Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File:                     9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier:          LCvsjxNsXT10XMePPngXs8ygiqVWY6MHbwdEfwr6iEY=
Subject key identifier:   D7:20:2E:9A:5C:20:AA:CF:0C:87:BA:12:28:79:92:CB:A6:C8:95:E5
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer:       /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial:       D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number:          D3
Signing time:             Fri 31 Jan 2025 03:01:44 +0000
Manifest this update:     Fri 31 Jan 2025 03:01:43 +0000
Manifest next update:     Sun 02 Feb 2025 03:01:43 +0000
Files and hashes:         1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: 9gcTQPTmnI3MuBLbzyjAEW0GB/kv4Wp/VjYlkiBRfzE=)
                          2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
        Validity
            Not Before: Jan 31 03:01:43 2025 GMT
            Not After : Feb  2 03:01:43 2025 GMT
        Subject: CN=679c3d18-d21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:db:27:b3:bd:80:e7:da:fd:d8:9e:99:52:
                    36:58:28:f8:03:6e:f1:3a:4f:a3:4e:bd:f1:7b:9e:
                    22:62:3e:48:ac:2d:ff:59:a0:18:58:72:64:a0:57:
                    7c:df:e5:f9:b0:96:07:40:82:66:b4:6c:7e:e9:c6:
                    29:8b:88:a2:1e:4a:e2:e0:a0:0f:84:01:77:e0:3c:
                    2f:e7:05:fa:4c:14:86:29:cc:af:58:4c:51:2b:53:
                    a5:13:36:b8:5c:52:68:be:04:c9:85:30:d4:1b:f4:
                    d8:3b:2e:ba:18:f1:cc:ea:ff:d3:4f:19:16:13:be:
                    62:d3:98:e2:74:a4:89:18:60:f0:e3:bc:b8:4a:a0:
                    0c:ea:92:28:bf:4d:ee:c8:32:5c:0e:d8:e5:0a:36:
                    3e:b5:35:d5:29:9f:77:2a:c3:e4:6a:99:d6:e1:f8:
                    c0:14:04:b4:69:5b:b4:65:dc:d0:25:f3:a4:4d:7f:
                    1d:01:ab:a3:32:53:cf:4f:f1:b8:1d:34:cf:c6:4b:
                    66:da:d2:b6:52:d6:cb:51:03:55:ae:2b:93:6a:bd:
                    5e:bf:b0:19:78:42:c0:23:bb:8c:ef:7f:de:20:19:
                    db:9c:bf:ff:36:96:39:25:8a:89:96:73:09:34:45:
                    a4:9d:7a:61:fa:ec:84:0c:ca:d6:1c:b1:b1:4d:2d:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:20:2E:9A:5C:20:AA:CF:0C:87:BA:12:28:79:92:CB:A6:C8:95:E5
            X509v3 Authority Key Identifier:
                keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:1f:37:58:8e:fd:58:b6:37:ca:1b:cc:f7:49:3f:8b:c8:c6:
         bb:a9:42:79:01:f5:19:94:f7:70:71:13:20:10:ca:e2:ff:2a:
         59:c6:18:db:57:f4:34:37:8a:6d:c0:bd:9b:97:23:25:49:de:
         d2:1f:06:f2:a6:d1:f9:75:28:ca:8a:ec:36:c4:63:63:ab:40:
         ae:41:25:42:b5:02:f7:4d:30:33:15:a0:c9:cf:98:d8:70:34:
         5e:52:b2:bc:98:d5:78:a9:0e:d2:ed:46:eb:2f:89:a0:f7:82:
         a3:ac:72:1a:16:20:41:bf:ae:4b:c5:01:70:36:1c:17:57:d8:
         0e:85:4b:bf:fc:90:da:49:b2:35:a0:aa:ce:b9:52:2e:ac:cc:
         ab:85:24:15:28:c6:3c:88:62:6a:e3:81:43:13:d8:e3:0a:aa:
         ef:76:ab:e2:1b:7e:5b:73:cb:f0:d7:64:91:0f:2f:e6:94:c7:
         f2:c6:62:12:55:ec:05:c8:e0:c5:c9:30:5a:b8:b8:4b:d7:8c:
         c2:28:a1:f4:f2:b5:0a:10:99:e4:d0:e6:9c:e6:b0:c3:f4:b7:
         6c:b8:9a:4d:74:59:a4:76:ca:fd:39:20:29:13:5d:d2:08:94:
         d6:6c:11:fe:79:de:d5:65:59:38:18:f2:aa:40:59:55:1a:5e:
         34:c9:86:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----