Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
File:                     fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft (raw, json)
Hash identifier:          gLyqss0eQe+Sb5k9i12vOJakCmezeLHkNvZq4lcwUWs=
Subject key identifier:   97:D1:BD:CD:C6:5E:F4:04:E0:56:2B:A3:8A:EA:11:15:82:EB:E6:18
Authority key identifier: 7F:2A:FF:E8:95:FD:28:0C:96:84:1E:CE:C0:DD:7A:59:D3:F2:E5:99
Certificate issuer:       /CN=F3670C40AF/serialNumber=7F2AFFE895FD280C96841ECEC0DD7A59D3F2E599
Certificate serial:       0850
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
Manifest number:          084F
Signing time:             Fri 31 Jan 2025 01:13:21 +0000
Manifest this update:     Fri 31 Jan 2025 01:13:21 +0000
Manifest next update:     Sun 02 Feb 2025 01:13:21 +0000
Files and hashes:         1: fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl (hash: 9UW+l9MJsW0oEzt6gGah0HPw3Gw9/vKX8AUSgjRpxUM=)
                          2: 9F760182864511E980359A57F8AEA228.roa (hash: JfR+cGc/NacDq66cJcP1mnmtznOSJj3hgdYO7OA0hMI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128 (0x850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AF/serialNumber=7F2AFFE895FD280C96841ECEC0DD7A59D3F2E599
        Validity
            Not Before: Jan 31 01:13:21 2025 GMT
            Not After : Feb  2 01:13:21 2025 GMT
        Subject: CN=679c23b1-498a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:de:af:b9:eb:e8:3a:63:d7:67:3a:34:24:2f:
                    c7:5b:c2:68:3e:48:36:ef:d8:0c:b2:7f:98:4e:d1:
                    70:a8:ce:85:d7:e6:07:18:cc:a3:da:20:ed:5a:ff:
                    bc:9f:7c:2d:e9:63:9d:3b:40:e6:6f:c4:58:7d:8f:
                    87:62:5d:2e:0b:a1:9f:46:fe:17:a4:de:cd:e8:1d:
                    7b:9f:a9:42:b8:53:9c:ca:b9:7c:93:81:2e:60:08:
                    05:69:bb:f1:b2:89:c7:85:9e:39:af:7e:4b:d2:c8:
                    36:6c:94:c6:a9:6e:c9:ef:71:23:b0:5e:96:2a:b8:
                    64:56:92:0b:43:90:20:03:53:7e:50:f9:c2:9c:47:
                    d5:63:7a:bb:a5:9e:38:36:c1:01:a6:0a:6b:49:93:
                    99:25:f4:84:15:59:c8:c1:38:46:d8:a4:dc:0f:e0:
                    5a:59:59:98:22:b4:35:14:68:b5:60:fe:ab:99:6a:
                    b9:fe:61:ac:d0:0e:38:99:71:d7:a6:58:21:ae:9d:
                    ae:94:74:2d:de:c5:b1:99:e8:2d:12:7a:6f:44:fb:
                    89:d5:87:a4:b2:92:07:0a:6b:8a:2f:2a:7a:b7:b1:
                    ca:80:9a:6e:10:34:df:f7:7f:c2:59:c0:e6:7c:bd:
                    99:4a:ec:40:0f:0a:44:b7:7d:86:51:92:82:da:d6:
                    0d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D1:BD:CD:C6:5E:F4:04:E0:56:2B:A3:8A:EA:11:15:82:EB:E6:18
            X509v3 Authority Key Identifier:
                keyid:7F:2A:FF:E8:95:FD:28:0C:96:84:1E:CE:C0:DD:7A:59:D3:F2:E5:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8f:98:bf:4c:d7:03:c2:86:0e:66:34:85:da:c5:73:05:12:
         b8:38:8f:ff:09:6e:71:58:b8:69:9f:52:23:c0:41:91:7d:8e:
         c4:26:1a:ea:41:a8:b2:d1:2d:c8:84:a9:1b:90:07:01:05:81:
         5d:8d:0d:7b:b5:db:50:b0:4b:9d:73:bd:03:e7:42:7d:e7:f9:
         a7:e4:84:39:64:72:a0:02:8a:8e:e6:de:b5:33:d2:fe:bb:95:
         e8:74:8c:21:3f:be:5b:26:c6:8a:a0:b1:a3:57:94:76:5a:bf:
         23:ce:00:e2:a8:af:ef:d0:63:7f:d8:14:54:03:77:6d:9a:12:
         08:66:12:ca:af:f6:a0:98:19:98:a5:04:77:02:e5:68:ab:20:
         c2:62:36:7f:92:55:e1:3d:fb:3e:b4:f8:a3:e4:1d:76:68:e1:
         e6:f3:34:f1:aa:1b:7d:69:70:01:4a:95:11:3d:b4:ab:c2:46:
         95:bb:ff:b1:a6:9b:20:2f:96:d6:a4:29:8d:4a:95:1b:e5:36:
         78:17:c6:f2:7e:da:cf:39:d7:6f:59:80:76:1a:7e:dd:4d:74:
         9c:45:f0:80:fb:3f:fb:10:d9:7d:bf:26:de:3a:c7:ea:2d:d4:
         cf:8c:88:c2:eb:94:3b:23:2b:59:82:d2:74:16:a1:00:b7:28:
         c7:cd:03:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----