Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.mft
File:                     Vamk1ndOPRyda8EBAHTd-iVAqgI.mft (raw, json)
Hash identifier:          0fj61Sk4NrZs1+7b3IRc7I/8kMoZ4xnUbj+HquSTms8=
Subject key identifier:   1D:52:CA:8A:3D:15:1F:5E:64:3D:93:51:75:4F:0B:E7:1C:EC:71:5F
Authority key identifier: 55:A9:A4:D6:77:4E:3D:1C:9D:6B:C1:01:00:74:DD:FA:25:40:AA:02
Certificate issuer:       /CN=F365646EAF/serialNumber=55A9A4D6774E3D1C9D6BC1010074DDFA2540AA02
Certificate serial:       021F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vamk1ndOPRyda8EBAHTd-iVAqgI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.mft
Manifest number:          021E
Signing time:             Fri 31 Jan 2025 02:37:58 +0000
Manifest this update:     Fri 31 Jan 2025 02:37:57 +0000
Manifest next update:     Sun 02 Feb 2025 02:37:57 +0000
Files and hashes:         1: Vamk1ndOPRyda8EBAHTd-iVAqgI.crl (hash: lOsdwDcoD1yKrJxDvPC9n2rP+uGj1jeU6KCDBvfcZws=)
                          2: 50E525E4457B11EEB9C84B4D4AD9E6FC.roa (hash: /3fCZ5M7gX+2d2oVslebu/Gi7jYTFXq9ULmP31irCn8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365646EAF/serialNumber=55A9A4D6774E3D1C9D6BC1010074DDFA2540AA02
        Validity
            Not Before: Jan 31 02:37:57 2025 GMT
            Not After : Feb  2 02:37:57 2025 GMT
        Subject: CN=679c3785-5c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:95:21:42:4e:4b:a6:8e:5f:9c:c6:45:f1:
                    9b:9b:73:28:c1:59:df:cb:38:a2:18:d3:c7:6f:94:
                    a2:a5:eb:4e:44:b4:0e:da:75:18:dd:fb:8e:eb:71:
                    44:31:28:a6:71:42:a9:08:02:cc:62:f0:b1:62:8a:
                    03:5e:69:c8:89:9d:13:9e:92:59:41:14:0a:91:ce:
                    f2:2f:5f:53:0e:b0:db:c6:ad:a3:10:56:c1:2a:d4:
                    27:56:ab:11:96:2b:74:92:d6:9b:b2:ef:5f:24:30:
                    91:f3:c7:e7:34:eb:fe:ff:3f:90:09:e3:43:f4:8f:
                    ba:ec:f1:d8:9d:0f:43:a9:9e:d0:d1:ee:e2:bb:05:
                    61:61:64:26:36:aa:b4:cd:92:c9:94:4d:38:6e:aa:
                    c9:ce:3d:35:79:ff:21:89:74:f0:ab:c7:aa:f6:88:
                    aa:41:56:6f:2e:ee:0e:c4:e4:2c:11:f7:27:5e:65:
                    09:4e:b8:f3:fc:e6:6f:ce:e0:a0:80:86:75:4b:ed:
                    2a:0e:d2:fb:26:69:78:65:65:14:c6:1c:c4:da:09:
                    7f:b7:c8:8e:b1:c0:fe:03:a1:de:de:8a:8e:37:69:
                    2d:45:16:ea:b8:fc:67:1a:fc:0d:d4:ac:20:3d:b6:
                    a4:1b:44:b3:0c:1d:36:40:8a:0d:69:4f:87:ca:de:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:52:CA:8A:3D:15:1F:5E:64:3D:93:51:75:4F:0B:E7:1C:EC:71:5F
            X509v3 Authority Key Identifier:
                keyid:55:A9:A4:D6:77:4E:3D:1C:9D:6B:C1:01:00:74:DD:FA:25:40:AA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vamk1ndOPRyda8EBAHTd-iVAqgI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d5:64:d5:ba:df:68:7d:d1:83:5d:9d:ad:71:f4:78:b7:ab:
         42:f9:ec:cb:e8:7f:d3:85:63:77:30:a5:d3:13:7a:4f:06:76:
         5f:c7:d5:ae:d3:d0:2e:e6:9f:29:30:e8:47:13:56:04:71:7e:
         19:ee:a6:35:e7:22:8c:62:1f:f7:52:4d:f5:ae:68:59:9b:94:
         11:c1:13:33:05:9d:09:86:a0:9e:6e:67:94:66:63:cc:77:87:
         50:46:3f:fd:d3:13:fc:a5:88:3b:49:14:d3:42:f7:09:de:c1:
         cd:7e:b1:ba:c6:83:18:49:26:8b:eb:28:07:e9:87:53:7d:ec:
         63:67:5b:9f:d8:ff:5b:6f:61:0c:57:02:aa:3d:2e:1f:65:23:
         dd:bc:59:0f:d0:0f:68:ef:57:64:3e:1c:16:28:b9:44:fd:b3:
         59:07:d0:30:6e:4e:da:60:fa:53:92:f1:30:9e:92:bf:d5:f4:
         a9:8e:6b:58:dd:51:81:b1:e6:dd:a9:6f:79:3f:a1:38:82:25:
         7c:83:4a:ec:15:21:5f:b0:ff:ed:69:8b:0b:63:ae:c1:18:25:
         d8:6f:1c:db:bd:27:27:58:54:46:49:ee:71:55:1e:a7:ef:92:
         65:2e:f2:99:b3:47:dc:d2:ec:a8:dd:7f:21:e1:4a:9a:17:51:
         4c:4a:2b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----