Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File:                     ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier:          DSt5VU134ln/q/eU86b+vlag8XUZQVLj2Wtu75qj+hQ=
Subject key identifier:   65:F5:82:DF:EF:02:64:0B:DE:C5:B7:06:8B:3B:12:64:7B:EA:73:2D
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       0308
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number:          0307
Signing time:             Fri 31 Jan 2025 02:19:24 +0000
Manifest this update:     Fri 31 Jan 2025 02:19:24 +0000
Manifest next update:     Sun 02 Feb 2025 02:19:24 +0000
Files and hashes:         1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: P+OZczYjYRe6p+1JM+WtFyGskx432aEL/KrFHmtwzys=)
                          2: B4A262BA97E111EDBE23EF7CF1222468.roa (hash: oz3acEqmAFW6Q64G1pO2mcOXINAlKbbqHe9mAvDeW6I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776 (0x308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: Jan 31 02:19:24 2025 GMT
            Not After : Feb  2 02:19:24 2025 GMT
        Subject: CN=679c332c-63fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:5e:ff:fc:e7:42:b0:8e:0d:c2:c0:f5:6f:
                    ca:fb:57:8a:33:fc:c5:f7:91:45:1c:ef:c6:68:e8:
                    aa:9e:5f:aa:80:bc:f7:e0:7f:51:fe:6d:57:44:6a:
                    a6:fb:97:9d:8b:2e:78:b0:b2:fe:56:76:be:46:bf:
                    65:30:1d:9d:fb:a8:84:1b:39:5d:9b:96:a2:78:0b:
                    24:45:81:82:31:9b:b4:fd:77:79:29:fc:93:9d:bc:
                    db:4f:20:1c:39:e7:22:a0:ad:69:64:aa:06:2c:c2:
                    af:39:e3:1a:31:bc:39:d9:20:1f:38:68:51:ee:8e:
                    f9:b0:2c:1f:f3:b9:df:4f:81:c3:ef:92:a0:19:a1:
                    c3:ce:61:cb:ce:a2:a7:01:b4:0c:1f:da:5e:47:ab:
                    32:7e:dd:bf:ee:39:54:59:4e:8c:9a:39:6e:65:0e:
                    3a:d2:d6:b8:0a:cc:41:d7:61:35:85:7e:ca:e5:62:
                    67:33:71:c0:0f:fa:20:0e:30:d9:19:65:d1:4d:5b:
                    15:c1:8d:91:7d:a3:62:ac:d7:f6:9e:4d:7f:35:0f:
                    44:7c:5d:dc:6c:9e:de:fd:bd:c4:74:57:93:a0:fe:
                    c5:e5:ea:14:a9:c7:e3:72:df:2e:c4:de:90:4b:eb:
                    20:33:82:c0:4f:d2:2b:9c:b9:ef:01:74:b9:a9:50:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F5:82:DF:EF:02:64:0B:DE:C5:B7:06:8B:3B:12:64:7B:EA:73:2D
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b3:4c:d6:6b:f4:a6:9c:6b:74:2b:de:3b:a9:77:3b:73:f2:
         40:df:f2:87:68:b7:4d:5e:d7:b6:d8:04:ce:09:de:e9:8e:83:
         6b:c6:c6:09:69:eb:ea:0f:a5:fe:0e:47:f3:27:e3:9e:a2:12:
         f0:19:9b:8c:45:b6:ae:a2:22:bd:2d:25:b2:46:55:61:32:56:
         e7:70:88:cc:ad:cb:d2:f0:b6:bd:4f:d8:e6:a0:17:39:b7:4d:
         c5:bd:c5:d2:66:a5:02:80:bd:52:72:47:b5:59:bf:2d:ba:17:
         5c:eb:dc:45:18:32:70:95:52:7d:37:db:9d:56:30:f3:0a:28:
         e3:31:5a:63:76:87:08:5c:46:bf:1c:79:7c:17:be:df:74:8f:
         80:45:de:2b:2d:29:78:97:aa:3a:6b:dc:31:ae:4a:79:53:59:
         b1:f0:a7:10:e3:1e:5f:a5:f6:7a:dc:a4:e5:f8:ae:c4:6e:d7:
         1d:78:e3:d5:2d:67:77:7d:82:ab:db:ca:16:05:42:15:24:7c:
         fa:2c:38:e5:b4:7d:b2:c8:d5:4d:11:5c:d3:ad:82:cf:9f:0f:
         41:f0:3e:2a:c9:b2:59:64:97:a1:97:33:28:4b:31:54:a1:ba:
         30:75:eb:09:83:10:7c:a0:9c:c0:b7:07:bb:49:4d:55:52:3c:
         d9:16:0c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----