Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
File:                     r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft (raw, json)
Hash identifier:          /0XUUQrKmDzXceA4JnRfCCw4/OtMEII2gDS8rV0Gv5c=
Subject key identifier:   AB:91:27:BE:70:A1:7D:37:F4:91:7F:9D:D6:77:10:7A:1B:CE:AA:D0
Authority key identifier: AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49
Certificate issuer:       /CN=F36F8BC2AF/serialNumber=AFC0C16B805A4BB3AE73EDC24C538380FC0E9A49
Certificate serial:       E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
Manifest number:          E0
Signing time:             Fri 31 Jan 2025 03:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 03:00:08 +0000
Manifest next update:     Sun 02 Feb 2025 03:00:08 +0000
Files and hashes:         1: r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl (hash: FT8KqU19Lw39RN+b0MLsG+I8vmRUV0poI1uiiM9ikpc=)
                          2: 6CF3393C3ED711EF83115671762E951A.roa (hash: myl8UBqSLO+cOQuAB/8Bbg3EndkBKRz4UG5WpQxjvbg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8BC2AF/serialNumber=AFC0C16B805A4BB3AE73EDC24C538380FC0E9A49
        Validity
            Not Before: Jan 31 03:00:08 2025 GMT
            Not After : Feb  2 03:00:08 2025 GMT
        Subject: CN=679c3cb8-c306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:9c:4d:d4:5a:c6:ae:46:62:6c:02:bf:e3:
                    8e:7b:3b:96:9e:97:0e:76:82:34:64:ff:28:e8:1e:
                    12:ea:fb:9a:f4:7f:9d:e4:80:f0:1f:06:c2:ac:8c:
                    23:16:c8:78:48:57:88:0d:6f:11:cc:c7:85:19:9a:
                    26:0e:7e:e1:48:db:4b:61:5d:17:92:1d:63:58:ea:
                    39:73:ba:5d:2e:d6:c3:59:4d:d5:5f:1a:ed:3f:c5:
                    31:02:db:f8:ec:68:ec:5b:ec:62:e8:df:9e:c0:dd:
                    d3:48:53:79:d1:cd:12:6b:b1:64:95:a4:cb:9f:a5:
                    8f:88:61:5b:fc:6b:c5:0e:90:af:4e:b3:99:38:bc:
                    ca:4b:87:71:01:dd:e0:5f:04:12:cd:cc:de:5c:58:
                    14:64:94:9e:de:4a:b3:2b:cf:41:f2:c3:9e:a3:4b:
                    41:f2:bf:9b:8a:f6:f3:95:d5:ab:ef:52:54:e3:a9:
                    20:bb:aa:f0:c2:df:de:f5:f0:03:e4:55:20:6e:02:
                    d8:ab:17:ca:a0:20:84:fe:86:9c:d3:8b:36:86:03:
                    07:cf:82:de:b7:0c:2c:e9:cf:d9:f6:8b:ff:64:bc:
                    f9:da:4a:27:6d:d5:31:a7:2a:42:31:83:b3:46:3e:
                    10:ae:fa:77:ba:3f:a6:0c:0c:5e:dd:a0:6f:9c:27:
                    16:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:91:27:BE:70:A1:7D:37:F4:91:7F:9D:D6:77:10:7A:1B:CE:AA:D0
            X509v3 Authority Key Identifier:
                keyid:AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:82:18:ad:d4:de:53:d5:d9:71:aa:8e:36:86:43:22:4c:87:
         ec:cb:7e:7b:68:b7:39:c6:b9:a4:62:0c:42:e4:80:e1:4a:a5:
         da:e7:45:1a:9f:73:e5:b4:e3:9c:67:93:76:70:8a:08:25:a2:
         ac:ac:8d:0a:8d:d5:3b:12:c2:e2:91:64:21:11:54:2b:0c:12:
         87:53:b8:bf:29:3e:30:6a:8c:31:6a:2e:5a:13:12:58:e7:60:
         a7:05:d1:c4:fc:ed:6c:73:de:a2:02:c6:fa:3d:2b:4e:0b:f2:
         55:63:54:f2:f4:b9:4c:fe:7b:7a:89:d3:4f:31:43:de:78:92:
         09:85:21:ce:d3:59:c8:f0:0c:ab:d1:f2:01:7b:69:f4:8c:87:
         d1:00:51:8b:e1:02:a5:a9:27:a8:9c:6a:a3:3a:10:90:d7:47:
         9c:a2:0b:a6:6f:14:d3:97:24:f3:5a:35:52:3c:a9:4a:8c:a4:
         d1:3a:b9:df:bf:a1:61:9a:13:76:9a:d2:fc:fa:38:88:3e:f8:
         7f:84:f4:5b:8b:7c:34:8c:5e:6d:ab:0f:39:14:f4:fa:d8:1b:
         1d:72:4b:49:60:ac:e1:ec:fb:6f:85:9a:09:5d:a0:5b:60:78:
         ce:1e:72:cc:1b:9a:77:d9:56:5e:0e:56:11:a7:5e:5d:9f:f2:
         ab:ba:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----