Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
File:                     KyRChIF0qoiURpp3m5_X2klYxmk.mft (raw, json)
Hash identifier:          ZBrtbh+2sidQH+RNKzcEezwp3SWCJ+IANpcvgx6IXoU=
Subject key identifier:   2F:28:CC:EC:BC:45:97:85:F5:7C:27:3B:CC:5B:C0:90:4F:ED:45:B5
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Certificate issuer:       /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial:       0E07
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
Manifest number:          0DFA
Signing time:             Sat 29 Mar 2025 00:59:38 +0000
Manifest this update:     Sat 29 Mar 2025 00:59:33 +0000
Manifest next update:     Mon 31 Mar 2025 00:59:33 +0000
Files and hashes:         1: KyRChIF0qoiURpp3m5_X2klYxmk.crl (hash: Um+5PSmW1oIR+vdwn5KxPVUv0XHLZ1mdNwIgYXdBO1M=)
                          2: 7C0BFD26F4F511EFB3E4B9B5762E951A.roa (hash: 5wXs7RMJiyud6JyXFkR1o4z/jMZs+dRUug3mlkais2g=)
                          3: 603F44FEF4F511EF825958B5762E951A.roa (hash: Ba8AFZPMa3HGsyKURqI70r5EW0Munyy3hZ7Nh86XhXk=)
                          4: E90F871CA09811ECA7CC64845A40D577.roa (hash: oxWlZcS9cWEi0+CZBGrhmI9nrUQ78IAE+xwjMFu/v9A=)
                          5: BE403084F2A411EFA60BB451762E951A.roa (hash: ia48RiXRj/TS/ZIH2z01yABB9uM5rlXdHXcHKIZJfs4=)
                          6: 30DA2FD2D99011EBB3AFA075F8AEA228.roa (hash: p31uwZZBrdaLtBzico1EAerpqK+JUtNLbRhjPY74axU=)
                          7: E5D310BCF2A411EF9A7E2652762E951A.roa (hash: ZQkJvtNfrwoPVbwO+rTZ+tWRmqiD9tIx3HghRCOVm/Y=)
                          8: A66C5B60EEFB11EAB67BB760F8AEA228.roa (hash: FhdIMm+EQ8oEL4UIZyKUV2bOPB0gTKOHcKnmpA8WxzA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3591 (0xe07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AF
        Validity
            Not Before: Mar 29 00:59:33 2025 GMT
            Not After : Mar 31 00:59:33 2025 GMT
        Subject: CN=67e745fa-2dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:07:46:f9:05:12:bc:0f:e1:1a:99:30:69:
                    5b:d5:33:26:e4:29:94:02:8d:ad:20:46:12:bd:1c:
                    5a:49:5c:7d:fd:b6:d8:a2:f6:ea:74:a4:80:35:ee:
                    21:db:15:2b:8a:cc:15:c9:da:28:69:c2:43:98:17:
                    51:59:4f:30:f1:0a:96:0e:2d:5e:71:d1:ad:3a:64:
                    86:7b:1e:dd:cd:a1:92:37:b4:4f:f0:d0:96:4c:66:
                    85:d3:5d:d4:d1:2f:cc:96:fd:ed:87:ca:65:85:34:
                    77:f1:48:89:93:cc:b8:b9:99:2b:50:13:a0:4a:b4:
                    ae:f3:a4:7e:c8:3a:f7:15:56:b0:f8:1c:43:2c:58:
                    ee:29:5c:c3:6d:62:e2:3a:6f:f6:d9:2a:53:eb:96:
                    18:0c:02:44:48:be:fe:48:59:f7:14:f0:b1:67:1d:
                    89:d7:ba:1b:d7:9e:c6:b4:e4:5d:cb:54:a5:7c:2b:
                    a5:6d:a1:27:7e:63:ca:9e:99:67:9e:db:12:cd:53:
                    7a:bc:89:25:12:4f:d7:11:82:b0:d2:0e:10:fe:95:
                    a2:e7:17:b6:68:4d:8d:75:18:7c:61:1b:44:9e:96:
                    c0:32:1d:31:a9:6f:5e:bd:06:3f:38:e4:3d:ec:5b:
                    f5:8a:cc:32:58:4e:7f:17:56:81:d3:a7:a5:f2:c3:
                    b2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:28:CC:EC:BC:45:97:85:F5:7C:27:3B:CC:5B:C0:90:4F:ED:45:B5
            X509v3 Authority Key Identifier:
                keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:78:3d:fa:84:7d:ed:0e:8b:67:4e:33:a9:3d:b4:bb:30:a4:
         d7:ef:16:30:18:55:2a:58:26:1e:44:66:1a:0b:68:21:be:97:
         01:4c:a2:cf:b8:cb:fd:70:6a:9d:b4:26:fb:ab:52:c4:e5:94:
         53:e8:42:c0:34:3b:d5:9f:ff:6a:53:83:48:c6:1b:38:e3:b7:
         ef:86:b8:7a:4f:11:ea:16:f5:f6:00:38:17:99:37:01:d4:e4:
         f7:80:98:f6:85:b0:65:d3:ca:1b:a3:c5:1e:d1:5b:ba:ea:1a:
         e8:d1:ca:93:6f:bc:a9:c6:cb:bd:3e:48:f3:e1:15:fa:b9:35:
         7e:61:68:a8:01:a0:39:ab:2d:e9:3f:37:45:56:48:77:cf:75:
         c8:90:a7:17:79:b0:89:78:6a:da:52:47:5a:50:a3:6d:fd:4e:
         2a:a8:59:43:b0:01:24:4c:1f:9a:c4:b5:b3:47:95:78:7e:af:
         29:6c:d8:cb:48:6a:4f:e9:f9:ee:c3:b7:ff:76:87:b9:ff:50:
         09:df:b9:c9:02:8e:41:e5:b5:5d:f0:ab:a0:8c:60:e6:67:f0:
         85:48:0c:d0:e8:fe:f6:ee:0c:3b:7e:45:03:fd:8d:fa:c1:14:
         19:83:69:49:2b:94:de:bc:d1:00:76:8a:04:82:66:52:62:c7:
         c8:1c:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----