Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
File:                     YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft (raw, json)
Hash identifier:          no0ZcSW3wREbwZfQsyb5kF4lg1MQesrTpPzo9aJcCsw=
Subject key identifier:   47:86:C5:84:A0:D2:6D:7C:95:E1:B6:4E:0D:62:AC:19:35:60:AF:FA
Authority key identifier: 61:89:BF:93:8C:94:C5:34:D7:84:3A:7A:03:4C:5B:6A:82:37:D5:96
Certificate issuer:       /CN=F36A42DFAR/serialNumber=6189BF938C94C534D7843A7A034C5B6A8237D596
Certificate serial:       0217
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
Manifest number:          0215
Signing time:             Fri 31 Jan 2025 02:38:34 +0000
Manifest this update:     Fri 31 Jan 2025 02:38:34 +0000
Manifest next update:     Sun 02 Feb 2025 02:38:34 +0000
Files and hashes:         1: YYm_k4yUxTTXhDp6A0xbaoI31ZY.crl (hash: 3H4Ty6HH2yEdZgoWLV/MhwqsBLht6yotXAjqucl9t/4=)
                          2: 3D7EECA2A8A711EFA1D51794762E951A.roa (hash: W7jAbtCXoRcwI8Z2NvEM0UC/9LNhTC0NKo9Io5pOlnA=)
                          3: 676C625A4D6411EEBB83C7834AD9E6FC.roa (hash: iiE25Dzd3pzLzhX8ubXQvlCirPYfptGG+RIQQE+HLD4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A42DFAR/serialNumber=6189BF938C94C534D7843A7A034C5B6A8237D596
        Validity
            Not Before: Jan 31 02:38:34 2025 GMT
            Not After : Feb  2 02:38:34 2025 GMT
        Subject: CN=679c37aa-8a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:fe:8f:1e:3b:39:a5:14:8b:0a:6e:3c:83:
                    fe:9f:89:68:b4:89:2c:c2:28:c4:4f:6c:c8:c2:c4:
                    c4:3d:dc:12:de:a3:0e:15:1b:c8:8a:3f:06:23:e7:
                    fc:46:55:cf:c7:2b:6b:d4:79:97:d2:31:a7:25:97:
                    52:fb:7f:bd:59:c3:77:c1:92:ce:f2:b5:7c:83:e4:
                    0c:3f:cf:50:4f:90:7c:70:63:56:92:79:f0:27:f4:
                    66:80:23:90:8d:52:0c:0d:4f:95:d2:ac:4a:97:24:
                    65:d8:54:0a:9c:43:4b:b7:1a:61:74:4f:73:62:e7:
                    2a:59:dc:d2:c1:78:a9:05:f4:fc:31:52:2b:7f:ef:
                    1d:17:f6:c8:61:58:65:43:bd:91:bf:e3:2d:bf:77:
                    2d:3d:a6:bd:1f:db:94:56:be:78:f9:84:ba:2c:63:
                    81:a0:aa:43:47:17:3e:b8:e8:95:33:f2:28:f0:e3:
                    1b:09:93:d5:db:32:ee:8d:f0:13:fc:32:60:d5:da:
                    5b:57:7b:ce:63:a3:76:44:d4:25:e0:46:e6:d6:49:
                    60:89:b5:cf:d5:f7:cd:6f:2f:09:34:83:0f:0e:60:
                    e4:96:45:3c:46:e6:45:0c:c5:0e:d6:5b:db:1c:fb:
                    78:d9:3a:91:e8:40:9d:ef:d2:59:b5:2f:62:7e:fd:
                    31:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:86:C5:84:A0:D2:6D:7C:95:E1:B6:4E:0D:62:AC:19:35:60:AF:FA
            X509v3 Authority Key Identifier:
                keyid:61:89:BF:93:8C:94:C5:34:D7:84:3A:7A:03:4C:5B:6A:82:37:D5:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:42:37:94:bd:26:32:1f:d9:39:51:0d:03:6c:f2:94:bd:2e:
         3f:45:fa:be:8c:d4:60:c1:4c:d0:b0:03:fb:d3:9e:31:2e:16:
         e2:50:4f:c0:ce:77:a7:bb:07:2b:86:f4:52:d6:da:72:1c:03:
         2e:55:c2:2d:56:56:14:fc:92:39:93:ae:8a:7b:44:a9:44:c3:
         bb:56:0d:4c:21:d4:7d:8d:80:84:fa:95:f0:f8:b7:5c:66:fc:
         f4:24:0b:20:6e:a3:ca:77:2b:31:10:69:12:72:f9:e3:2f:52:
         92:6d:1b:fc:ed:d6:44:ef:08:d3:97:5c:40:cb:0c:f5:b5:1c:
         08:df:7b:46:4d:8c:ac:52:e5:d9:9d:75:b9:19:9a:df:b8:82:
         aa:b2:5b:72:22:ae:06:c7:41:c0:96:60:9e:fe:7b:5a:3f:c2:
         6f:04:fd:e5:cd:8b:81:da:75:74:58:64:ca:b8:b4:b3:a7:66:
         cc:0a:64:02:9e:5c:79:ef:a2:e7:f6:ed:93:88:44:44:68:d5:
         59:5c:f6:02:77:2e:bb:81:81:9e:64:9c:3d:e9:1d:04:f5:da:
         d0:d4:14:9d:a3:f8:83:ea:e2:eb:bf:cb:6b:8e:44:d4:c3:16:
         25:28:c8:5b:b2:ec:6d:e0:d7:2f:d3:97:8b:9d:63:de:43:0c:
         61:37:95:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----