Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
File:                     XabN45sUTEexNxp5v2LPbtykpzs.mft (raw, json)
Hash identifier:          4G7cLA82yabMlMz7cnAvxeg7Ii8eQ5+XX12ZZOSG6D4=
Subject key identifier:   5A:AE:DB:83:52:CC:D3:6B:E7:31:D2:45:97:56:AE:74:28:F1:76:BB
Authority key identifier: 5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
Certificate issuer:       /CN=F361174DAF/serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
Certificate serial:       03C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
Manifest number:          03C2
Signing time:             Fri 31 Jan 2025 02:08:07 +0000
Manifest this update:     Fri 31 Jan 2025 02:08:07 +0000
Manifest next update:     Sun 02 Feb 2025 02:08:07 +0000
Files and hashes:         1: XabN45sUTEexNxp5v2LPbtykpzs.crl (hash: id8klNAZNP3JkxqA5GFoLIbwk8qVF7rdKN16IpzFzpw=)
                          2: EFDD06EC090111EDBC15A4C3F1222468.roa (hash: mzBwRw/NsD0Kw5UC1+dnCe3jWxLCxwOLqnhj2973w4M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361174DAF/serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
        Validity
            Not Before: Jan 31 02:08:07 2025 GMT
            Not After : Feb  2 02:08:07 2025 GMT
        Subject: CN=679c3087-7efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:05:84:0c:4a:fb:c4:3b:dc:0e:18:fc:62:
                    4a:15:c0:1e:77:9c:f5:aa:66:b5:d6:79:38:96:25:
                    53:aa:98:9f:be:68:c3:21:a0:e4:b8:95:b2:d1:c6:
                    00:71:65:12:9a:68:6d:c7:1b:a0:7c:e9:a8:f8:20:
                    74:ad:f7:a7:5c:47:66:49:05:73:15:02:da:e3:bf:
                    0b:02:de:b0:70:79:83:dc:04:7b:d4:0d:9e:d3:7d:
                    13:66:3a:75:d8:0b:9b:21:d2:d9:ef:6a:d2:ab:43:
                    54:d0:69:44:1c:21:07:35:a2:05:d8:2c:53:cf:f9:
                    d0:f8:28:fb:04:95:4d:39:a2:2e:36:76:14:54:3b:
                    cc:9f:7c:14:90:71:ee:41:75:82:63:ca:41:5a:14:
                    dc:7c:e8:4a:87:ac:f8:e8:2c:5a:48:11:1f:9b:e5:
                    13:4b:f1:bb:8f:d1:a4:a4:af:dd:5c:68:2d:9b:8b:
                    b5:27:e4:9a:8f:64:78:50:00:4b:80:53:c1:da:f9:
                    aa:e4:2d:2b:98:10:53:3b:83:d4:74:3e:20:15:3b:
                    8d:41:5e:13:2b:b5:8e:ee:38:ee:06:65:95:a1:2c:
                    14:05:6b:02:af:d8:97:e3:57:0b:2e:45:23:42:4d:
                    e4:59:98:c1:19:82:9e:d4:2c:21:9d:75:3b:93:f8:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AE:DB:83:52:CC:D3:6B:E7:31:D2:45:97:56:AE:74:28:F1:76:BB
            X509v3 Authority Key Identifier:
                keyid:5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c9:0e:3a:44:22:ad:cd:7c:10:71:c0:1d:10:d0:75:85:39:
         ed:a0:aa:e8:3b:4c:9b:bf:6e:8c:63:79:5a:02:c0:b5:24:63:
         ed:0a:d4:04:23:e3:97:5d:8f:61:a2:c8:cc:a0:b6:22:e7:a3:
         03:51:d4:d9:f1:f1:19:9c:e6:1a:ed:c0:c5:ec:e0:14:6f:a4:
         a7:0c:32:b8:26:b2:73:d5:7e:7f:de:93:b5:c1:0c:63:ec:54:
         5d:90:da:83:f7:99:43:f4:9e:31:71:e2:a1:df:5c:28:16:53:
         6e:97:b8:46:ff:84:37:83:24:bb:5a:7e:18:ec:9b:37:cf:70:
         bc:d1:a2:93:1d:9e:45:35:c5:32:94:5e:62:2c:77:00:2b:33:
         4c:36:93:25:b0:b4:a9:fc:a5:b8:6d:55:77:a1:e2:01:2f:73:
         b6:70:aa:28:2d:db:c6:e5:bd:d9:a9:cd:03:ee:a8:da:18:5a:
         23:7c:98:31:b0:8c:66:c9:5a:39:37:7e:a6:b8:2a:27:48:29:
         f3:98:7d:b4:63:24:58:5d:da:d0:1f:2f:e1:db:05:95:ec:b8:
         81:04:d3:8b:88:da:01:ea:7a:95:c4:a2:a9:54:dc:3d:97:8a:
         b0:2d:32:f6:4a:86:32:1e:a9:81:89:e0:07:0d:d5:7b:cd:30:
         75:e9:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----