Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
File:                     165kWvnltuIirj4ZQpl0u9hlaUE.mft (raw, json)
Hash identifier:          AlZskfMNIijhmapuXN4CNrA76bmx2XUOBfJM+9roRdw=
Subject key identifier:   B9:EA:98:4E:D8:80:86:1F:C7:CD:24:E9:BF:36:9E:02:4E:6C:56:37
Authority key identifier: D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41
Certificate issuer:       /CN=F36A9688AF/serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
Certificate serial:       0515
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
Manifest number:          0514
Signing time:             Fri 31 Jan 2025 01:49:17 +0000
Manifest this update:     Fri 31 Jan 2025 01:49:17 +0000
Manifest next update:     Sun 02 Feb 2025 01:49:16 +0000
Files and hashes:         1: 165kWvnltuIirj4ZQpl0u9hlaUE.crl (hash: dGt2DyI4XOHHZdXRwEgAZEzQnF7QlDxHdWXPsmjfRwk=)
                          2: 2A3F25CA461211EDA2ED7DD4F1222468.roa (hash: lvPd6VTKcLMhU/3Nl8dyjCE5frGwG4hqXNXwJymfNBg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301 (0x515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9688AF/serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
        Validity
            Not Before: Jan 31 01:49:17 2025 GMT
            Not After : Feb  2 01:49:16 2025 GMT
        Subject: CN=679c2c1d-b09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:78:22:39:a6:57:f5:39:95:80:fe:e0:40:
                    a1:d7:31:c9:8e:dd:f1:dd:b3:bd:4e:69:6c:f2:ca:
                    ce:b4:48:28:2b:17:15:9d:62:9c:0a:e6:c4:a5:20:
                    c9:17:ed:ae:ef:dc:7e:0c:8c:6f:4e:59:74:63:93:
                    52:e6:b4:85:4a:dc:89:5a:2e:39:35:b2:a9:10:d7:
                    4a:06:ef:3e:a1:ef:23:4d:5d:3f:2e:b5:71:36:45:
                    65:1e:b4:df:53:0c:23:b9:48:b3:16:77:09:65:30:
                    a8:41:09:fd:4a:ef:f5:8a:5e:cd:9c:11:a7:0d:46:
                    4b:41:91:92:89:c8:7f:fc:03:2d:80:73:1f:8b:78:
                    1f:96:cf:7f:3f:0d:e5:3f:c4:16:9a:f3:89:9e:19:
                    ea:0e:7c:34:52:3d:d8:4d:1f:4b:df:f4:e0:3e:38:
                    d7:4b:be:99:78:99:d6:41:20:23:9f:62:1f:71:3f:
                    02:bd:d7:87:76:a2:64:83:0e:a8:15:dc:db:60:04:
                    6e:4f:e8:a6:ea:45:74:8c:57:bb:f4:7c:10:a8:a4:
                    2e:74:8d:6f:e8:76:07:a4:90:8f:9d:2e:bd:0d:d0:
                    0e:c0:e2:70:9f:ac:99:85:54:fe:c9:9f:f2:cc:ce:
                    06:b4:8b:33:50:aa:9b:ee:a8:01:8f:cb:54:66:ca:
                    f0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EA:98:4E:D8:80:86:1F:C7:CD:24:E9:BF:36:9E:02:4E:6C:56:37
            X509v3 Authority Key Identifier:
                keyid:D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:30:eb:f8:93:e8:e8:e4:c3:46:74:28:96:5c:49:1b:8a:
         30:d2:b0:75:26:0d:af:9c:7f:84:f8:f6:26:f6:b2:67:0a:37:
         fd:fc:00:40:ec:db:4b:87:28:a5:83:60:83:11:7e:11:68:1b:
         d6:80:7f:b4:63:41:49:d7:16:5a:9f:90:93:f9:9a:39:06:a7:
         47:85:c0:7c:3e:eb:a4:8f:a8:f4:90:89:1a:27:8f:c0:9f:0a:
         99:f6:cc:bb:d4:41:d1:01:da:6d:ac:29:fa:eb:ce:d0:39:5a:
         2e:2a:68:10:38:de:e6:fb:ed:da:76:dc:18:12:81:ec:74:8f:
         08:74:bc:bb:1e:c9:4e:f8:ec:d2:1c:cc:e3:e0:02:bf:05:44:
         e1:6f:b4:a6:5c:27:f0:41:c1:44:12:cc:79:c6:a4:ad:f9:72:
         3e:d6:28:29:96:a9:9b:00:5b:fe:6a:94:87:0d:80:5a:79:ea:
         62:2e:5a:c5:77:a5:5a:db:29:a1:a5:c8:4b:fb:54:f9:17:a4:
         7d:dc:65:7d:5c:42:e0:9a:97:8c:61:e8:28:5a:8c:89:8c:56:
         60:53:41:80:3b:b9:44:3b:2c:b3:f7:bc:aa:6a:e5:b0:92:c5:
         77:cd:da:0f:f1:4b:49:35:5c:cd:6c:1a:36:da:a2:6c:80:81:
         62:51:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----