Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
File:                     IirjAYKHNx04yuMYdAoctSsF2bo.mft (raw, json)
Hash identifier:          OYo0b6rHbDExYES/lVi5TYD5Mr16/g1OkJP/BcMWIDY=
Subject key identifier:   7D:0C:BA:82:AF:E2:F8:60:10:72:FD:16:A4:5C:5F:A4:94:13:53:53
Authority key identifier: 22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA
Certificate issuer:       /CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
Certificate serial:       04F9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
Manifest number:          04F9
Signing time:             Fri 31 Jan 2025 01:49:54 +0000
Manifest this update:     Fri 31 Jan 2025 01:49:53 +0000
Manifest next update:     Sun 02 Feb 2025 01:49:53 +0000
Files and hashes:         1: IirjAYKHNx04yuMYdAoctSsF2bo.crl (hash: t+mGjByw5tvVGI8uTTwHfil1Pu+eJHRoZkguqKXP/3U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273 (0x4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
        Validity
            Not Before: Jan 31 01:49:53 2025 GMT
            Not After : Feb  2 01:49:53 2025 GMT
        Subject: CN=679c2c42-02b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ca:02:af:a8:79:83:fa:8d:f7:75:c6:eb:5d:
                    af:f9:88:e6:92:54:99:a4:ac:95:a6:e1:df:0e:26:
                    6e:07:b4:7b:e7:b8:d5:ac:ff:19:15:e3:03:e0:0c:
                    eb:40:62:1b:3c:df:e7:f2:47:40:22:4e:35:50:c8:
                    c9:05:ac:ea:ba:57:94:7f:e0:ca:67:cc:56:75:5b:
                    51:50:f3:58:64:f4:fc:c6:ad:65:3d:8a:d7:7b:10:
                    ce:24:de:e8:fa:28:21:37:90:22:22:b5:5a:8d:17:
                    ed:69:a9:3c:13:93:94:40:6d:13:c8:2b:b3:ee:1c:
                    82:01:ec:24:b6:fd:7f:c9:3f:be:8c:93:48:11:b1:
                    d5:ac:5e:68:ca:ca:7a:ab:f6:32:07:67:e9:0c:4b:
                    95:dd:b9:46:16:7e:4f:8b:83:eb:07:a2:c5:f6:b1:
                    22:54:7e:f8:30:b9:98:40:68:66:b3:64:9d:cd:d0:
                    99:4b:25:72:c1:17:54:aa:8d:ec:8a:cd:30:d3:da:
                    6f:03:e6:b9:0c:16:f7:e6:42:cf:4b:06:94:1e:b5:
                    16:8e:c3:5c:57:0c:aa:21:62:83:7e:ed:31:3f:ee:
                    8f:6b:d0:f8:07:94:42:92:a1:3d:8e:0d:04:60:c7:
                    f5:25:ae:a3:3c:4a:56:66:e9:2d:33:f8:f8:92:e0:
                    f8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0C:BA:82:AF:E2:F8:60:10:72:FD:16:A4:5C:5F:A4:94:13:53:53
            X509v3 Authority Key Identifier:
                keyid:22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a0:a3:e4:a2:f8:d2:7f:0c:6f:6d:39:b2:25:d1:7a:4e:be:
         ce:dc:62:ab:e7:55:8d:71:28:83:f1:2a:57:d8:23:7e:b7:94:
         2e:0e:82:a7:c5:88:26:ce:db:ee:47:d2:85:2b:a8:32:55:82:
         e1:90:10:aa:94:e4:04:ed:4c:84:05:0d:7a:2b:16:aa:4d:9d:
         91:17:e0:04:1a:8d:33:6c:0c:38:db:87:a6:b7:d9:68:1d:51:
         b4:e3:7f:3f:0c:58:e1:6a:82:0f:b4:c4:b4:c7:f3:fe:6a:3e:
         4a:86:0c:9b:fb:63:49:94:ad:1b:3d:c9:81:4d:55:21:8b:64:
         83:4b:ab:4a:f3:7c:ae:5f:ff:27:72:7e:48:56:c1:24:14:59:
         de:e6:d6:d5:4a:f6:68:ed:2e:b6:95:dd:00:3e:ca:a9:8f:f1:
         49:fb:fc:a5:f2:d0:ab:77:f3:ed:78:13:35:49:b8:b3:2a:62:
         91:6b:36:d9:e7:b7:06:93:bd:49:59:59:85:1c:e0:98:27:2e:
         64:f6:cd:5b:db:ff:f1:c9:40:e6:98:93:ed:25:df:cf:7a:c7:
         93:31:9c:6e:b4:5d:4b:e2:ed:1f:f2:f7:b4:c4:74:a6:a7:11:
         dd:14:1a:1a:f2:b9:04:46:dc:40:65:7a:ad:c9:88:a1:6f:8d:
         1f:c3:05:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----