Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
File:                     PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft (raw, json)
Hash identifier:          qcmMo0hcYdN2TAKpFlP71kPACiqqmO6AFzWpmLoV2+o=
Subject key identifier:   F2:01:91:85:6F:E1:6F:DD:4F:55:C8:6B:5A:45:BA:C4:F3:21:5F:4F
Authority key identifier: 3D:2A:F3:53:44:65:E3:FA:EC:A9:5B:BD:23:1F:72:3C:8A:06:F5:D1
Certificate issuer:       /CN=F36E8936AF/serialNumber=3D2AF3534465E3FAECA95BBD231F723C8A06F5D1
Certificate serial:       0312
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
Manifest number:          0311
Signing time:             Fri 31 Jan 2025 02:18:12 +0000
Manifest this update:     Fri 31 Jan 2025 02:18:11 +0000
Manifest next update:     Sun 02 Feb 2025 02:18:11 +0000
Files and hashes:         1: PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl (hash: W6+vXbWvOV2Yu2VJOLW4BAhQj90MCrNe92P7Z3Bz0XY=)
                          2: DFF1E77490ED11ED942A0B7DF1222468.roa (hash: 9WA9paanDgVyhx1/5/CO95xKP5kF7OW8npO/gngIuxQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8936AF/serialNumber=3D2AF3534465E3FAECA95BBD231F723C8A06F5D1
        Validity
            Not Before: Jan 31 02:18:11 2025 GMT
            Not After : Feb  2 02:18:11 2025 GMT
        Subject: CN=679c32e4-1b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:d9:6b:4b:a5:84:a0:5b:63:9e:6f:f8:23:
                    d6:b8:56:69:ff:a0:dd:9d:1b:18:0b:46:fe:3e:e4:
                    b0:c5:57:28:83:ab:0a:58:f9:96:17:3f:6b:48:86:
                    30:78:6f:8c:d4:4a:cf:85:83:e0:a6:da:b2:c7:b2:
                    50:86:f2:10:86:71:fa:d5:ca:55:ff:c3:45:44:c8:
                    6b:45:df:e6:26:a4:c5:db:e1:ad:e8:de:62:55:5b:
                    f7:e8:8b:df:dc:5c:46:5e:76:a2:4b:90:a7:47:9a:
                    d0:65:d6:61:cc:f3:83:bf:92:87:d3:af:ed:d7:75:
                    69:5a:bd:5e:91:7e:40:f4:e2:09:09:58:15:4a:4c:
                    1b:36:8b:da:73:8c:b4:a9:da:8b:b6:85:87:c1:3b:
                    8b:1a:24:d6:e2:ab:c1:46:70:f6:5c:1e:d2:9d:1f:
                    f6:80:be:bd:b7:c3:4c:81:2a:c5:76:ae:24:ca:eb:
                    08:07:79:31:ee:ca:d0:4c:70:2a:b5:b6:73:1d:36:
                    ad:de:14:41:eb:4d:c8:a5:5b:83:85:03:43:4b:a4:
                    8d:6d:73:ca:e9:77:1d:cc:8c:0b:c2:a8:39:d6:ed:
                    26:3d:05:d2:6a:4d:9b:1f:b4:71:8b:a4:9a:0e:a7:
                    7e:da:0e:62:3b:94:37:dc:8b:99:6a:79:86:9a:21:
                    bc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:01:91:85:6F:E1:6F:DD:4F:55:C8:6B:5A:45:BA:C4:F3:21:5F:4F
            X509v3 Authority Key Identifier:
                keyid:3D:2A:F3:53:44:65:E3:FA:EC:A9:5B:BD:23:1F:72:3C:8A:06:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:2d:2c:14:ea:44:9f:be:fa:dd:7e:c0:af:fa:70:c0:2c:29:
         04:ff:7a:d0:a0:8a:b4:94:11:1d:1a:69:2c:e1:22:53:9a:14:
         91:a8:d5:cd:6e:6e:b9:f4:91:34:ba:8c:e6:fe:4c:2a:eb:c8:
         7e:80:90:46:f7:29:68:18:87:14:3d:a2:61:88:9d:37:45:d0:
         6c:cf:15:52:68:d6:ee:09:87:d3:99:35:e3:21:53:0a:57:6a:
         25:03:70:0c:d1:3f:a5:4c:aa:75:6d:8d:b4:16:d6:45:76:9a:
         0c:a9:75:6c:cd:32:0e:21:78:19:73:d2:16:d0:36:a6:bf:b4:
         a5:77:e6:de:58:30:0b:8b:25:e5:0f:fb:55:0c:bc:04:b2:36:
         4a:aa:99:4d:07:ac:f0:c5:a5:0f:04:6b:e2:b4:44:ee:10:90:
         3a:50:c2:8f:20:06:f7:70:f7:ca:0c:52:20:9d:24:04:66:ba:
         4f:67:51:ee:f3:d2:00:e9:3d:8f:4a:3b:00:68:8a:e4:25:72:
         e5:dd:95:01:6f:66:95:92:7a:49:c3:de:cc:ae:a4:12:f2:3b:
         02:1e:77:2a:22:b7:f8:02:71:93:9d:92:5b:ee:af:e7:d4:02:
         cb:f2:3b:1b:2a:55:b3:34:8b:05:bb:e9:cb:a5:b0:9b:ed:38:
         a9:6d:32:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----