Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
File:                     x_9uywvS7BI1alQX4xxzC5BQlBE.mft (raw, json)
Hash identifier:          QjD8BPt++W5KZRJJ7MfJxe4J8PB7Zw5rFWDisUtIMw0=
Subject key identifier:   0A:6F:5C:06:DC:84:9B:17:24:F8:3C:20:AF:51:A7:42:4A:73:4B:1D
Authority key identifier: C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
Certificate issuer:       /CN=F3639A71AF/serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
Certificate serial:       0198
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
Manifest number:          0196
Signing time:             Fri 31 Jan 2025 02:47:37 +0000
Manifest this update:     Fri 31 Jan 2025 02:47:36 +0000
Manifest next update:     Sun 02 Feb 2025 02:47:36 +0000
Files and hashes:         1: x_9uywvS7BI1alQX4xxzC5BQlBE.crl (hash: K+RP7S2iA7Vy71MWVRM682QqdxyceB+XmhsZiHBsPVo=)
                          2: 209064A80ECA11EFA0FB8D6C017001B1.roa (hash: SYHt2ENsggByHF7FNfIiJDtYCTGlxeYoFHTIRbjH6Hc=)
                          3: 3906A38AAD5411EEB67B65B2775412E6.roa (hash: ReFNAC4d+VQBlR/AEunK+azob89VljT5w2yD48BTB3A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AF/serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
        Validity
            Not Before: Jan 31 02:47:36 2025 GMT
            Not After : Feb  2 02:47:36 2025 GMT
        Subject: CN=679c39c9-95d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:61:87:18:a3:d4:1b:20:cd:e2:da:e8:d9:b0:
                    b6:9c:9b:02:30:9a:1f:fd:72:66:63:75:70:0e:f3:
                    b8:ba:b1:45:e4:db:6d:cb:e8:cb:77:9e:68:3b:52:
                    01:08:52:d0:f6:4f:c7:a4:4a:a8:b2:00:e0:b2:3d:
                    11:a4:8c:e2:f8:22:64:c6:40:bd:96:54:53:9d:a5:
                    29:85:f5:95:ff:38:5f:e5:59:cd:f9:b1:83:0f:c0:
                    36:87:d8:62:3b:69:30:a2:70:c4:4c:02:b0:82:b2:
                    f8:d8:29:40:8e:a5:96:7f:4c:12:69:12:ae:db:90:
                    ba:6c:f3:f5:69:3c:1e:db:bf:85:f3:d0:b9:de:7f:
                    b0:eb:1d:f1:56:12:e0:5e:63:f0:53:05:61:a9:66:
                    d6:9e:32:2b:fc:f9:80:db:39:06:61:ad:b0:5d:db:
                    d3:d0:20:a2:83:fc:df:61:15:24:85:fd:4c:e4:c6:
                    b0:75:c9:14:6a:3f:14:09:95:16:1b:3a:0a:c8:4a:
                    f2:75:eb:ba:b6:b6:48:38:84:e0:fb:ac:91:6b:bf:
                    f2:b6:0c:fb:47:6a:95:84:12:53:cf:1c:03:fe:da:
                    af:a4:7a:89:0d:33:e5:9f:6b:ea:00:c9:26:fe:64:
                    15:0e:5d:9c:e7:35:c9:44:79:e3:21:f8:cc:b4:07:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6F:5C:06:DC:84:9B:17:24:F8:3C:20:AF:51:A7:42:4A:73:4B:1D
            X509v3 Authority Key Identifier:
                keyid:C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:35:8b:5b:c7:e1:39:dd:88:cf:af:44:b8:c7:81:c2:15:8f:
         a7:d4:42:fe:f0:18:e1:ec:ed:ab:45:5c:be:f1:6a:50:c4:55:
         28:1f:f2:c9:91:a9:2d:30:12:59:63:8a:b1:21:c9:2e:73:d9:
         b1:ae:c9:d6:3b:35:77:ae:82:a5:bf:34:b1:fa:bc:b0:82:11:
         a8:25:37:0d:e0:f9:86:5a:b4:19:12:00:67:57:36:d0:61:04:
         15:2b:e6:b3:b1:75:55:95:92:3f:0d:37:14:8a:3f:42:a9:d6:
         d3:2e:1a:08:e6:5e:1f:33:40:47:8c:30:c5:fa:aa:36:fc:75:
         ab:75:87:c2:69:b0:1f:2b:d1:21:46:4b:2d:7b:ed:ac:b8:b5:
         8e:a7:88:09:43:74:c7:95:07:30:4e:9a:ec:70:96:b4:64:54:
         82:53:e8:66:ed:63:44:fb:a6:3a:da:c0:ba:08:2b:a8:6d:9e:
         09:0e:1e:7a:e8:2b:1c:6c:7d:c7:79:f7:61:a0:6c:f6:a5:b3:
         83:7b:04:27:0e:1f:93:90:3c:c9:8f:61:61:6c:b0:0c:f9:84:
         77:40:68:70:9d:0c:65:4e:9d:bf:13:b4:12:c1:e5:de:15:24:
         d9:c8:86:6e:3d:e5:b0:bd:08:cb:98:6f:b0:cf:b5:08:b8:91:
         2f:f0:d2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----