Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
File:                     pz69jeko0iBEFPgOnBKclZ18RIk.mft (raw, json)
Hash identifier:          6//zZFkBOQv9aVyBVzHyR9oU4hk5VH2vdq7Wuqx3q7c=
Subject key identifier:   6C:95:6B:DB:05:35:3A:2E:8B:19:3E:0C:AB:1B:F9:16:C4:16:A0:B1
Authority key identifier: A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89
Certificate issuer:       /CN=F366F191AF/serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
Certificate serial:       0B85
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
Manifest number:          0B83
Signing time:             Fri 31 Jan 2025 01:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 01:00:30 +0000
Manifest next update:     Sun 02 Feb 2025 01:00:30 +0000
Files and hashes:         1: pz69jeko0iBEFPgOnBKclZ18RIk.crl (hash: grSIGtrnqUFvbZB817yi4FRpHdjN/9t1C1KT9yMWAiM=)
                          2: A5F505EE310A11E89814DE46F8AEA228.roa (hash: G7wALW0FIkxQXpAJOH3ldp5an+aZ2+T0e/6OMG97saU=)
                          3: E7F9C2D60E4C11E795956341F8AEA228.roa (hash: emeNnLebc/Q9zvHY298LJgCEJ9keSysC0t/xMmR8occ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2949 (0xb85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F191AF/serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
        Validity
            Not Before: Jan 31 01:00:30 2025 GMT
            Not After : Feb  2 01:00:30 2025 GMT
        Subject: CN=679c20ae-fb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:7e:a5:48:6c:f3:6c:50:26:ed:1d:97:a8:
                    d7:e7:09:d6:17:46:23:7f:68:6c:f9:54:a9:0d:a7:
                    d5:4e:2a:de:67:76:3e:67:5f:26:71:59:c2:43:7f:
                    84:68:a1:03:b7:70:82:8d:a3:b8:00:3a:13:7d:55:
                    19:ce:65:63:a5:8a:9c:4f:65:02:a1:34:9d:ce:f6:
                    81:59:ea:cd:10:21:63:a3:18:4f:7d:1d:4f:19:67:
                    e3:8d:4d:ba:5f:99:5f:36:d5:a4:35:20:ce:58:be:
                    0d:62:3c:ae:86:c4:be:a5:70:63:15:0c:0e:d5:e9:
                    4a:80:4e:ef:45:30:29:a0:61:ab:1a:30:e3:40:72:
                    c2:bc:cb:7f:e1:25:47:b7:f9:53:6b:9e:e9:75:22:
                    6c:97:84:c0:c0:12:6c:bf:63:08:1a:72:b5:b8:ae:
                    47:f4:fd:82:a1:c5:e9:a9:c4:73:02:d9:e4:85:f0:
                    4a:af:12:6f:e3:8b:fc:3f:4a:e2:21:b7:6f:5b:92:
                    34:1a:69:0c:c1:e9:2b:43:f6:ec:36:ab:9d:62:3e:
                    f2:d8:ec:4d:f4:8d:ef:6d:01:c3:72:dd:c3:6a:96:
                    c4:e7:1d:4d:65:f4:5b:51:d7:16:2d:b7:c5:a8:ad:
                    26:8a:d0:0c:ec:d3:bc:6f:1b:2a:92:a9:67:0a:44:
                    fc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:95:6B:DB:05:35:3A:2E:8B:19:3E:0C:AB:1B:F9:16:C4:16:A0:B1
            X509v3 Authority Key Identifier:
                keyid:A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:83:8e:58:3b:a2:24:75:2d:41:08:d2:51:d9:b5:da:80:06:
         fa:12:a4:16:be:85:07:17:1d:1c:2e:59:df:f6:91:ab:c8:39:
         a1:b9:94:87:48:7a:fe:ab:e5:75:44:cf:6f:c7:95:7f:cf:82:
         a2:96:f2:f3:3f:1a:fd:5c:01:84:ee:95:f2:a0:42:0e:2c:cf:
         fd:12:f9:56:3f:7b:fe:b7:32:c9:70:91:95:03:0e:1e:bf:86:
         d1:25:56:45:dc:13:a9:10:f9:7c:e0:f0:e6:b5:c5:be:f8:5a:
         1d:f5:cf:d6:2c:d6:a8:68:7e:e0:7f:ad:25:48:04:b9:3d:ba:
         6b:9c:7e:8d:6e:94:56:d1:a5:b7:02:f7:8b:f8:5a:b0:85:f9:
         29:74:f5:cf:2d:5f:0b:9b:6b:ee:1c:2a:d7:38:0a:6e:97:5a:
         99:8f:74:16:ab:63:61:b8:c2:5b:82:41:a2:12:07:0d:c2:82:
         dc:1d:63:80:7e:8b:ba:15:98:73:03:d4:07:2a:32:01:6e:1a:
         cd:03:04:88:9e:5e:fc:e9:1e:9c:63:30:1d:ab:6c:6f:41:41:
         63:05:64:9b:ef:62:4c:28:fa:25:f5:2a:f3:33:19:e7:de:28:
         18:30:45:5d:b8:f2:08:33:9e:c9:be:ff:78:f1:c9:36:5d:b9:
         32:62:5a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----