Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
File:                     hHYz30sJnBpSITpyTYxq0rIkb1U.mft (raw, json)
Hash identifier:          C9JD1ogqdTbKH/RaGkkhIs0Ty1Qn9hQS+fI2j8nn3EA=
Subject key identifier:   F6:D4:AC:0E:DF:1F:59:88:79:C1:FE:ED:25:7E:9D:8F:1D:96:5A:FA
Authority key identifier: 84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55
Certificate issuer:       /CN=F369A086AF/serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
Certificate serial:       02B8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
Manifest number:          02B7
Signing time:             Fri 31 Jan 2025 02:25:48 +0000
Manifest this update:     Fri 31 Jan 2025 02:25:48 +0000
Manifest next update:     Sun 02 Feb 2025 02:25:48 +0000
Files and hashes:         1: hHYz30sJnBpSITpyTYxq0rIkb1U.crl (hash: awFMfFhwh9TAWp+B0HaMtQbxR0eO3MKuCwMas4Hka8g=)
                          2: C929139AD2D411EDA667F5E7F1222468.roa (hash: Y9jS1YbuXtHVWCKhSi4H7ePiYPS8XtVmXoggJSJ3nwM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A086AF/serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
        Validity
            Not Before: Jan 31 02:25:48 2025 GMT
            Not After : Feb  2 02:25:48 2025 GMT
        Subject: CN=679c34ac-a98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:d0:50:98:01:54:28:3d:95:67:a5:84:ca:
                    31:40:18:2c:3f:a5:3a:f3:65:5d:7a:50:b9:7f:32:
                    3b:15:8f:6c:3e:37:ac:55:42:b7:f9:55:f7:f5:bc:
                    e1:47:6d:5d:de:c2:49:65:2d:b9:7c:37:1d:bc:f5:
                    b0:68:a3:28:f6:2d:0e:45:6c:ad:ce:d4:35:58:86:
                    7d:5d:48:f1:22:da:fd:40:e3:08:3a:48:dd:5a:e0:
                    1e:26:4a:b2:6a:db:12:e6:d6:2a:cb:cb:43:ac:04:
                    a9:66:7d:58:fe:16:f2:c3:5b:ff:c7:0a:1d:36:05:
                    5d:02:f9:ae:88:d8:74:99:0d:91:73:ae:cd:b3:82:
                    1e:7e:84:77:58:5e:d6:63:60:6b:6d:00:40:6f:1a:
                    a2:c9:4f:01:94:f1:15:1e:4b:7d:71:ee:f7:99:ef:
                    21:a9:35:1c:85:cb:8e:eb:3e:ce:1b:a8:f1:28:39:
                    8d:04:e9:3c:ff:6e:f1:0b:66:a4:34:52:ed:ad:e8:
                    d8:85:41:f9:d9:b4:6a:70:d5:1d:c4:30:72:96:3d:
                    4c:ca:b9:67:91:07:02:e5:57:bb:dd:7f:7f:1e:a3:
                    d3:da:ca:92:54:1e:9f:43:be:2a:b2:e8:96:2e:27:
                    e9:50:99:4c:26:db:20:75:d7:18:74:2b:86:76:db:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D4:AC:0E:DF:1F:59:88:79:C1:FE:ED:25:7E:9D:8F:1D:96:5A:FA
            X509v3 Authority Key Identifier:
                keyid:84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a2:cd:47:33:37:d8:f8:5b:b4:08:bc:c7:63:0d:3e:51:69:
         bb:5b:6a:1a:3f:bc:4f:8c:44:6b:8e:52:42:f7:6f:68:e6:8d:
         74:51:46:ae:70:08:05:e6:cf:0b:d2:1c:ec:89:d9:5e:25:e0:
         cf:2f:b8:40:1c:97:94:99:f7:55:f8:08:21:4c:d6:28:51:7e:
         10:e0:46:7f:f6:a1:26:c9:6a:f3:41:84:0f:e5:60:51:8f:9b:
         08:d7:95:96:43:52:6a:ce:d3:78:64:ae:f2:42:02:a6:2b:f8:
         d6:31:a3:03:23:5e:ba:b3:79:4e:bd:eb:a7:41:dc:ba:80:34:
         28:8e:fb:eb:86:1a:07:fb:ff:23:39:de:1d:9e:82:fc:78:db:
         d0:94:31:be:e0:a2:08:03:af:e1:ce:c1:81:3f:f6:6c:01:25:
         7c:78:8e:04:87:a0:4a:4d:ff:08:47:39:2f:d0:c3:d8:33:ec:
         94:9c:1c:39:c5:f4:74:bf:6e:e6:68:63:0e:51:b0:32:31:f4:
         84:6c:99:f7:20:b7:79:14:ae:8d:b3:40:de:95:cb:65:46:0b:
         a3:0c:70:d7:9b:ea:1d:a5:e3:de:02:87:cc:93:6e:06:f6:32:
         20:ff:23:ea:a4:78:84:9b:2c:b0:50:08:9e:30:8c:84:03:b8:
         17:2d:65:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----