Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
File:                     5_z-A6OF76F0KyB_rsnT3GwDl50.mft (raw, json)
Hash identifier:          WMDX79qEStI75/EpOCA/qqNCwRLXOKJ+JtwJXzyK7sM=
Subject key identifier:   57:99:EB:E7:1E:EC:BF:49:9B:B5:45:7B:D5:80:C9:1B:52:E3:C9:A9
Authority key identifier: E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D
Certificate issuer:       /CN=F3646DCFAF/serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
Certificate serial:       0D86
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
Manifest number:          0D84
Signing time:             Fri 31 Jan 2025 00:54:45 +0000
Manifest this update:     Fri 31 Jan 2025 00:54:45 +0000
Manifest next update:     Sun 02 Feb 2025 00:54:45 +0000
Files and hashes:         1: 5_z-A6OF76F0KyB_rsnT3GwDl50.crl (hash: 0GxSdZBNlNgRL9RiGTaGt4kAgGc3k5CSEvyZj7cW54M=)
                          2: 97EFF9FE41C911E6974C3715F8AEA228.roa (hash: PV1x2NuqP503+6sU0r3JzrSccMtiDFB0mgrEAngyzh8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3462 (0xd86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646DCFAF/serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
        Validity
            Not Before: Jan 31 00:54:45 2025 GMT
            Not After : Feb  2 00:54:45 2025 GMT
        Subject: CN=679c1f55-1554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:48:2e:ef:3c:11:dc:c9:5c:ed:4b:da:35:27:
                    60:8c:34:f9:cb:b6:05:df:89:87:2a:5c:1c:6c:9b:
                    f2:19:04:ae:71:f6:60:a2:0f:4a:a9:14:fe:91:cb:
                    1c:13:ae:b1:21:de:f3:dd:db:79:85:b3:8a:03:c0:
                    c3:d1:2d:ed:b2:e1:71:9e:56:63:c6:0d:b4:f7:f9:
                    22:6c:fb:f2:8a:47:b2:ec:81:98:9a:46:2a:ee:92:
                    a4:b0:88:0e:8b:0f:00:1e:6c:cd:b1:1b:ae:7a:b4:
                    a6:fe:6e:72:af:95:63:83:84:65:96:06:eb:0a:e8:
                    04:bc:d4:03:a9:46:15:67:7c:37:db:b3:58:72:74:
                    45:61:ed:d9:08:68:38:5e:91:55:84:f5:c0:a8:cc:
                    3b:96:2b:d3:c1:82:db:5c:12:2e:f5:85:f1:d8:8c:
                    bc:70:96:14:8c:41:57:2e:49:cb:19:ba:c7:3e:d5:
                    c4:16:c9:e4:17:b6:78:b0:25:19:fb:3d:92:37:5d:
                    a1:15:ed:bf:08:71:4e:e9:01:53:41:f1:57:07:d0:
                    eb:1d:bb:61:26:f8:c6:80:9c:3d:33:8b:f5:41:86:
                    9d:39:d1:6e:ee:b7:8a:2c:6f:af:9e:04:71:78:ad:
                    b9:8c:68:8a:83:b5:a4:a1:73:90:99:f0:aa:32:5a:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:99:EB:E7:1E:EC:BF:49:9B:B5:45:7B:D5:80:C9:1B:52:E3:C9:A9
            X509v3 Authority Key Identifier:
                keyid:E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:5f:04:7a:7f:5a:23:c6:9a:e4:54:a9:6d:35:d9:5a:c8:15:
         39:ae:09:ea:09:ae:a4:fc:f4:ff:d1:e6:dd:22:6f:0a:3e:cd:
         47:6c:f4:ed:fa:a0:12:16:17:91:96:cd:36:8a:95:aa:a0:df:
         79:4a:1f:20:2e:18:5c:d8:b3:fe:75:53:a9:3e:4a:b3:6c:49:
         58:3e:7f:bc:77:a5:f5:4f:95:7e:94:9a:a5:e8:6c:28:56:e3:
         e8:d1:21:d6:e8:59:ff:30:28:09:e9:90:31:13:21:0b:4e:ca:
         ae:e0:92:a7:15:45:48:ae:50:3e:5c:f3:5e:20:37:0f:32:ab:
         a4:3a:5b:8a:eb:65:24:12:2d:f5:6d:36:0b:b3:b9:02:91:60:
         94:90:5b:b8:55:ec:f6:a5:bb:d1:90:bd:05:0e:cb:ab:48:01:
         2a:51:58:13:1a:a0:c9:28:0a:cd:26:66:4f:f2:58:fc:38:1e:
         13:77:fa:5b:3e:8b:77:31:a9:df:4a:9f:41:d1:aa:77:77:86:
         28:3b:9b:b9:16:25:ef:eb:8f:99:73:40:1a:42:86:b0:b1:ca:
         fd:4e:ee:e6:74:b0:af:79:07:31:13:b9:c5:2a:52:8e:2e:45:
         b9:5c:cc:54:a8:4e:0e:44:96:1b:59:b8:47:88:6a:c8:74:83:
         77:df:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----