Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
File:                     hala3Sz1h3QDC2qbk7QROG_jBkA.mft (raw, json)
Hash identifier:          3HWtLLBxUbuRWqSmdIBiNcZKWf7sUbKx8XpCiC9OSNA=
Subject key identifier:   F6:95:15:7C:4C:D4:2A:F0:AB:C3:7D:6F:DD:64:D4:88:D1:04:9E:57
Authority key identifier: 85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40
Certificate issuer:       /CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
Certificate serial:       0708
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
Manifest number:          0704
Signing time:             Fri 31 Jan 2025 01:26:37 +0000
Manifest this update:     Fri 31 Jan 2025 01:26:37 +0000
Manifest next update:     Sun 02 Feb 2025 01:26:37 +0000
Files and hashes:         1: hala3Sz1h3QDC2qbk7QROG_jBkA.crl (hash: lJxym95AVdNL0DHN9rlUbRBVprQrBPtC7sypgoAkxQY=)
                          2: 3427972686F611EA93690486F8AEA228.roa (hash: V/sXPJRFataMhL4hJmI2vdCPCgDCsxZaHnu+zFRnfs8=)
                          3: CAE2CB0486F611EA9BCADC07F8AEA228.roa (hash: VDKvE/A73Sf7vYOhnC0lj6HdM/VyRRMLJnvzm5crfzE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800 (0x708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5173AF/serialNumber=85A95ADD2CF58774030B6A9B93B411386FE30640
        Validity
            Not Before: Jan 31 01:26:37 2025 GMT
            Not After : Feb  2 01:26:37 2025 GMT
        Subject: CN=679c26cd-9514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:ab:da:9d:04:3f:d8:28:9b:b0:45:48:a2:
                    b4:cf:d5:b0:4c:e8:e4:02:b2:b1:32:3f:fa:e8:c7:
                    fb:96:65:20:96:62:30:ad:58:7b:bc:6f:00:d0:6a:
                    40:37:e9:a4:c6:3c:11:16:f5:84:cb:1e:dc:e1:3e:
                    a9:8d:3b:d7:b6:7e:e8:74:5c:0e:17:e2:87:a4:be:
                    69:18:cc:93:5c:75:33:15:87:88:8a:77:bb:34:30:
                    5f:24:c1:7e:97:79:b1:61:8e:66:41:5a:70:ed:18:
                    9a:7a:8d:14:8c:92:84:03:95:15:70:d4:78:80:aa:
                    74:eb:63:e9:45:d6:db:96:84:f2:47:58:f2:d3:13:
                    7b:3a:49:01:7d:0c:97:d3:dd:f0:9e:71:bc:51:c6:
                    d5:1c:16:ee:d5:79:33:23:56:8d:39:9c:10:12:9e:
                    02:d4:02:91:21:98:44:73:26:1d:0e:b1:4d:61:ac:
                    91:52:5e:fc:83:ae:c1:1e:b4:c0:e2:4e:cf:22:31:
                    21:a4:fd:38:ce:88:1c:1f:d8:c9:c5:3e:73:86:d6:
                    4d:3a:a8:cf:58:3a:b7:23:7c:cd:2a:b0:d8:27:93:
                    77:e5:b9:61:86:5b:a1:a3:8e:71:f3:dc:63:a2:7d:
                    df:9f:f4:86:7a:0a:94:73:bb:3a:31:0b:d8:f9:4a:
                    cc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:95:15:7C:4C:D4:2A:F0:AB:C3:7D:6F:DD:64:D4:88:D1:04:9E:57
            X509v3 Authority Key Identifier:
                keyid:85:A9:5A:DD:2C:F5:87:74:03:0B:6A:9B:93:B4:11:38:6F:E3:06:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hala3Sz1h3QDC2qbk7QROG_jBkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5173/C6194FDC861D11EABACE5F28F8AEA228/hala3Sz1h3QDC2qbk7QROG_jBkA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:d7:23:ab:f4:a9:d8:b4:53:93:be:7a:ba:36:df:26:f4:
         20:9d:00:1f:32:50:a8:f9:4d:9d:0e:45:47:1f:2d:fe:ec:50:
         dd:95:c1:82:7b:69:c2:a2:6a:49:60:78:bc:36:d1:59:f5:53:
         55:94:a6:a0:d0:11:c7:03:1e:47:b1:d7:19:bd:a2:65:f0:17:
         84:2e:43:f3:a5:73:1e:c7:af:f4:39:b0:00:26:d6:bd:01:a1:
         51:fb:84:9c:23:09:e9:32:b9:c0:84:9b:38:86:2a:fd:26:3b:
         26:14:5f:af:9f:e1:05:9d:fd:c0:7d:96:3d:31:49:79:92:d4:
         56:09:87:7b:6f:e3:5c:c4:df:aa:7d:bd:a8:f9:c9:2a:36:a3:
         c7:b5:4b:b4:3c:d0:74:06:6a:77:7b:df:88:a9:5b:2c:37:d2:
         98:1f:ef:23:59:bd:62:eb:fe:85:1f:71:af:19:8e:d1:3e:76:
         e5:2e:67:dd:b3:60:73:ab:2b:20:23:0d:92:5b:e2:15:24:e9:
         20:3d:06:99:67:12:22:03:9a:51:d0:cb:5c:2f:6c:24:39:f9:
         99:cb:3e:42:89:00:88:cb:50:5d:ab:40:e3:0d:da:a4:60:29:
         83:c2:c1:90:9d:29:f0:77:21:ec:6a:6c:c2:96:e0:e3:e6:1e:
         61:a2:e4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----