Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
File:                     -YeB5n2eqWryWAashtEAb4IfqjY.mft (raw, json)
Hash identifier:          vuzfgN/FfXNva7ZRVfVrBllH4p7mq4hKoq6+6VmFcaw=
Subject key identifier:   9E:38:86:AB:AE:25:09:C4:15:A5:1C:A7:28:EE:63:26:39:DB:A6:D0
Authority key identifier: F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
Certificate issuer:       /CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
Certificate serial:       01C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
Manifest number:          01C3
Signing time:             Fri 31 Jan 2025 02:46:03 +0000
Manifest this update:     Fri 31 Jan 2025 02:46:03 +0000
Manifest next update:     Sun 02 Feb 2025 02:46:03 +0000
Files and hashes:         1: -YeB5n2eqWryWAashtEAb4IfqjY.crl (hash: fRSLNRfrp+BA4P6Y+ROl/C+5IsVcxZlLLtZaQVJkFBI=)
                          2: F3D28466A49B11EE881B3A7CD25BE465.roa (hash: 8ql7+vusURAXXO1QjIU3wb4N2LTfHKWe3IzCBlZgxWQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
        Validity
            Not Before: Jan 31 02:46:03 2025 GMT
            Not After : Feb  2 02:46:03 2025 GMT
        Subject: CN=679c396b-36b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:93:d0:d9:0d:8a:68:0c:24:c2:6b:e4:a0:b4:
                    5c:27:ba:65:f0:30:e6:9c:32:29:fa:7d:46:4a:90:
                    a8:ff:ca:66:ae:de:67:d0:4a:67:cc:47:77:62:fe:
                    22:9c:ba:5e:11:90:2d:13:49:75:94:72:dd:07:1f:
                    a2:ad:22:74:bd:7e:fd:11:46:ce:5e:4a:1f:bb:ca:
                    e3:f1:27:03:60:2c:47:63:94:1b:98:5a:3f:0c:15:
                    80:27:32:62:d4:7c:c6:40:ca:8a:00:74:eb:d1:4d:
                    cb:77:31:2b:41:c1:69:a7:06:d4:52:bd:3d:61:37:
                    6c:75:46:c2:e7:f9:55:86:f2:5e:b1:e8:cc:58:c7:
                    d2:a3:02:3e:c7:68:d6:5a:df:15:ce:db:ae:4a:e0:
                    ab:5f:b4:2d:5e:a0:db:01:d3:23:a6:cd:e5:13:5d:
                    b0:a5:fc:57:f7:c3:3b:df:b1:c8:cc:84:d0:02:8b:
                    13:0e:a7:d5:e8:ea:2f:ac:91:70:57:7d:f2:7b:90:
                    dc:7b:02:d0:61:25:dd:e7:5d:de:d0:7f:a6:e3:09:
                    51:0c:27:4b:76:15:68:c0:35:c0:ec:c9:33:43:27:
                    a7:1f:76:bb:7a:0e:7c:78:8f:4d:cb:5e:7d:16:36:
                    cb:3a:28:04:84:2b:d8:5e:47:b2:85:91:6b:60:b4:
                    2f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:38:86:AB:AE:25:09:C4:15:A5:1C:A7:28:EE:63:26:39:DB:A6:D0
            X509v3 Authority Key Identifier:
                keyid:F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b9:47:37:d4:65:ee:6d:81:36:ff:93:d9:a5:ff:c4:88:46:
         81:31:19:b7:e1:cb:f2:02:5d:89:94:b7:ee:a4:07:04:35:c2:
         84:be:9a:0f:be:3d:d8:2a:23:66:aa:4f:d4:36:d9:c4:a4:e3:
         59:df:96:a8:63:e5:7f:69:c4:73:b3:f2:3a:b0:be:12:bb:40:
         a9:10:d6:aa:ab:17:df:b4:e0:6c:f2:7c:f5:c6:90:f5:28:33:
         b1:7c:75:9a:4a:ec:14:45:7a:2a:2d:a6:e5:0b:36:d3:3d:00:
         9e:29:e2:67:23:98:c9:d7:8d:66:18:42:b0:15:00:69:48:4c:
         37:73:02:de:2c:a1:d3:c1:c2:f8:71:50:9e:f9:45:89:a5:b7:
         86:fa:34:26:cc:d3:8a:bf:65:cc:c8:5b:46:b6:70:9f:02:fd:
         95:12:a4:38:6d:a7:01:7c:c4:c7:d9:77:9b:e0:7f:b1:5b:3c:
         d2:b2:14:20:89:68:f6:cb:ee:2b:d6:dc:82:f8:12:5f:37:62:
         0d:d4:7e:04:5a:bf:04:1f:49:13:9b:86:13:f6:74:5c:84:de:
         c4:c7:2a:85:9b:f3:2d:ea:35:fa:9b:39:a6:87:f9:77:f4:08:
         f8:fe:9e:7e:18:eb:c0:b1:5e:e7:ea:ef:70:51:ab:d4:a9:86:
         d7:df:a7:a0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTJEOThBRjExMC8GA1UEBRMoRjk4NzgxRTY3RDlFQTk2QUYyNTgwNkFDODZEMTAw
NkY4MjFGQUEzNjAeFw0yNTAxMzEwMjQ2MDNaFw0yNTAyMDIwMjQ2MDNaMBgxFjAU
BgNVBAMTDTY3OWMzOTZiLTM2YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDvk9DZDYpoDCTCa+SgtFwnumXwMOacMin6fUZKkKj/ymau3mfQSmfMR3di
/iKcul4RkC0TSXWUct0HH6KtInS9fv0RRs5eSh+7yuPxJwNgLEdjlBuYWj8MFYAn
MmLUfMZAyooAdOvRTct3MStBwWmnBtRSvT1hN2x1RsLn+VWG8l6x6MxYx9KjAj7H
aNZa3xXO265K4KtftC1eoNsB0yOmzeUTXbCl/Ff3wzvfscjMhNACixMOp9Xo6i+s
kXBXffJ7kNx7AtBhJd3nXd7Qf6bjCVEMJ0t2FWjANcDsyTNDJ6cfdrt6Dnx4j03L
Xn0WNss6KASEK9heR7KFkWtgtC93AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnjiG
q64lCcQVpRynKO5jJjnbptAwHwYDVR0jBBgwFoAU+YeB5n2eqWryWAashtEAb4If
qjYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkyRDk4L0FGRTk1Rjc0OThGMDExRUU4QTQ3Q0E1OUQyNUJFNDY1Ly1ZZUI1
bjJlcVdyeVdBYXNodEVBYjRJZnFqWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1ZZUI1bjJlcVdyeVdBYXNodEVBYjRJZnFqWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTJEOTgvQUZFOTVGNzQ5OEYwMTFFRThBNDdDQTU5RDI1
QkU0NjUvLVllQjVuMmVxV3J5V0Fhc2h0RUFiNElmcWpZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0uUc31GXubYE2/5PZpf/EiEaBMRm3
4cvyAl2JlLfupAcENcKEvpoPvj3YKiNmqk/UNtnEpONZ35aoY+V/acRzs/I6sL4S
u0CpENaqqxfftOBs8nz1xpD1KDOxfHWaSuwURXoqLablCzbTPQCeKeJnI5jJ141m
GEKwFQBpSEw3cwLeLKHTwcL4cVCe+UWJpbeG+jQmzNOKv2XMyFtGtnCfAv2VEqQ4
bacBfMTH2Xeb4H+xWzzSshQgiWj2y+4r1tyC+BJfN2IN1H4EWr8EH0kTm4YT9nRc
hN7ExyqFm/Mt6jX6mzmmh/l39Aj4/p5+GOvAsV7n6u9wUavUqYbX36eg
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:43:42 2025 by rpki-client