Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
File:                     9s_tdm0YWlpEFVDpcITTe-KcA-s.mft (raw, json)
Hash identifier:          HR1XyWoDaPek+BDKXGoILnLphIVLdtgKn8OAr3gvIFM=
Subject key identifier:   9A:74:D3:35:BF:49:E0:1F:FB:0E:DC:FA:76:54:8E:F3:82:7D:D6:80
Authority key identifier: F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB
Certificate issuer:       /CN=F363DDF3AF/serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
Certificate serial:       047C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
Manifest number:          047B
Signing time:             Fri 31 Jan 2025 01:58:03 +0000
Manifest this update:     Fri 31 Jan 2025 01:58:03 +0000
Manifest next update:     Sun 02 Feb 2025 01:58:03 +0000
Files and hashes:         1: 9s_tdm0YWlpEFVDpcITTe-KcA-s.crl (hash: q64qwkrNFz60kvp9uGMUObjvCPtQjeHCL2JmJ8agh1Q=)
                          2: 4982356676DE11ECB3098D8D5A40D577.roa (hash: F+0U8dG2rCXUcTvEY7rr1zknmOkjpUBOw8pBbcMuxcw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148 (0x47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363DDF3AF/serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
        Validity
            Not Before: Jan 31 01:58:03 2025 GMT
            Not After : Feb  2 01:58:03 2025 GMT
        Subject: CN=679c2e2b-9ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:79:c8:4f:6d:2f:83:f8:64:bb:0a:7d:18:46:
                    e9:2b:f5:49:25:33:b1:cc:3f:2d:f6:b7:d1:18:24:
                    16:6a:ce:f6:b6:73:0d:cd:49:08:1a:0d:ac:89:f0:
                    19:1a:c3:b8:e3:d5:45:2b:1c:49:80:2b:cc:7a:82:
                    82:53:d3:25:ca:5a:3b:4e:f4:84:aa:c8:be:71:2f:
                    1c:4f:7c:a5:05:8a:50:c2:20:58:9f:94:02:67:98:
                    44:e0:8d:e3:6f:92:54:3b:1e:a2:1a:c7:60:4c:23:
                    5b:b7:a9:7a:b1:38:d0:e2:02:84:f6:83:84:f0:6c:
                    99:c4:43:7f:40:44:34:a0:4c:45:1a:d7:d0:cd:8a:
                    2f:32:ab:b1:2b:e7:b9:43:6b:a1:8b:52:fc:37:aa:
                    b9:99:30:41:fb:d7:b4:3e:08:55:8a:c9:94:5f:97:
                    6a:cb:9f:4d:ff:88:32:4d:86:15:63:f1:e3:1d:85:
                    81:ae:47:3f:7a:db:7a:bb:77:4f:bc:72:20:82:f5:
                    56:1b:89:ec:5c:1a:8c:65:82:dc:26:52:25:cc:0e:
                    d5:0f:b2:98:13:06:8f:1f:90:d4:db:07:2e:a0:f1:
                    c8:23:e5:f4:60:da:b7:06:e0:48:4d:b2:7b:e3:c9:
                    13:e0:f1:86:5f:5e:a9:66:cc:ca:9b:2c:bb:47:5e:
                    2d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:74:D3:35:BF:49:E0:1F:FB:0E:DC:FA:76:54:8E:F3:82:7D:D6:80
            X509v3 Authority Key Identifier:
                keyid:F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:bc:74:69:bd:42:cc:42:28:d8:0f:97:2a:5d:c0:d9:45:e4:
         c3:5e:7a:7b:08:4e:2b:9e:00:9a:4b:b7:62:f7:cd:9e:52:1a:
         23:d0:d7:88:11:c1:08:46:2c:52:97:e7:e8:10:40:6a:98:5a:
         8e:19:bc:5d:42:00:6f:7e:86:f5:e9:75:9d:ee:63:bc:b4:63:
         3c:1a:7e:51:68:39:85:46:8b:9a:f3:ea:99:84:6e:73:ee:d6:
         25:9e:0e:8b:d1:01:98:7d:00:b9:31:97:ea:16:cd:72:33:81:
         f9:6d:58:f5:0a:d6:d1:72:43:7e:96:0d:91:dd:e8:5c:eb:7c:
         9b:c6:a7:01:2f:da:f1:97:2e:9d:fb:f0:34:bc:27:fe:d8:a7:
         83:48:b1:13:d8:06:b6:50:65:e6:9c:19:8e:ce:7b:a8:ba:68:
         26:89:bd:83:99:fd:4e:60:c1:95:ec:09:c1:32:7d:17:7d:a4:
         8f:72:8c:27:db:02:3f:4a:2e:31:e9:0b:16:7d:af:5e:ec:82:
         03:81:d2:83:55:1b:e3:3d:41:26:7e:31:76:8a:a9:cc:fd:cb:
         9d:b7:b9:51:ef:61:31:57:c7:e2:3e:54:ac:31:c7:7a:5d:ab:
         a6:aa:a1:12:f5:57:94:c5:d1:51:38:9d:dd:4d:ca:1d:cd:7f:
         c9:53:e6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----