Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
File:                     TsI9Q07XmbNybP2OQaiJOGnVA6M.mft (raw, json)
Hash identifier:          ZEPQbHuS4/CCcCVfynnoSRxqcXiAYx4eBgowPVjgMD0=
Subject key identifier:   22:B1:5E:AF:28:0C:AF:CE:C0:FB:20:AF:EE:5F:58:57:4C:FA:3C:99
Authority key identifier: 4E:C2:3D:43:4E:D7:99:B3:72:6C:FD:8E:41:A8:89:38:69:D5:03:A3
Certificate issuer:       /CN=F36B87F4AF/serialNumber=4EC23D434ED799B3726CFD8E41A8893869D503A3
Certificate serial:       D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TsI9Q07XmbNybP2OQaiJOGnVA6M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
Manifest number:          D0
Signing time:             Fri 31 Jan 2025 03:02:06 +0000
Manifest this update:     Fri 31 Jan 2025 03:02:06 +0000
Manifest next update:     Sun 02 Feb 2025 03:02:06 +0000
Files and hashes:         1: TsI9Q07XmbNybP2OQaiJOGnVA6M.crl (hash: FxD/3LEroiVQg2UkZaeq5PRTgl2y2wqHwsb/McvnxFU=)
                          2: 1B1E241E451711EFAD0B499A762E951A.roa (hash: Ep7yM470eEGXeNpv8ARuzKPKLgsxxmudxnGocbswnGw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B87F4AF/serialNumber=4EC23D434ED799B3726CFD8E41A8893869D503A3
        Validity
            Not Before: Jan 31 03:02:06 2025 GMT
            Not After : Feb  2 03:02:06 2025 GMT
        Subject: CN=679c3d2e-b15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a6:c3:a7:24:9d:99:4b:df:12:f5:15:9f:ea:
                    52:c5:fe:0e:e4:f5:dd:d9:2f:74:bb:03:c4:01:d1:
                    09:13:00:1a:3d:e3:ed:63:ee:b0:f6:91:93:5a:5e:
                    53:22:c3:8f:af:ea:13:8d:39:39:f5:7f:13:c7:19:
                    ca:38:cd:0d:3e:bc:6a:5c:e5:90:9a:b3:e4:f4:35:
                    8e:90:d7:22:2f:d2:a7:21:f5:3e:52:17:4b:7f:e9:
                    86:07:4b:fc:66:98:20:4f:fe:24:45:d4:f3:0d:62:
                    fe:b8:10:13:c9:41:3b:da:87:59:23:1d:08:13:33:
                    bc:fc:5b:fc:9a:6c:de:21:44:14:ef:68:df:9b:39:
                    ca:ba:1c:d2:54:4a:3a:d3:5d:b9:fe:b6:af:de:52:
                    74:ef:95:bf:38:a3:3f:b2:32:88:a9:6b:7a:e2:4d:
                    c0:d5:fb:b9:70:9f:db:0c:71:2d:f6:31:42:11:17:
                    22:a2:77:86:a2:93:16:ce:6b:c4:20:87:66:01:2e:
                    78:fb:56:b1:ac:28:b0:a3:c7:a4:dd:65:8f:ed:63:
                    48:4d:78:09:a0:18:2d:c0:1b:0e:53:a4:69:31:f3:
                    8e:8e:1e:25:17:cb:4b:10:94:f1:92:71:a0:99:9d:
                    95:5e:7a:8f:d8:00:f9:b4:27:47:1b:38:74:6f:61:
                    64:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B1:5E:AF:28:0C:AF:CE:C0:FB:20:AF:EE:5F:58:57:4C:FA:3C:99
            X509v3 Authority Key Identifier:
                keyid:4E:C2:3D:43:4E:D7:99:B3:72:6C:FD:8E:41:A8:89:38:69:D5:03:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TsI9Q07XmbNybP2OQaiJOGnVA6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B87F4/B0DCA54A451511EFABD9FF90762E951A/TsI9Q07XmbNybP2OQaiJOGnVA6M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:32:b1:c3:bb:ff:d3:51:b1:23:4d:6c:c3:62:81:1b:8e:39:
         0d:f3:bd:2a:98:57:6d:02:79:c9:f4:90:de:bb:5e:a7:af:bd:
         86:87:17:3f:5e:5b:3d:b1:ad:47:20:93:c7:cf:9e:5d:ce:90:
         0b:c2:09:80:ff:b2:4b:aa:56:1d:bd:4b:ec:ba:d0:da:6c:f7:
         b9:aa:1a:ad:5e:8e:74:68:a0:46:8a:d5:b4:9c:45:6e:1e:bd:
         04:75:e7:ab:49:f6:d0:ca:13:c2:5f:00:43:e9:1b:18:3f:d5:
         f3:e9:48:61:22:9e:d7:26:13:18:ea:7c:a6:eb:d5:86:fc:9c:
         71:d1:97:55:3e:91:04:21:c4:57:be:13:8a:bf:11:cb:a2:49:
         67:c8:fe:26:d5:91:2f:f1:af:e0:47:b2:09:c6:e1:d5:de:24:
         6a:2c:aa:da:7b:1f:de:fd:a2:78:ca:62:3b:18:b4:3f:26:9f:
         cb:e3:2f:36:f5:0f:5b:a5:77:bd:e0:cf:8d:2e:25:4d:aa:fe:
         2d:0b:a7:05:fb:0e:5a:4f:67:08:ee:6c:06:64:a4:a0:a4:26:
         f0:62:9a:3b:46:63:65:2e:20:e3:e2:ff:07:8b:39:fb:0a:4d:
         71:88:89:6a:d3:e4:89:ad:c1:e0:e5:51:4c:fc:a3:0c:03:57:
         92:25:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----