Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
File:                     4u30RuwlLhL_hY7r4xim2a4EMbA.mft (raw, json)
Hash identifier:          isAn/yBKPhq+LcoI0pW3RkDYO8QSDGLNgGwSRQmfuxg=
Subject key identifier:   D3:33:C3:C0:9E:50:97:D0:0A:E5:4F:4F:47:7D:27:C3:0E:9C:7B:C8
Authority key identifier: E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
Certificate issuer:       /CN=F36F61A5AF/serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Certificate serial:       0501
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
Manifest number:          0500
Signing time:             Fri 31 Jan 2025 01:49:47 +0000
Manifest this update:     Fri 31 Jan 2025 01:49:46 +0000
Manifest next update:     Sun 02 Feb 2025 01:49:46 +0000
Files and hashes:         1: 4u30RuwlLhL_hY7r4xim2a4EMbA.crl (hash: iEz6dUoiWY0Iiy5JXfUUA9AE9eQCAoCPFm+wi7athj4=)
                          2: F2E8745215FF11EC9C41353BD8A014CE.roa (hash: DALkcQgZJxSOm1jJNi52fbxFVjnJTlBys9WoNl+MGWs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F61A5AF/serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
        Validity
            Not Before: Jan 31 01:49:46 2025 GMT
            Not After : Feb  2 01:49:46 2025 GMT
        Subject: CN=679c2c3a-b4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:cd:a6:62:d7:18:e9:29:84:9c:fa:57:81:
                    36:81:56:3b:f2:97:62:a0:55:cc:ca:6a:8c:21:ac:
                    5b:ae:dd:8c:00:57:79:69:c1:c5:d8:70:7f:35:14:
                    ee:64:96:8b:12:4c:2c:3a:0e:3f:f5:c5:b8:d6:67:
                    2b:48:6d:1d:57:3a:c1:9d:fe:6b:24:84:f7:70:1c:
                    9f:d2:ef:ec:57:ce:fd:2b:9d:46:26:81:b9:61:38:
                    b6:a3:c8:62:b1:b0:a1:ed:b3:73:8c:6b:82:cb:24:
                    a8:b9:84:2b:20:00:be:71:cb:0b:b5:d0:ae:23:50:
                    a0:ca:24:c4:00:d7:f8:7b:64:36:bb:68:13:a5:05:
                    bd:8c:35:45:78:23:a2:cf:03:83:ec:9f:ef:9d:40:
                    93:67:b3:9d:6d:b7:d9:5a:7e:fc:77:c1:59:17:4d:
                    9e:47:cb:41:7b:ea:34:33:d8:5e:e8:7d:4f:bd:ef:
                    08:4e:5b:18:47:ea:7e:29:b4:21:ba:c0:e9:0d:e3:
                    07:54:d2:cf:64:c2:25:7f:f6:fb:0e:9b:38:b3:97:
                    24:3e:da:e9:c2:36:b1:d1:31:c5:9e:ed:92:b8:c3:
                    60:26:71:1d:8c:6b:65:f6:fa:f3:ce:5a:1d:82:99:
                    03:30:db:37:13:bf:0f:84:83:6a:a4:b6:bc:70:a9:
                    7a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:33:C3:C0:9E:50:97:D0:0A:E5:4F:4F:47:7D:27:C3:0E:9C:7B:C8
            X509v3 Authority Key Identifier:
                keyid:E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:03:da:7a:52:4f:44:1f:7b:06:a3:90:15:a3:41:bf:83:f9:
         3f:c2:4d:36:f1:4c:ef:08:9c:ff:96:0a:5b:13:08:18:57:26:
         1e:fc:33:29:0e:9c:25:33:b5:98:a4:69:20:3b:c3:95:54:f6:
         69:7e:d6:a4:53:28:59:63:ad:47:ae:ae:d3:43:51:d8:df:f9:
         5f:0a:07:3e:21:8e:75:a3:3c:db:c9:03:88:db:f9:7d:73:ef:
         a4:c2:f6:59:12:dc:36:e5:d0:58:0b:78:79:33:1b:a5:70:8a:
         2e:d0:07:ef:13:20:65:54:f2:e9:79:a0:32:33:77:3a:51:75:
         91:15:da:49:62:c0:5d:50:22:d6:64:b8:4a:5f:55:4f:1a:fa:
         e1:eb:ba:f9:1a:75:df:b9:f9:2a:a9:dc:fb:f8:92:34:07:84:
         5f:e9:32:63:b8:55:b0:c2:20:fb:ae:29:7e:92:3e:9a:71:e8:
         90:3e:4f:e3:2a:43:91:49:eb:73:25:c9:d4:cf:c6:4d:6d:7a:
         e8:df:8b:30:09:03:1d:f6:46:d8:2c:56:36:fc:cf:dc:22:e9:
         af:86:96:46:42:14:a1:ce:9c:90:51:92:87:09:48:ee:40:68:
         b2:e3:a7:a6:7f:de:5b:b3:1c:3f:ae:b9:20:8e:93:54:12:27:
         c9:1f:f7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----