Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
File:                     F9XbYUvL122qn_GpMVkVxH-Je_M.mft (raw, json)
Hash identifier:          A0SlKhiUw0s/FojD11WaYE65jCpHCyJHrayaT3Pt+14=
Subject key identifier:   32:85:FA:F7:94:E6:73:57:70:20:B2:E7:20:C6:F0:05:E9:FC:B0:C0
Authority key identifier: 17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
Certificate issuer:       /CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Certificate serial:       03D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
Manifest number:          03C9
Signing time:             Fri 31 Jan 2025 02:07:31 +0000
Manifest this update:     Fri 31 Jan 2025 02:07:31 +0000
Manifest next update:     Sun 02 Feb 2025 02:07:31 +0000
Files and hashes:         1: F9XbYUvL122qn_GpMVkVxH-Je_M.crl (hash: jRyE12e2BcCisVo1hG0TUhDe6YdMND1WRnD54KND9Ns=)
                          2: B6AEA76A386E11EFB22C58AC762E951A.roa (hash: 5SrWot373DcY7xlbNxOXtSFJ3m3pxtYBX1fR6afzMgw=)
                          3: 92CDFA08386E11EFADDF70A8762E951A.roa (hash: GCRLgKm5X2GHGAFRzdRTrZrvQldSY5LhNqpgJgS8KK8=)
                          4: E775739C386E11EF9B6A87AC762E951A.roa (hash: 9EDzyq3NU8VbeJb4xTqQLA3QihMtcHzWeBDxSXelft0=)
                          5: 23856708386E11EF995BECA7762E951A.roa (hash: FIO2lhhCB7uaoW8hHqlVZE9HJQhcLZ9RTHnddvwwt7Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 976 (0x3d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
        Validity
            Not Before: Jan 31 02:07:31 2025 GMT
            Not After : Feb  2 02:07:31 2025 GMT
        Subject: CN=679c3063-a001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:d3:6d:4f:e9:e6:1f:78:83:54:dc:0c:2e:
                    ec:2c:4a:99:a0:43:ed:63:84:e1:a0:df:3e:0d:a6:
                    ca:55:de:28:e1:0d:6c:6f:d6:63:ba:c6:71:c7:08:
                    09:de:f1:90:d9:a3:dd:d8:01:29:d2:44:8c:bd:2b:
                    7c:33:96:25:9b:d7:cf:4a:fb:f6:c2:68:e8:01:d7:
                    bd:89:13:13:f5:13:58:a7:0f:8a:28:21:d3:41:d8:
                    af:ea:c2:6a:77:aa:cd:0b:87:d2:0d:39:5e:d8:f6:
                    33:b6:35:58:24:34:a5:82:7c:8e:72:af:4c:bc:db:
                    53:dd:76:eb:a1:70:d4:49:ae:be:90:61:19:31:48:
                    ab:3f:bf:07:e0:c7:fb:b8:85:ed:ee:33:30:9c:70:
                    d1:1b:ec:bd:ae:4c:49:29:62:47:27:64:28:7f:17:
                    fb:27:88:92:51:b8:ac:74:c8:24:32:2f:1f:27:b1:
                    98:5b:df:f8:e3:8c:58:aa:2f:04:fe:83:b7:54:8e:
                    34:d5:cc:33:a9:3d:fd:0a:5e:bc:ee:0d:17:fe:80:
                    76:3a:71:09:b6:40:7e:8c:f7:ca:1a:a4:92:1c:50:
                    fa:92:15:28:12:84:7d:9a:27:0d:36:a8:6b:e3:9f:
                    de:1e:df:13:f9:92:bb:e2:74:6d:ef:2b:5c:99:2f:
                    b1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:85:FA:F7:94:E6:73:57:70:20:B2:E7:20:C6:F0:05:E9:FC:B0:C0
            X509v3 Authority Key Identifier:
                keyid:17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:fe:ef:e1:08:ad:66:de:cc:36:7a:49:20:ab:38:b2:13:85:
         9c:7c:2d:65:d9:1f:fb:c8:22:d4:15:ed:fd:33:b9:2b:35:64:
         d8:25:8e:e0:2a:28:2b:be:74:cc:46:fd:82:c0:06:95:29:b8:
         c3:c6:65:27:1b:8d:4f:7d:5e:5a:15:32:cb:74:9f:d9:11:e6:
         bf:67:06:a0:f9:4b:19:64:f3:49:d4:e7:10:72:cd:8b:c6:59:
         cc:8d:f4:e1:6d:aa:56:31:9e:3d:c9:a2:23:f6:85:dc:da:0d:
         bf:e3:78:49:44:7b:5f:45:7d:05:e3:e8:c3:91:6c:85:10:e3:
         a4:d0:c7:7d:ab:3d:29:d5:3c:ee:66:3b:e3:a8:80:7c:b9:ae:
         b8:05:e0:f3:61:98:f3:4b:b9:da:51:57:1a:e7:bf:80:6d:e5:
         c5:b6:43:d4:a6:9d:d7:00:22:60:0c:86:d1:9d:ea:df:fc:46:
         36:dc:a1:08:81:d7:96:1e:43:77:95:9f:62:c0:9a:df:98:0d:
         3b:ff:1a:cc:c0:f4:0c:7b:1e:fb:8f:a2:83:88:d9:f0:af:3a:
         ed:74:2f:2d:75:72:ca:67:ab:be:b2:65:41:3b:a8:59:0c:95:
         70:75:fd:4c:d1:a3:db:c0:38:52:45:c0:5a:b9:48:cb:2a:3f:
         af:7e:f4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----