Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
File:                     mWvkN8G_DqgPwtdP55XVl9183_Y.mft (raw, json)
Hash identifier:          HuxWQhRj40oTKDG1Etjl5sOmum686Xa67VylldSzFko=
Subject key identifier:   86:C1:D1:C9:F2:3F:94:C0:46:9D:83:D7:8F:6B:01:4C:D0:D0:AE:9D
Authority key identifier: 99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6
Certificate issuer:       /CN=F36B9EC5AF/serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
Certificate serial:       083E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
Manifest number:          083D
Signing time:             Fri 31 Jan 2025 01:16:48 +0000
Manifest this update:     Fri 31 Jan 2025 01:16:48 +0000
Manifest next update:     Sun 02 Feb 2025 01:16:48 +0000
Files and hashes:         1: mWvkN8G_DqgPwtdP55XVl9183_Y.crl (hash: jvX1XPNMxKvYAdnIWwnJBTVxVG0i29kgayUhzkQ0i1s=)
                          2: 457616CC92AC11E9AA1A230CF8AEA228.roa (hash: a111sZs2PjYe+Z7xTRVrDgikHwjH0gy6/kJWglkiGK8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2110 (0x83e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9EC5AF/serialNumber=996BE437C1BF0EA80FC2D74FE795D597DD7CDFF6
        Validity
            Not Before: Jan 31 01:16:48 2025 GMT
            Not After : Feb  2 01:16:48 2025 GMT
        Subject: CN=679c2480-5487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:63:75:c6:82:0c:ee:51:81:08:b6:f9:7b:69:
                    7b:95:f5:37:93:ea:88:5f:15:6a:a7:5b:7a:82:bc:
                    46:a5:4e:f4:d1:8f:ab:f8:fa:a6:fe:65:ec:f4:2a:
                    97:3a:fa:81:8b:4b:66:b8:d0:be:1d:43:de:c2:44:
                    00:8b:9b:52:91:ef:06:db:34:17:a7:33:9d:67:b2:
                    72:67:cd:86:5d:2a:9a:19:97:cd:cc:e2:b6:e5:f7:
                    99:d7:58:ef:4d:4e:c4:f9:9e:27:e6:06:43:1a:91:
                    c2:72:9e:86:a8:dc:5e:e0:c8:aa:17:ba:7f:60:02:
                    8d:10:bc:dc:b2:e0:54:24:99:56:00:ec:1a:3f:74:
                    4b:ee:25:d9:3d:5f:09:e2:e6:05:fc:4d:62:f4:2f:
                    9c:f9:82:ff:ae:56:bf:0f:fd:b6:75:56:f5:02:27:
                    04:4d:b2:fc:7c:85:6f:5c:05:2a:5e:04:3b:96:27:
                    dd:51:5e:ab:45:cb:84:70:a7:5f:0c:b4:6d:26:62:
                    7b:db:e9:26:4b:b6:9e:6e:32:29:32:b5:84:e5:53:
                    ac:cb:74:f6:93:f4:b5:60:43:4a:20:42:f5:d3:48:
                    8b:c3:e5:1f:37:f4:b6:6e:76:b0:ee:74:1f:5c:49:
                    77:a6:cb:b5:3d:73:bb:86:ce:7d:6a:a0:4b:40:cf:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C1:D1:C9:F2:3F:94:C0:46:9D:83:D7:8F:6B:01:4C:D0:D0:AE:9D
            X509v3 Authority Key Identifier:
                keyid:99:6B:E4:37:C1:BF:0E:A8:0F:C2:D7:4F:E7:95:D5:97:DD:7C:DF:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mWvkN8G_DqgPwtdP55XVl9183_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9EC5/D0311CE092AB11E9B028C80BF8AEA228/mWvkN8G_DqgPwtdP55XVl9183_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:05:0c:9b:11:ae:83:25:59:a3:d2:75:7b:ec:07:a6:f4:ea:
         6f:9a:e9:af:84:bf:f9:bd:bd:96:67:a8:cb:ef:34:15:93:ba:
         63:6c:51:56:30:c0:5a:23:db:9d:2c:49:bf:37:2b:58:67:f2:
         36:d1:04:c8:31:fa:42:cd:c8:95:48:8d:ff:6b:e0:ae:d4:4e:
         27:9e:64:a3:c0:09:b1:fd:e8:b0:db:2e:56:f1:cd:eb:55:91:
         72:5d:ab:32:29:26:fa:80:a5:27:4f:17:5e:42:e3:a9:14:ac:
         e3:60:09:2b:50:a6:a1:8e:e1:65:04:37:ce:9c:ba:9c:84:bc:
         99:bf:d3:64:1a:6b:6b:35:07:1e:cc:53:be:d3:d8:16:a0:2e:
         db:77:52:39:8e:b6:27:68:a5:eb:d3:ca:69:dc:90:6a:c8:1c:
         57:e8:15:cf:64:87:12:b0:78:ed:61:52:2e:66:f2:9b:89:7f:
         77:14:8b:e5:70:04:a0:9b:e2:40:40:90:9a:aa:bd:e5:c9:08:
         9d:91:71:fa:ff:d8:8f:72:8a:43:1f:a2:3e:9e:d8:6b:1f:23:
         91:3e:58:e6:4d:c6:53:3a:b9:32:ac:64:5f:93:2a:e7:d6:25:
         9c:56:e5:50:8f:97:47:9a:b1:bf:6e:6d:6c:75:3a:42:28:65:
         1b:18:87:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----