Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.mft
File:                     q_mWDIW8-JONWDN_jLfF603Es64.mft (raw, json)
Hash identifier:          LinvnluV3ZDL7NbZthQFAr24KeGc4xz1DqHP/N6t544=
Subject key identifier:   CF:D3:0D:DC:C0:A0:1E:E6:C6:4F:89:F5:34:08:62:A4:14:95:C0:8D
Authority key identifier: AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE
Certificate issuer:       /CN=F364814FAF/serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
Certificate serial:       06C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.mft
Manifest number:          06B9
Signing time:             Fri 31 Jan 2025 01:29:50 +0000
Manifest this update:     Fri 31 Jan 2025 01:29:50 +0000
Manifest next update:     Sun 02 Feb 2025 01:29:50 +0000
Files and hashes:         1: q_mWDIW8-JONWDN_jLfF603Es64.crl (hash: ajiOTf936yeapfPONpmbxpcE+yRdCrhJCqQMmeAGYrc=)
                          2: AC281CE01A5B11EEA7A0E1714AD9E6FC.roa (hash: 7xxUpBQS2/VUMrI55FtqZ2nwKSeINEecr+KXC5dmFa4=)
                          3: F1F4AD980D2111EE81F73A524AD9E6FC.roa (hash: eS94GId9nW6zfoC3yc0HpJOz/hROYaGVD5nOkDxOOHk=)
                          4: A4BBE7321A5D11EEA88CA1774AD9E6FC.roa (hash: 2XJn7epe12EECWTK6FV1oKt9nqoyYG5W0N8fdsZepFs=)
                          5: 599396801A5B11EE8DD825714AD9E6FC.roa (hash: YM6FGM+mXzOSME7WORSbiiB2Lqa3cKGraE4k2lh4Weg=)
                          6: 09D379BC1A5B11EEACF0F06F4AD9E6FC.roa (hash: XtwJZi03efMzPcuSCZQyZPuu9oEG2wFZ/I2Jmd50DHQ=)
                          7: 9AC4EB921C9811EE85C3A0404AD9E6FC.roa (hash: ViR2kCgJWzH8mXDagfWs8nOEe78d45RL0HxeM65qDeU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732 (0x6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364814FAF/serialNumber=ABF9960C85BCF8938D58337F8CB7C5EB4DC4B3AE
        Validity
            Not Before: Jan 31 01:29:50 2025 GMT
            Not After : Feb  2 01:29:50 2025 GMT
        Subject: CN=679c278e-1070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0a:c1:fe:d4:36:aa:28:35:a7:38:7e:2f:d1:
                    b3:fd:a3:aa:ac:f3:c0:c0:8e:32:74:66:af:bd:72:
                    f0:35:56:d0:aa:93:67:b6:95:80:cb:60:c9:88:3d:
                    c4:d0:22:cd:97:fc:a1:10:82:0a:f7:20:0a:f7:cb:
                    5a:f1:28:44:77:4b:37:1b:b6:a4:90:82:ef:25:9e:
                    33:86:d9:ca:51:c7:db:80:a4:8e:80:ea:67:03:d6:
                    3e:3d:32:92:44:b0:c2:9f:a2:5d:ce:68:db:ea:63:
                    63:27:de:88:34:1e:0d:f7:dd:44:24:73:f3:aa:7c:
                    6b:60:c3:ad:8f:39:41:d3:e2:0b:43:fd:60:de:4f:
                    46:93:4e:06:6b:c8:67:7a:66:e5:8c:c0:63:4d:ae:
                    66:f4:db:0f:1f:7f:66:e0:94:08:80:51:64:a7:a1:
                    1e:8f:54:54:b7:29:d4:4b:e3:33:3b:b6:fc:8c:44:
                    04:a9:e9:db:5a:34:69:f6:46:85:38:96:e9:b1:6a:
                    bd:8b:75:58:5d:a6:b8:ae:ba:3b:b2:bb:11:4e:c2:
                    07:04:b4:d7:54:9b:a9:7f:2b:a1:52:82:65:bc:f9:
                    01:4c:48:4c:05:b8:b2:4b:ec:59:0a:41:9f:a8:0c:
                    8d:5b:c6:66:95:e3:91:9b:05:85:bc:71:d8:e4:1e:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D3:0D:DC:C0:A0:1E:E6:C6:4F:89:F5:34:08:62:A4:14:95:C0:8D
            X509v3 Authority Key Identifier:
                keyid:AB:F9:96:0C:85:BC:F8:93:8D:58:33:7F:8C:B7:C5:EB:4D:C4:B3:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/q_mWDIW8-JONWDN_jLfF603Es64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364814F/9E5E8DA4C2BD11EA85909E31F8AEA228/q_mWDIW8-JONWDN_jLfF603Es64.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:df:76:e0:ec:4d:63:27:8c:fe:d6:79:29:7f:29:1f:b1:7f:
         78:0b:72:3e:e8:c6:68:23:74:7e:16:76:8b:50:fb:ac:88:69:
         3e:a9:b6:0a:bd:4a:7f:90:00:3b:c5:e6:43:2c:af:ef:28:78:
         5d:65:cb:47:84:7a:94:52:93:ee:ea:5c:0b:4c:b1:3c:87:2f:
         3f:4e:3b:60:d2:e2:ce:e1:23:ea:1c:f1:61:03:5f:5e:98:58:
         20:4e:5b:e6:92:4e:a2:4d:55:3f:36:10:76:6c:c4:1b:74:2f:
         ef:78:22:b0:2e:7b:ec:ec:62:67:5a:b3:e2:d1:15:e7:55:fb:
         98:70:e5:33:1a:ec:3c:11:38:c0:81:65:8d:9f:7f:c9:ef:37:
         63:14:1a:7e:77:25:75:24:1e:65:c6:7d:66:9d:35:7f:1e:d1:
         dc:48:16:73:a3:11:2b:b3:bf:4f:9d:e9:ad:94:0c:d3:59:84:
         16:ab:10:61:db:9e:06:bc:37:30:77:f7:a6:bf:06:c5:72:8c:
         e9:e6:0b:3b:90:b3:4f:b0:3c:91:88:33:06:32:eb:c0:8b:37:
         cc:47:9e:6c:73:56:41:24:ee:7c:45:95:bf:a7:d5:f3:12:04:
         0c:f3:f9:f3:ba:df:f1:8c:04:c8:26:f1:be:f9:c9:47:5b:49:
         7b:c4:9d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----