Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
File:                     yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft (raw, json)
Hash identifier:          G9sR3a+ZVGtQMz//RoOv8vGrTBvqOCS9itKqv9zr53o=
Subject key identifier:   56:38:67:E0:E0:68:13:3A:3A:7E:73:1D:EA:32:18:2E:7F:0F:79:80
Authority key identifier: C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
Certificate issuer:       /CN=F36FB15EAF/serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Certificate serial:       018A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
Manifest number:          0188
Signing time:             Fri 31 Jan 2025 02:48:12 +0000
Manifest this update:     Fri 31 Jan 2025 02:48:12 +0000
Manifest next update:     Sun 02 Feb 2025 02:48:12 +0000
Files and hashes:         1: yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl (hash: JwlTczUAh3sNcv/ESG9SHI5gEFGohPn141SImIVSrQU=)
                          2: F22231EE58D611EF9480BB8A762E951A.roa (hash: 2wx44BaE5zLTLXu1cOcnoK2nKJGZI/F7fTamJz0/0pY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB15EAF/serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
        Validity
            Not Before: Jan 31 02:48:12 2025 GMT
            Not After : Feb  2 02:48:12 2025 GMT
        Subject: CN=679c39ec-6ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:b5:3f:ff:98:08:e9:84:34:72:51:66:1d:
                    2d:a2:ed:c8:53:2c:95:35:cf:43:0f:5c:19:5a:b6:
                    01:2f:fc:a9:33:f2:4c:6f:2a:e6:c1:31:ce:6e:54:
                    aa:09:7f:8f:35:b9:47:a4:90:66:32:96:15:95:d3:
                    69:2e:5a:ef:57:1f:74:da:7e:9f:61:05:29:8b:5e:
                    db:4b:c6:e4:26:91:70:bf:62:4e:7f:44:c5:28:cc:
                    e3:b8:e9:49:45:ac:61:d1:e3:5d:18:ec:c5:66:11:
                    f0:de:33:e2:cc:2d:86:99:3e:b4:ee:54:b7:7a:f4:
                    48:6c:d7:9d:36:9d:68:99:a4:ce:c1:52:4b:d6:54:
                    f7:9e:ba:c0:1a:f1:3d:20:2c:29:1b:1e:65:cd:60:
                    53:3f:a7:e1:ca:d3:f7:43:f4:5f:9a:e7:8e:26:5a:
                    d8:56:6d:d3:45:c0:76:91:5a:9e:9d:20:82:a5:72:
                    7e:15:61:c9:b2:c3:83:b3:ef:4f:83:6d:1d:7e:bc:
                    ee:16:a3:0d:f6:fc:a9:f9:67:7b:8a:7f:64:e0:0c:
                    13:b8:06:92:3d:6f:07:de:8f:c4:1d:25:03:39:25:
                    1b:ef:0f:86:c0:a7:3b:15:f1:c7:7d:b7:5a:a4:d7:
                    dc:70:ad:73:90:ed:85:21:8d:23:47:e2:6a:eb:2a:
                    7e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:38:67:E0:E0:68:13:3A:3A:7E:73:1D:EA:32:18:2E:7F:0F:79:80
            X509v3 Authority Key Identifier:
                keyid:C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1e:27:9e:c3:e8:b7:36:3d:a4:95:21:e5:d7:a0:3c:36:40:
         b2:f9:b6:25:5a:41:0d:bd:ff:c1:b4:cd:29:7a:5b:25:90:14:
         b0:98:4f:e1:18:76:8b:82:3d:44:b8:0c:81:c2:28:d7:6b:5c:
         84:d3:1a:5b:b7:80:11:64:ec:22:da:68:25:4f:68:87:24:b8:
         f3:28:ae:00:6c:d5:0c:db:9d:4d:1a:53:25:64:90:34:6f:6c:
         c4:08:3d:3f:f5:6a:cb:e2:a2:fc:1a:b1:90:68:8c:2e:08:9f:
         a6:cb:46:43:b0:44:e6:8e:68:1e:50:c6:fd:83:16:58:38:30:
         74:03:d1:2e:fc:fa:02:b5:96:2a:5a:17:41:9b:d9:c2:25:e6:
         96:bf:35:99:2d:d0:51:12:8a:40:b4:6e:aa:57:83:60:db:6a:
         ad:07:61:d0:3e:96:58:50:97:8e:ef:67:8f:dd:ed:d5:96:64:
         f7:77:d8:b7:d4:2d:c6:ec:8c:ca:35:64:97:2e:72:59:6a:74:
         43:24:2e:ba:8e:a3:42:56:ad:68:48:4d:4f:44:07:4c:20:e1:
         7a:63:06:50:b8:a2:4a:a6:8c:f0:5b:92:22:9f:6d:8a:28:a0:
         c8:17:f9:fd:4b:45:10:7e:0b:74:0e:3c:80:eb:46:c2:4c:c7:
         9b:eb:3e:ff
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAYowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkIxNUVBRjExMC8GA1UEBRMoQzlBNTlDNjNCNzBBOEUxMkJEMUMwQjE1Nzc2OTcx
NzFBM0ZFRTBGMTAeFw0yNTAxMzEwMjQ4MTJaFw0yNTAyMDIwMjQ4MTJaMBgxFjAU
BgNVBAMTDTY3OWMzOWVjLTZlZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKHLU//5gI6YQ0clFmHS2i7chTLJU1z0MPXBlatgEv/Kkz8kxvKubBMc5u
VKoJf481uUekkGYylhWV02kuWu9XH3Tafp9hBSmLXttLxuQmkXC/Yk5/RMUozOO4
6UlFrGHR410Y7MVmEfDeM+LMLYaZPrTuVLd69Ehs1502nWiZpM7BUkvWVPeeusAa
8T0gLCkbHmXNYFM/p+HK0/dD9F+a544mWthWbdNFwHaRWp6dIIKlcn4VYcmyw4Oz
70+DbR1+vO4Wow32/Kn5Z3uKf2TgDBO4BpI9bwfej8QdJQM5JRvvD4bApzsV8cd9
t1qk19xwrXOQ7YUhjSNH4mrrKn45AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVjhn
4OBoEzo6fnMd6jIYLn8PeYAwHwYDVR0jBBgwFoAUyaWcY7cKjhK9HAsVd2lxcaP+
4PEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZCMTVFL0FGMUUyRUMyQjlDOTExRUVCMkQ1NTE1QTc3NTQxMkU2L3lhV2NZ
N2NLamhLOUhBc1ZkMmx4Y2FQLTRQRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3lhV2NZN2NLamhLOUhBc1ZkMmx4Y2FQLTRQRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkIxNUUvQUYxRTJFQzJCOUM5MTFFRUIyRDU1MTVBNzc1
NDEyRTYveWFXY1k3Y0tqaEs5SEFzVmQybHhjYVAtNFBFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtHieew+i3Nj2klSHl16A8NkCy+bYl
WkENvf/BtM0pelslkBSwmE/hGHaLgj1EuAyBwijXa1yE0xpbt4ARZOwi2mglT2iH
JLjzKK4AbNUM251NGlMlZJA0b2zECD0/9WrL4qL8GrGQaIwuCJ+my0ZDsETmjmge
UMb9gxZYODB0A9Eu/PoCtZYqWhdBm9nCJeaWvzWZLdBREopAtG6qV4Ng22qtB2HQ
PpZYUJeO72eP3e3VlmT3d9i31C3G7IzKNWSXLnJZanRDJC66jqNCVq1oSE1PRAdM
IOF6YwZQuKJKpozwW5Iin22KKKDIF/n9S0UQfgt0DjyA60bCTMeb6z7/
-----END CERTIFICATE-----