Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
File:                     dUDQUtEpERNWC6gtIyBCuZqopko.mft (raw, json)
Hash identifier:          ZI42BqZnYqXigcTZOHOWltQpwfex6RSOY3nKeVBgjv8=
Subject key identifier:   2D:08:36:54:5E:F2:42:57:75:04:3F:C2:67:32:1B:10:E6:BE:0B:9E
Authority key identifier: 75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A
Certificate issuer:       /CN=F366C124AF/serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
Certificate serial:       07F5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
Manifest number:          07F3
Signing time:             Fri 31 Jan 2025 01:18:54 +0000
Manifest this update:     Fri 31 Jan 2025 01:18:53 +0000
Manifest next update:     Sun 02 Feb 2025 01:18:53 +0000
Files and hashes:         1: dUDQUtEpERNWC6gtIyBCuZqopko.crl (hash: vAO225Q0SlPPmgsmtQ3l5MA8BCIXkSV3FFTH40PZ+VU=)
                          2: C82D839403C511EBB1822323F8AEA228.roa (hash: BRU/+9vSJaKFXnQ7Cb8Og2eSBhtx9/MwNvCd1XqLbx0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2037 (0x7f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C124AF/serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
        Validity
            Not Before: Jan 31 01:18:53 2025 GMT
            Not After : Feb  2 01:18:53 2025 GMT
        Subject: CN=679c24fe-47f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e8:40:a7:d5:7d:50:49:66:d4:2d:69:af:3b:
                    22:b6:9e:cb:c8:99:c1:6d:4e:f4:55:a3:c7:32:dd:
                    8d:be:39:69:af:78:3e:a1:2f:d5:6a:bc:b1:bb:16:
                    b1:81:3a:ba:8e:2d:5f:fa:3e:17:3d:4b:ce:8f:2b:
                    79:58:96:5a:bc:c9:ef:c0:c8:63:15:d0:2d:f0:2b:
                    8f:f8:3b:fc:a4:3a:49:0f:d7:45:bc:e6:96:b9:bb:
                    1c:5b:a5:0f:d2:b4:40:eb:d2:a4:8d:6a:4f:f6:cf:
                    5c:a4:42:b5:9b:5b:8f:f2:72:33:18:f5:2d:69:33:
                    f5:eb:8f:90:91:18:db:78:02:82:32:b8:9d:82:a9:
                    b5:84:39:fc:50:c0:7c:34:27:0e:55:4c:d8:63:46:
                    6b:b1:27:c5:fc:f3:ef:10:6e:89:94:54:a4:dd:5c:
                    5c:b1:b3:a4:8a:76:e8:b8:36:7b:ec:b0:95:fc:cd:
                    c7:43:11:0a:7e:6d:7b:e1:b1:5b:6d:6b:b8:01:5c:
                    6b:0c:b5:de:02:13:02:39:04:9a:4a:17:52:e1:5f:
                    f9:34:1c:89:f7:df:3e:50:a0:56:cf:e6:81:83:1b:
                    91:97:3b:c5:3a:9a:c2:d4:51:61:12:98:58:ed:12:
                    43:8b:08:71:7e:67:51:35:73:17:21:0d:52:e1:4a:
                    bc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:08:36:54:5E:F2:42:57:75:04:3F:C2:67:32:1B:10:E6:BE:0B:9E
            X509v3 Authority Key Identifier:
                keyid:75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:89:bd:3d:f2:47:0a:02:a1:2d:7f:df:61:e3:e5:4a:e2:e8:
         50:30:d7:cb:4a:83:88:36:89:12:d0:5c:9f:3d:7b:4b:78:da:
         50:bd:2a:fd:2f:6d:bc:a2:dd:d6:04:1d:c0:8d:56:b0:ce:49:
         a5:b4:85:5a:9e:c5:09:b8:c5:7b:86:ea:02:49:ee:49:58:64:
         e0:7a:c1:fe:e1:8e:8f:d5:db:5a:2b:99:e0:3f:1b:7d:2a:e7:
         1a:05:86:0f:78:a9:7b:02:e1:8e:47:f4:12:7f:47:59:1e:00:
         0d:e0:74:e8:00:67:b3:9d:85:80:21:c4:7c:b8:6e:c0:ca:f9:
         e4:dc:8c:ee:00:b4:ee:08:57:c6:1a:0f:2f:29:0b:c2:b3:54:
         2f:ff:58:a1:db:b5:00:ce:79:85:d1:2e:a7:50:59:12:22:b7:
         91:1f:40:9e:12:90:48:7d:09:31:bf:55:e7:b5:d2:7e:c5:ff:
         9c:25:55:87:f3:ec:d4:bb:2b:22:5a:ac:cd:3a:0c:79:06:35:
         48:26:ef:fb:ec:ec:6d:a3:5d:58:8b:bd:22:50:93:a6:33:f3:
         ad:3c:61:87:3f:a3:02:4e:26:e1:a9:95:96:87:1f:b6:46:13:
         43:73:bf:ba:fc:25:73:04:28:3f:c7:43:a7:2e:85:12:6c:de:
         04:b2:fe:ad
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkMxMjRBRjExMC8GA1UEBRMoNzU0MEQwNTJEMTI5MTExMzU2MEJBODJEMjMyMDQy
Qjk5QUE4QTY0QTAeFw0yNTAxMzEwMTE4NTNaFw0yNTAyMDIwMTE4NTNaMBgxFjAU
BgNVBAMTDTY3OWMyNGZlLTQ3ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDT6ECn1X1QSWbULWmvOyK2nsvImcFtTvRVo8cy3Y2+OWmveD6hL9VqvLG7
FrGBOrqOLV/6Phc9S86PK3lYllq8ye/AyGMV0C3wK4/4O/ykOkkP10W85pa5uxxb
pQ/StEDr0qSNak/2z1ykQrWbW4/ycjMY9S1pM/Xrj5CRGNt4AoIyuJ2CqbWEOfxQ
wHw0Jw5VTNhjRmuxJ8X88+8QbomUVKTdXFyxs6SKdui4NnvssJX8zcdDEQp+bXvh
sVtta7gBXGsMtd4CEwI5BJpKF1LhX/k0HIn33z5QoFbP5oGDG5GXO8U6msLUUWES
mFjtEkOLCHF+Z1E1cxchDVLhSrxBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULQg2
VF7yQld1BD/CZzIbEOa+C54wHwYDVR0jBBgwFoAUdUDQUtEpERNWC6gtIyBCuZqo
pkowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZDMTI0LzIxRTJEMEQ0Q0FGMDExRTk4QzIwNDQ3OEY4QUVBMjI4L2RVRFFV
dEVwRVJOV0M2Z3RJeUJDdVpxb3Brby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2RVRFFVdEVwRVJOV0M2Z3RJeUJDdVpxb3Brby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkMxMjQvMjFFMkQwRDRDQUYwMTFFOThDMjA0NDc4RjhB
RUEyMjgvZFVEUVV0RXBFUk5XQzZndEl5QkN1WnFvcGtvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmib098kcKAqEtf99h4+VK4uhQMNfL
SoOINokS0FyfPXtLeNpQvSr9L228ot3WBB3AjVawzkmltIVansUJuMV7huoCSe5J
WGTgesH+4Y6P1dtaK5ngPxt9KucaBYYPeKl7AuGOR/QSf0dZHgAN4HToAGeznYWA
IcR8uG7Ayvnk3IzuALTuCFfGGg8vKQvCs1Qv/1ih27UAznmF0S6nUFkSIreRH0Ce
EpBIfQkxv1XntdJ+xf+cJVWH8+zUuysiWqzNOgx5BjVIJu/77Oxto11Yi70iUJOm
M/OtPGGHP6MCTibhqZWWhx+2RhNDc7+6/CVzBCg/x0OnLoUSbN4Esv6t
-----END CERTIFICATE-----