Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
File:                     glG2X8_012csmHWQ58DLZJ1EwhI.mft (raw, json)
Hash identifier:          XkwuwQWfHWG8q0FsUB0ZNek10vwYsgqx0fDrkox8qHk=
Subject key identifier:   75:9C:4B:98:B0:6B:A7:28:71:5F:4A:80:69:85:C3:A4:ED:9F:53:00
Authority key identifier: 82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
Certificate issuer:       /CN=F365E03DAF/serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
Certificate serial:       039C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
Manifest number:          039A
Signing time:             Fri 31 Jan 2025 02:10:11 +0000
Manifest this update:     Fri 31 Jan 2025 02:10:11 +0000
Manifest next update:     Sun 02 Feb 2025 02:10:11 +0000
Files and hashes:         1: glG2X8_012csmHWQ58DLZJ1EwhI.crl (hash: zORjK2mZIBtHQ8jBSWWtjuRd4bRDzclftzezZ7rghbo=)
                          2: 63024F1E28B611ED8CF5BD8AF1222468.roa (hash: 4ljd9pI9G7HxkQ3CSXE8wSNVbsWYc0or91A3WwVt9x0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924 (0x39c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAF/serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
        Validity
            Not Before: Jan 31 02:10:11 2025 GMT
            Not After : Feb  2 02:10:11 2025 GMT
        Subject: CN=679c3103-790e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:61:f6:5d:6e:1b:e2:2b:8f:38:07:23:94:
                    8e:86:70:ad:8f:a1:3a:a8:aa:a5:90:30:56:3b:0d:
                    5b:4e:30:30:24:c7:5b:72:7b:9a:77:0d:ca:35:1f:
                    64:84:8b:c0:af:51:8d:67:ac:30:65:3f:06:ad:ad:
                    dd:5d:9d:a2:77:07:32:3b:86:be:dc:a5:86:5b:79:
                    3e:f7:6f:6b:c3:c9:13:3f:68:97:34:cd:14:29:3d:
                    04:c8:fe:4b:18:af:ad:53:d6:6e:fb:6c:40:6b:84:
                    38:ee:58:13:25:99:58:d9:ba:70:cd:d3:25:81:d2:
                    17:a4:4c:85:c3:bf:6a:bf:a1:93:5d:f4:a9:8f:db:
                    af:50:9b:ab:5c:3d:e7:b0:69:1f:64:41:93:f5:e5:
                    aa:ac:ff:f8:9c:49:39:d4:e9:bc:7a:df:1a:91:ba:
                    3e:1c:82:56:38:7f:ab:2e:17:0d:27:eb:5c:d3:12:
                    69:50:63:f8:1e:08:55:55:e0:a8:b1:03:e4:a2:22:
                    92:aa:93:95:9c:30:cb:1a:99:bf:df:5a:59:0f:51:
                    34:86:b3:11:88:08:d3:17:ba:f4:bb:31:40:f4:a9:
                    c4:2d:3d:ed:2a:d0:c3:08:8e:44:64:f9:55:3a:7f:
                    42:ef:88:8f:35:07:42:d8:6d:b0:55:6a:d9:ad:b5:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9C:4B:98:B0:6B:A7:28:71:5F:4A:80:69:85:C3:A4:ED:9F:53:00
            X509v3 Authority Key Identifier:
                keyid:82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f1:8a:93:3b:90:cd:4d:f3:db:b5:09:3b:c7:15:c4:92:5b:
         6d:f1:65:6f:46:ce:22:b0:70:01:90:0f:f7:b9:89:ee:d1:9d:
         52:ef:c0:f8:75:24:85:6d:21:8e:30:0c:05:8b:26:80:90:5d:
         6d:5f:0c:01:23:2d:52:c6:0c:42:e1:a2:dd:24:f7:6c:48:d6:
         dd:8c:39:6f:da:23:55:b9:17:9b:67:3f:e2:97:9e:f7:e1:8e:
         a4:cd:bb:d4:10:30:53:33:50:6c:56:b8:f3:1f:4d:71:5d:20:
         39:5c:e1:6a:f9:f8:d0:b3:2b:db:7a:56:b5:01:98:aa:0d:de:
         5c:9d:e4:ef:45:dc:63:2c:49:07:92:59:36:4f:42:72:99:e6:
         be:dd:5b:f0:b3:f3:86:d7:81:ef:99:b6:06:54:ed:07:c4:fb:
         1d:2b:c1:81:bb:c4:fd:46:7f:31:13:b7:c7:4f:ad:7a:1e:f5:
         d9:eb:c8:a7:00:94:7d:6f:b7:93:a7:a7:b8:23:79:f0:23:0f:
         df:ae:a3:79:69:ce:6d:6f:26:8d:9c:cb:f9:c9:68:bf:a8:cd:
         e5:ec:7e:f6:78:92:65:46:e8:b4:a2:97:81:a9:c0:6e:36:ea:
         07:75:7c:73:8a:ec:ed:10:6b:3f:f1:07:45:03:3d:a5:a1:e0:
         1d:6d:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----