Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File:                     QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier:          3STSh89LxkjAsuaiEgwuj48jy68ncuW2fjN8o5izngw=
Subject key identifier:   FC:04:1A:5A:D5:2F:39:56:A5:5B:0A:EB:FB:D3:24:C2:38:85:44:8E
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer:       /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial:       03F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number:          03EF
Signing time:             Fri 31 Jan 2025 02:04:13 +0000
Manifest this update:     Fri 31 Jan 2025 02:04:13 +0000
Manifest next update:     Sun 02 Feb 2025 02:04:13 +0000
Files and hashes:         1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: sHIz7ptk3Xx/tVDQ+Bvte4UR3efkbPg9t9fHWT+sAsM=)
                          2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
        Validity
            Not Before: Jan 31 02:04:13 2025 GMT
            Not After : Feb  2 02:04:13 2025 GMT
        Subject: CN=679c2f9d-b20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a5:b9:20:6b:07:de:63:54:37:4c:93:37:b4:
                    ef:f6:91:d6:9c:12:83:74:f1:a7:30:93:23:46:a7:
                    77:c0:5d:b1:8b:15:66:18:8b:20:5a:30:0d:fd:42:
                    e5:0d:ab:14:ad:b8:3c:f5:1a:69:1e:61:37:ab:53:
                    b8:0f:72:36:76:2f:21:c1:27:a7:2d:a7:74:38:f6:
                    85:c6:be:c9:5b:13:a0:86:7a:a6:e2:6f:5c:e7:30:
                    75:04:15:4f:ee:1c:3a:67:fd:5b:8d:54:48:50:ae:
                    63:fd:6b:73:ce:88:cd:a2:84:c4:3c:18:85:1b:22:
                    fd:e2:b8:7b:3e:2a:06:73:58:b4:3c:6b:72:40:6c:
                    73:36:ac:95:e5:e1:ad:8d:25:1f:d8:8c:3f:ea:1b:
                    8d:af:56:93:d8:de:e5:54:4b:c2:3e:b0:e6:43:9a:
                    a4:c9:1a:c6:b7:79:df:37:cb:de:99:94:3c:a6:fd:
                    df:86:d8:b4:9f:c9:d3:8f:95:fa:41:81:b7:b9:22:
                    50:e4:da:2c:6f:96:ba:3c:7a:5a:2b:57:7e:43:6b:
                    5f:03:73:a3:a5:c3:2c:67:d5:c9:e5:d0:65:5d:82:
                    30:a4:5f:e8:39:e4:84:92:26:20:30:26:b5:a0:4a:
                    bf:59:43:d7:bb:17:a3:cd:2a:f0:f4:be:b7:7d:f5:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:04:1A:5A:D5:2F:39:56:A5:5B:0A:EB:FB:D3:24:C2:38:85:44:8E
            X509v3 Authority Key Identifier:
                keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a5:59:cd:45:29:71:f4:74:41:57:fd:8e:2c:1b:6d:a5:c1:
         e7:cc:5f:5a:67:f0:ec:a9:38:67:37:65:dc:24:3e:f6:ef:06:
         54:42:09:80:62:e8:a1:d1:81:18:5b:26:6b:ab:d8:4d:de:68:
         75:e6:a4:a0:63:b5:75:1c:49:a7:19:bf:35:94:ed:f3:30:8c:
         bf:b7:22:9c:5e:1e:67:29:5b:be:91:05:54:90:75:ae:da:ed:
         54:ed:08:72:26:39:d1:9f:f9:58:b5:79:b5:e1:ad:0d:4c:16:
         80:24:4b:cf:48:2a:c6:71:80:f8:05:c1:fd:55:70:ee:d2:6b:
         a9:3d:3a:cd:a8:d0:e9:ec:dd:c9:3f:50:36:f5:d7:f5:63:81:
         56:2e:42:95:19:03:c3:38:f1:eb:50:c2:de:f3:67:74:7b:d3:
         5f:0c:bc:44:b5:ed:79:c3:32:fc:4a:61:50:4b:45:4e:f2:9f:
         10:2e:7d:8c:3d:ed:b7:87:c9:d0:93:a4:ea:db:61:4a:cc:c3:
         fa:e3:d0:89:a0:d1:96:07:71:b1:e4:56:eb:83:92:5b:5a:c3:
         ff:a8:b7:46:27:d1:52:bf:9f:ab:42:e2:79:1d:ad:91:e1:50:
         c7:b2:b9:3a:70:7b:38:a0:56:c5:65:de:4f:31:6b:3f:a5:11:
         07:97:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----