Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
File:                     GB73GjT5LPYtzRHXkAfFhUg5was.mft (raw, json)
Hash identifier:          8wRspamslEAZe3mPIaLzp7Yz9YXO34FtrqePuYRfO6s=
Subject key identifier:   C2:02:0F:85:E5:AF:C1:3C:97:7E:6E:58:B3:74:B4:C6:0B:5F:83:D0
Authority key identifier: 18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
Certificate issuer:       /CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Certificate serial:       0B05
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
Manifest number:          0B03
Signing time:             Fri 31 Jan 2025 01:01:14 +0000
Manifest this update:     Fri 31 Jan 2025 01:01:14 +0000
Manifest next update:     Sun 02 Feb 2025 01:01:14 +0000
Files and hashes:         1: GB73GjT5LPYtzRHXkAfFhUg5was.crl (hash: rYl5gfntyrLk7WSV1ugMTHvrLVQOUcNxcpy29okYDtQ=)
                          2: 99C2D1746B9011E7A18C6069F8AEA228.roa (hash: xVFvLTZ6B74UBRcRd1aRKe2f4QIjw1iEzmityoLx5VY=)
                          3: 355AD4A683AE11E98A55D62AF8AEA228.roa (hash: yQuqYo4PP7qzl5R5FLB1AGc649ab7ChkeEyvocc2AL0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2821 (0xb05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
        Validity
            Not Before: Jan 31 01:01:14 2025 GMT
            Not After : Feb  2 01:01:14 2025 GMT
        Subject: CN=679c20da-cb1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:54:f6:78:c3:b1:39:54:2a:c1:e2:14:db:
                    ad:bd:34:4a:a5:3f:20:ae:3e:ba:20:8f:f2:78:cd:
                    3d:9e:0f:2f:81:29:cd:2a:46:c4:d2:53:2e:31:e7:
                    2f:02:97:15:24:05:f0:d1:e6:c7:66:14:e1:a3:a5:
                    82:91:11:3f:e4:9f:53:86:fd:05:a6:40:04:93:2f:
                    d0:31:a6:a0:e2:4c:79:dc:89:1a:b8:e4:ec:c2:e0:
                    00:6e:78:ae:e5:d2:23:55:79:00:49:13:e0:6d:ce:
                    7c:51:80:7d:73:ad:15:df:79:cb:86:6e:4a:af:b2:
                    66:db:bc:e3:9e:69:d0:ac:f6:bd:e4:23:2b:95:b4:
                    f3:9b:27:36:ba:cf:83:3e:23:a3:64:68:55:44:09:
                    56:5c:51:a8:6f:7a:71:4d:c2:c5:b0:92:28:1a:e2:
                    05:2a:ff:dd:b6:31:3a:d3:2e:ca:0b:e5:9d:dd:a1:
                    9e:02:3f:9b:66:a3:5c:8d:e1:9c:b5:c3:71:c2:d4:
                    af:94:a7:96:eb:0d:46:09:73:c8:b9:b8:55:63:97:
                    45:19:54:0b:13:11:b1:62:1f:f5:bc:53:79:9d:15:
                    cb:3a:b8:30:5a:2f:94:78:d1:cb:78:bb:73:94:3d:
                    de:94:3b:b6:07:f5:2b:82:cc:6e:3a:5a:e0:9c:33:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:02:0F:85:E5:AF:C1:3C:97:7E:6E:58:B3:74:B4:C6:0B:5F:83:D0
            X509v3 Authority Key Identifier:
                keyid:18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:b2:ea:dc:8b:1b:6a:a2:6a:0d:2e:09:64:28:21:c8:77:
         54:ea:cb:74:b1:00:8d:5e:23:aa:1d:8a:49:8f:0a:5f:8a:d3:
         70:2a:45:8c:35:98:e3:ba:f5:d3:4d:df:5d:5f:29:78:e8:81:
         25:12:56:87:b9:bc:3e:28:ad:4a:cd:ac:6d:84:5b:d2:f3:05:
         94:bb:ae:71:78:01:81:6e:6a:da:93:14:f1:0c:38:ef:fc:f7:
         6c:09:b8:d5:9d:a0:50:97:fd:3f:eb:ee:d1:17:4d:69:88:b8:
         66:eb:80:46:a1:b0:d7:a2:db:47:a6:4d:c7:9b:c2:a6:b3:fc:
         36:ec:d7:09:94:df:1b:d4:f4:54:e9:67:9a:b1:3e:c3:1e:7e:
         df:fa:dc:db:d5:15:69:ed:78:3a:88:dc:b4:db:01:2a:18:0f:
         81:d5:1a:6f:f6:cb:42:5a:ea:41:3b:87:99:89:60:97:d8:ae:
         b1:1b:41:f0:cf:ce:18:b8:ab:83:3b:38:7c:db:af:c0:ed:c0:
         58:f9:a3:cb:0f:f7:9a:9a:5d:5f:6b:3e:48:0c:0c:a2:30:f6:
         9a:cb:bb:78:82:f3:6f:c1:cc:27:c0:14:6e:25:c9:61:04:ae:
         bf:9d:cd:64:9c:b4:83:64:39:5c:84:e1:17:dd:a3:35:fb:f4:
         8e:f5:7f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----