Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
File:                     EpiStZvukL-kaOVEXErR0BaeEdk.mft (raw, json)
Hash identifier:          XUQ7ZaEF+xLzmOe+xN2rJ/8LDHtQMzPTPyv0A9hlTQI=
Subject key identifier:   B6:DA:A2:61:64:FA:38:D2:3F:D5:43:66:50:9D:82:9B:13:4E:B9:49
Authority key identifier: 12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9
Certificate issuer:       /CN=F3689E12AF/serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
Certificate serial:       05D9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
Manifest number:          05D7
Signing time:             Fri 31 Jan 2025 01:35:39 +0000
Manifest this update:     Fri 31 Jan 2025 01:35:38 +0000
Manifest next update:     Sun 02 Feb 2025 01:35:38 +0000
Files and hashes:         1: EpiStZvukL-kaOVEXErR0BaeEdk.crl (hash: iQ3nSF1kmhr9Y/nfDTd6vxGaYpJ8MRMv0WTVZyV2SpE=)
                          2: B5080AD06A3811EBA7B2E932F8AEA228.roa (hash: 06xwOkOrQfyvwrgwnCZjvF757U107kkYwkenMDnbf3M=)
                          3: 9A4E88A46A3811EBADA4CE32F8AEA228.roa (hash: JNx7J58GczpcPwlSR22R5up1pCKZvY5JopK+aTD668U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689E12AF/serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
        Validity
            Not Before: Jan 31 01:35:38 2025 GMT
            Not After : Feb  2 01:35:38 2025 GMT
        Subject: CN=679c28eb-99d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:8f:e8:f2:29:35:57:e5:8a:31:f1:01:00:
                    6a:c4:2a:ec:5e:2b:b4:91:ae:5d:04:05:bb:cd:61:
                    bc:96:0d:a7:34:c9:25:db:1c:c8:c3:1f:ea:b6:65:
                    b8:8a:da:0f:ad:6c:e7:64:11:6a:ba:50:c3:fb:66:
                    07:dc:19:5d:78:3a:c8:5e:a7:07:c2:3c:1f:fb:51:
                    36:60:56:3b:78:3b:f6:f6:ac:a1:ac:b3:dd:44:4e:
                    d1:11:8a:98:52:2d:63:ef:f0:b4:1f:2a:2a:33:35:
                    7b:b9:1b:43:84:ef:c5:8a:49:d8:53:2d:f7:97:04:
                    58:fc:a6:71:af:a1:a6:cc:46:2c:ad:45:b4:a4:53:
                    19:ef:45:82:35:4d:9c:ac:13:b0:89:ed:4c:d4:89:
                    01:6b:24:f5:d6:8a:9d:d0:c2:1e:42:70:f2:fb:b5:
                    9e:1d:56:c9:1b:68:f1:21:82:02:47:38:4c:f1:c8:
                    7e:3f:80:2e:a4:cd:25:d3:90:f7:a4:e4:6d:1d:b1:
                    e6:f9:9e:84:01:74:c5:7d:5c:a5:3d:f1:85:b8:2f:
                    14:32:d3:ed:1f:be:6c:64:9f:a4:b6:6e:f3:11:02:
                    bc:b4:d2:28:d7:a5:e3:39:6d:67:bc:e8:2b:6b:c0:
                    a2:6a:33:21:1f:94:2e:d6:9f:cb:43:00:7c:33:8c:
                    1e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DA:A2:61:64:FA:38:D2:3F:D5:43:66:50:9D:82:9B:13:4E:B9:49
            X509v3 Authority Key Identifier:
                keyid:12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:92:38:c3:65:da:1a:d7:09:0e:b7:88:b2:47:00:00:48:a7:
         71:3a:92:43:84:1f:03:fd:31:cc:56:ec:bb:8c:3e:dd:a1:ad:
         81:f8:39:95:06:62:00:f0:17:f0:2f:fd:b0:72:cf:a0:03:5d:
         64:c2:64:ca:40:20:3a:61:3f:4e:ae:09:f0:d3:27:3d:1d:f5:
         63:c2:13:35:21:0c:56:39:9f:6f:21:c1:5f:70:67:90:1b:06:
         d7:6f:aa:b6:19:69:7a:7f:1e:c3:ec:19:48:9d:fb:46:e2:52:
         8e:c2:b4:80:e0:6f:b0:06:0e:72:b3:9c:fd:9c:7e:ee:a3:30:
         52:d1:24:b6:49:08:b1:7b:f7:be:4e:74:fa:53:ad:6d:14:4b:
         d4:0b:7f:68:e6:c1:d9:b1:20:6e:1f:f8:e7:6c:b0:f2:8a:80:
         42:91:56:7e:3e:e4:dd:8c:75:4e:fd:4e:47:59:fc:ce:db:2b:
         fe:f1:f7:f7:bf:df:39:e8:ae:b5:96:ec:0a:cc:1a:3e:41:24:
         1f:ce:9f:e3:60:bf:e6:93:d3:eb:66:6a:e5:5a:ac:e1:0e:6c:
         90:2f:02:04:de:40:32:b7:79:73:20:93:3e:2b:50:2a:a6:6b:
         c2:9e:17:67:ba:c6:25:da:9e:82:ee:1a:4b:42:0d:b6:1f:c4:
         d7:87:9d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----