          033hvxULE57B/ZvkY/0HGZ1oVWJhHGCLaaoosx/Am4k=
Subject key identifier:   D7:37:26:3E:AC:D5:AE:CA:2F:CE:C3:32:7C:A5:78:E5:9C:E9:B3:1D
Authority key identifier: 95:C8:EA:82:F9:57:80:26:86:49:89:B2:CB:B2:9A:B8:C4:C4:8F:3E
Certificate issuer:       /CN=F36178E7AF/serialNumber=95C8EA82F9578026864989B2CBB29AB8C4C48F3E
Certificate serial:       034B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lcjqgvlXgCaGSYmyy7KauMTEjz4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36178E7/5FFDB5A62BF011EC95312330D8A014CE/lcjqgvlXgCaGSYmyy7KauMTEjz4.mft
Manifest number:          034A
Signing time:             Tue 09 Jan 2024 01:39:34 +0000
Manifest this update:     Tue 09 Jan 2024 01:39:33 +0000
Manifest next update:     Thu 11 Jan 2024 01:39:33 +0000
Files and hashes:         1: lcjqgvlXgCaGSYmyy7KauMTEjz4.crl (hash: OIXUWu/zIvWgWg8k//qiiA+/kuRZzNYBRxUrwhzWw0o=)
                          2: 2524EF522BF111ECA1555B31D8A014CE.roa (hash: 52Y+3DTHwsR1nZmCqI70nhkirIUlZa4CohSvQ+P/5hA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36178E7AF/serialNumber=95C8EA82F9578026864989B2CBB29AB8C4C48F3E
        Validity
            Not Before: Jan  9 01:39:33 2024 GMT
            Not After : Jan 11 01:39:33 2024 GMT
        Subject: CN=659ca3d5-955f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:dc:91:ce:a0:58:78:be:45:83:dd:d8:d6:d1:
                    2b:cc:9a:c6:b6:81:5a:e3:f5:ab:e1:69:55:bf:9d:
                    c0:bd:07:55:7b:e2:70:76:5d:ca:cd:cd:51:cb:d4:
                    fa:6b:50:b7:09:3d:31:d7:4b:1f:f8:51:8a:6a:fe:
                    5d:af:f6:12:5a:da:3e:6c:0d:40:9c:34:1a:e2:38:
                    50:2b:49:3e:bb:15:bb:69:79:cd:f1:6d:ed:e1:d9:
                    89:31:08:2f:f2:8d:85:c5:53:2a:5b:09:1f:68:7c:
                    19:36:67:a9:6f:76:f2:b6:ad:fa:6c:00:6a:5c:85:
                    27:1a:46:62:f4:be:24:8c:66:33:c9:2d:82:fc:1e:
                    00:70:07:7e:39:61:aa:23:e3:0f:35:64:d5:f1:c3:
                    35:75:9d:83:b0:04:c1:07:83:e3:1c:66:24:49:b2:
                    66:cc:08:d3:1a:43:97:ba:f8:d5:bb:2a:a5:d9:35:
                    e9:e3:5e:44:26:1b:07:88:63:cb:36:49:32:ba:24:
                    3f:51:a6:c2:30:55:f9:e1:96:00:dc:2f:64:cd:04:
                    ee:de:f1:a3:9e:8e:a8:7a:26:b6:89:21:92:da:e5:
                    d3:c8:5f:10:cb:c4:7b:1b:31:dc:38:08:ae:7a:ff:
                    43:f2:00:c5:1e:aa:e9:27:e8:d6:aa:24:43:14:85:
                    25:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:37:26:3E:AC:D5:AE:CA:2F:CE:C3:32:7C:A5:78:E5:9C:E9:B3:1D
            X509v3 Authority Key Identifier:
                keyid:95:C8:EA:82:F9:57:80:26:86:49:89:B2:CB:B2:9A:B8:C4:C4:8F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36178E7/5FFDB5A62BF011EC95312330D8A014CE/lcjqgvlXgCaGSYmyy7KauMTEjz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lcjqgvlXgCaGSYmyy7KauMTEjz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36178E7/5FFDB5A62BF011EC95312330D8A014CE/lcjqgvlXgCaGSYmyy7KauMTEjz4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:70:2b:de:ae:e8:6f:e2:0e:09:8b:6b:5d:0a:f1:15:f5:b9:
         56:cb:14:22:74:c5:da:64:13:6f:49:b7:93:11:cf:86:78:ba:
         3e:4e:32:fa:21:ff:d9:27:a2:db:f2:17:cf:01:b8:1d:1c:67:
         b9:ed:d8:4e:c1:d9:67:f4:e3:ae:55:3e:b4:e2:e9:12:68:bb:
         6c:46:92:49:f5:0a:ec:11:92:f3:8c:09:09:83:c6:9c:a3:bb:
         3a:88:5a:99:b5:48:67:b1:ac:ef:d6:2d:c7:48:a5:af:df:4d:
         c6:ca:5d:e4:72:3e:35:a6:df:1a:7c:20:98:03:e0:0b:03:27:
         f1:a8:f8:47:c1:a2:2f:4b:29:f7:c4:11:68:b3:34:12:1c:50:
         0b:45:8a:14:14:4b:cc:da:14:0a:99:38:5a:7b:63:9f:ca:b0:
         e9:a5:50:7d:87:43:8f:76:0a:fc:29:77:d9:8b:d7:fb:90:81:
         b2:c1:2e:b0:dc:9a:7a:26:79:eb:1c:1e:bc:2d:54:84:60:4e:
         3b:9a:b4:ba:32:34:7b:b5:b6:88:0c:e6:0f:7f:4b:5c:f4:1f:
         e2:5f:f4:5e:dc:e6:34:2f:d8:07:f8:79:62:ab:bc:e9:81:29:
         fa:69:7e:eb:39:0c:cf:ec:a4:d3:0a:b8:63:2a:00:81:a3:41:
         ba:2c:ce:59
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA0swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTc4RTdBRjExMC8GA1UEBRMoOTVDOEVBODJGOTU3ODAyNjg2NDk4OUIyQ0JCMjlB
QjhDNEM0OEYzRTAeFw0yNDAxMDkwMTM5MzNaFw0yNDAxMTEwMTM5MzNaMBgxFjAU
BgNVBAMTDTY1OWNhM2Q1LTk1NWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDv3JHOoFh4vkWD3djW0SvMmsa2gVrj9avhaVW/ncC9B1V74nB2XcrNzVHL
1PprULcJPTHXSx/4UYpq/l2v9hJa2j5sDUCcNBriOFArST67Fbtpec3xbe3h2Ykx
CC/yjYXFUypbCR9ofBk2Z6lvdvK2rfpsAGpchScaRmL0viSMZjPJLYL8HgBwB345
Yaoj4w81ZNXxwzV1nYOwBMEHg+McZiRJsmbMCNMaQ5e6+NW7KqXZNenjXkQmGweI
Y8s2STK6JD9RpsIwVfnhlgDcL2TNBO7e8aOejqh6JraJIZLa5dPIXxDLxHsbMdw4
CK56/0PyAMUequkn6NaqJEMUhSURAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1zcm
PqzVrsovzsMyfKV45Zzpsx0wHwYDVR0jBBgwFoAUlcjqgvlXgCaGSYmyy7KauMTE
jz4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE3OEU3LzVGRkRCNUE2MkJGMDExRUM5NTMxMjMzMEQ4QTAxNENFL2xjanFn
dmxYZ0NhR1NZbXl5N0thdU1URWp6NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xjanFndmxYZ0NhR1NZbXl5N0thdU1URWp6NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTc4RTcvNUZGREI1QTYyQkYwMTFFQzk1MzEyMzMwRDhB
MDE0Q0UvbGNqcWd2bFhnQ2FHU1lteXk3S2F1TVRFano0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAscCveruhv4g4Ji2tdCvEV9blWyxQi
dMXaZBNvSbeTEc+GeLo+TjL6If/ZJ6Lb8hfPAbgdHGe57dhOwdln9OOuVT604ukS
aLtsRpJJ9QrsEZLzjAkJg8aco7s6iFqZtUhnsazv1i3HSKWv303Gyl3kcj41pt8a
fCCYA+ALAyfxqPhHwaIvSyn3xBFoszQSHFALRYoUFEvM2hQKmThae2OfyrDppVB9
h0OPdgr8KXfZi9f7kIGywS6w3Jp6JnnrHB68LVSEYE47mrS6MjR7tbaIDOYPf0tc
9B/iX/Re3OY0L9gH+Hliq7zpgSn6aX7rOQzP7KTTCrhjKgCBo0G6LM5Z
-----END CERTIFICATE-----