Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File:                     XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier:          bsmEhU+YiTf8jOiVZRjof7qAIo0nBJzayZx1AOEDtYs=
Subject key identifier:   7A:D1:17:07:E2:54:01:74:D0:72:B0:00:D7:E8:46:96:09:8C:D4:7B
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer:       /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial:       0315
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number:          0313
Signing time:             Fri 31 Jan 2025 02:17:21 +0000
Manifest this update:     Fri 31 Jan 2025 02:17:21 +0000
Manifest next update:     Sun 02 Feb 2025 02:17:21 +0000
Files and hashes:         1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: n58aGBYsMwTTdVJULOUa6VmURfn/sz54xVnvkhsBV0s=)
                          2: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
        Validity
            Not Before: Jan 31 02:17:21 2025 GMT
            Not After : Feb  2 02:17:21 2025 GMT
        Subject: CN=679c32b1-9c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:80:06:a1:26:d5:ac:3d:f0:53:1a:44:f3:11:
                    ac:ab:53:c5:0f:78:4f:af:8c:4a:51:da:1d:cd:aa:
                    8f:e5:6b:13:f3:98:31:0c:e6:91:ff:62:21:41:18:
                    fe:9f:42:6e:b5:2e:06:fb:90:16:dc:3a:4a:24:1c:
                    a0:76:16:d4:b0:da:af:2c:37:b5:9e:97:08:1c:41:
                    0c:74:63:21:cb:c7:90:de:d2:87:f0:f1:35:1d:53:
                    e1:e5:85:c6:ee:31:c7:be:fe:92:aa:3c:92:b4:e6:
                    01:b1:9b:e7:25:4f:01:52:b7:f0:a3:c2:3e:10:8d:
                    15:86:61:ec:f0:b1:fd:29:0f:60:47:49:fb:2e:87:
                    d4:27:fc:ff:38:15:9d:22:a2:8e:da:bc:36:fc:3c:
                    d7:93:27:1a:8c:53:52:cd:96:11:a6:83:02:d2:ff:
                    41:6c:52:68:2a:32:5d:d6:c6:fd:44:2f:7d:2b:a5:
                    5b:60:c7:76:7f:05:8e:a9:f7:b8:13:ec:36:34:32:
                    45:18:50:b5:22:0b:b4:7c:d7:25:8b:5b:31:09:02:
                    70:09:71:b0:81:69:ad:46:90:32:d0:ee:a2:e4:ef:
                    9f:f9:99:22:12:12:af:c7:ad:41:21:b0:c2:45:94:
                    f1:4e:22:2a:ff:50:df:ba:da:1e:22:cd:32:f5:d9:
                    0d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D1:17:07:E2:54:01:74:D0:72:B0:00:D7:E8:46:96:09:8C:D4:7B
            X509v3 Authority Key Identifier:
                keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:94:11:3b:1d:fd:4e:c2:ce:7a:42:d2:61:65:59:16:bc:b7:
         29:9b:23:e5:5c:29:55:05:65:6e:b8:58:a2:0a:df:ba:64:fe:
         eb:82:08:a4:f3:65:34:1a:2b:ec:ea:1d:de:84:19:23:a8:cd:
         93:8d:c9:fc:7e:79:d7:ee:c2:78:d5:4e:eb:99:e3:e3:f0:d9:
         aa:d3:84:39:31:cd:b4:f0:9b:55:0f:c1:26:ec:cd:02:ea:6b:
         33:57:8e:8f:ee:bd:b2:b8:4c:7d:e1:60:16:3f:8b:0d:60:ca:
         9a:38:e8:87:a1:e3:e4:b5:22:50:e7:32:da:8b:23:17:c9:62:
         d4:34:84:db:01:d6:49:87:22:16:6e:fd:e7:5a:ce:9a:3d:2d:
         a6:70:e9:ea:77:51:33:6f:b6:55:cf:28:7e:0f:ec:5a:c4:09:
         0b:31:b2:8c:5f:26:9d:8e:5c:2d:68:3e:42:38:25:ed:c7:34:
         85:92:e9:2a:ea:c7:9e:8f:ac:90:80:43:f4:7c:dc:6b:4d:68:
         2e:36:35:59:9f:e8:33:1b:11:38:d8:8c:a2:99:04:b2:f8:f6:
         d1:68:27:a2:fd:e8:2f:b8:c4:e5:f8:d0:55:8a:96:f2:26:30:
         14:67:4a:9d:e3:e6:b4:1f:47:e3:0d:ff:29:0e:71:95:55:b7:
         43:d8:e5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----