Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
File:                     DiXC-NXlAp5pEJ686yVczjVJFv4.mft (raw, json)
Hash identifier:          SlkHzWHXynzwhPimQ4ojRH5MY/zncysS8FBfXcFztlY=
Subject key identifier:   A7:B0:7D:91:88:A6:99:D4:B4:6F:FC:F4:D0:81:9A:E1:5B:38:1C:1D
Authority key identifier: 0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
Certificate issuer:       /CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Certificate serial:       01BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
Manifest number:          01B9
Signing time:             Fri 31 Jan 2025 02:45:34 +0000
Manifest this update:     Fri 31 Jan 2025 02:45:34 +0000
Manifest next update:     Sun 02 Feb 2025 02:45:34 +0000
Files and hashes:         1: DiXC-NXlAp5pEJ686yVczjVJFv4.crl (hash: EnkZmfMwp27dsmZhQf6IVrTcCQMRqaMCMro8TLN9yeM=)
                          2: 8C7C1810938711EE9A4CB809D25BE465.roa (hash: WJPtWXyF4HbsBRlcRAZ4odD1u13hg/x2iKAvSH5H04k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
        Validity
            Not Before: Jan 31 02:45:34 2025 GMT
            Not After : Feb  2 02:45:34 2025 GMT
        Subject: CN=679c394e-0008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8e:f4:23:24:bb:22:2e:24:b7:af:90:39:41:
                    84:a5:16:80:44:34:c4:0f:70:b1:cc:2f:c1:9e:8e:
                    83:96:1d:2a:27:f6:b5:2b:73:a1:75:bc:57:47:ce:
                    ac:f2:eb:8b:21:8f:68:a1:93:ec:53:e1:3c:3c:c6:
                    e4:d6:aa:61:7b:3b:a6:6f:11:ff:8e:98:49:be:4b:
                    2d:7b:87:79:1f:39:70:bc:ea:4f:52:f7:a3:c7:ff:
                    67:3d:01:3e:ea:0b:9c:28:17:76:60:dd:0f:82:57:
                    a1:82:ff:3b:aa:f0:d7:54:44:4c:66:fc:66:ec:80:
                    b2:7c:09:15:29:1d:33:71:3b:7b:82:f2:05:f2:00:
                    0a:8c:96:13:4e:3a:33:62:44:00:ca:e1:4a:64:8f:
                    39:b3:60:4c:f7:9e:e5:40:c9:d6:63:96:c3:01:a4:
                    0f:a2:bc:1e:6e:80:1c:5a:4d:b2:4d:2c:39:83:c2:
                    c3:c1:14:4e:59:0d:98:f3:49:76:cc:e3:a1:8a:12:
                    33:69:78:6b:2d:2f:e9:9b:12:bc:b4:d9:f1:89:84:
                    7e:23:bc:73:46:6c:0a:e7:8f:84:0b:24:50:71:04:
                    7d:70:77:22:6e:55:4f:8b:9e:0e:6c:84:6c:1e:da:
                    d9:ad:2a:2c:57:e7:21:1f:66:9f:4e:75:cf:58:37:
                    95:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B0:7D:91:88:A6:99:D4:B4:6F:FC:F4:D0:81:9A:E1:5B:38:1C:1D
            X509v3 Authority Key Identifier:
                keyid:0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c1:d0:3d:44:7c:b3:fa:a7:4a:92:75:58:cd:67:6b:15:f1:
         1e:0f:36:05:2c:b6:e9:4e:76:c2:42:17:cb:92:72:22:44:0d:
         2c:98:59:c4:e4:b0:01:02:34:8c:17:d2:51:96:23:96:9f:17:
         c2:b0:58:79:3a:df:67:1e:6d:ec:b4:fe:a7:b5:25:41:9c:f1:
         00:50:81:02:e5:08:34:18:25:a3:10:e2:9b:20:2b:47:de:b2:
         50:41:90:e2:f6:14:51:7b:e8:eb:54:72:36:ed:06:5f:ce:91:
         f3:3f:d5:e8:b3:3c:5a:cf:da:6e:36:7f:a8:8b:e2:d4:cd:19:
         4d:49:de:46:86:ae:92:e9:67:55:e2:c7:6c:d9:1a:d2:b0:80:
         28:90:df:9d:3c:62:c3:55:5d:7a:66:ab:20:c0:77:03:51:c1:
         d4:0d:2c:b6:65:2c:1f:80:c8:ed:6b:55:ca:28:4e:a6:ee:30:
         47:82:bc:62:97:16:f8:53:bf:a5:4b:fa:49:0f:e7:60:e7:28:
         03:2f:c0:ef:b0:39:8b:86:fb:d8:9e:90:5b:87:4b:45:0a:8c:
         93:9f:d6:08:9e:c7:e6:23:ad:22:5f:6f:d2:6c:ce:d2:ee:98:
         e7:7b:41:90:aa:d7:94:8b:60:12:ac:71:ce:7a:4c:dd:35:2e:
         ce:9a:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----