Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/Thz2TaIj-LiicKHfD6jex5KkXNs.mft
File:                     Thz2TaIj-LiicKHfD6jex5KkXNs.mft (raw, json)
Hash identifier:          6o1CEGP91E0+Dn2hHzwhmEFajCHuo7fp62xLMEapBM8=
Subject key identifier:   FC:CF:37:AF:D1:06:B2:20:2B:BE:70:39:19:C1:DA:F0:2D:1B:C2:79
Authority key identifier: 4E:1C:F6:4D:A2:23:F8:B8:A2:70:A1:DF:0F:A8:DE:C7:92:A4:5C:DB
Certificate issuer:       /CN=F3640DFDAF/serialNumber=4E1CF64DA223F8B8A270A1DF0FA8DEC792A45CDB
Certificate serial:       1E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Thz2TaIj-LiicKHfD6jex5KkXNs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/Thz2TaIj-LiicKHfD6jex5KkXNs.mft
Manifest number:          29
Signing time:             Tue 22 Oct 2024 12:07:30 +0000
Manifest this update:     Tue 22 Oct 2024 12:07:30 +0000
Manifest next update:     Thu 24 Oct 2024 12:07:30 +0000
Files and hashes:         1: Thz2TaIj-LiicKHfD6jex5KkXNs.crl (hash: rqT1HrjL2GwDGz0izgpYeUpG1m7qN1Jfv4kyFThDvGE=)
                          2: 32ECB694906E11EFB54F5B57762E951A.roa (hash: U23PUnjwq2kXRrdbse3Nf1EpfCGUhU+jjeGB7WHEMMA=)
                          3: 8E8F306C897011EFA1194284762E951A.roa (hash: duPpoh38H/b8aRbXp8aKMmt/HI9o5+97KsQBpZxHOfo=)
                          4: BA3DD736897011EFA95B4C84762E951A.roa (hash: dBK8389TOM+tPA/4zi/Al7hI5JK8m1TEKEn1OSlHvwY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640DFDAF/serialNumber=4E1CF64DA223F8B8A270A1DF0FA8DEC792A45CDB
        Validity
            Not Before: Oct 22 12:07:30 2024 GMT
            Not After : Oct 24 12:07:30 2024 GMT
        Subject: CN=67179582-5632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:80:7d:8e:1d:0f:46:dc:17:40:f2:05:7d:b8:
                    75:8d:12:13:f7:87:15:95:5b:4a:67:48:bc:55:2e:
                    7e:8b:1a:53:2f:e7:76:73:7c:f3:71:59:dc:0d:5c:
                    d8:09:5e:80:fe:b3:f8:87:ca:48:2d:7a:47:87:09:
                    99:c8:df:aa:5e:9a:17:d7:4f:ab:c8:10:ed:aa:51:
                    ef:0a:3f:71:24:14:2c:d6:98:53:1d:2f:38:a6:9e:
                    61:3d:4d:8c:4e:87:38:b1:e3:66:48:57:56:46:95:
                    ee:82:59:66:7c:b0:8f:e4:16:75:2b:a2:3c:2c:82:
                    d3:11:64:d9:b6:0e:b5:ed:b7:94:01:8e:d9:93:65:
                    d2:ac:f7:67:b3:a3:19:cc:47:4a:55:73:e8:7c:84:
                    0d:70:18:af:3a:06:68:31:45:ad:62:01:58:43:b6:
                    a7:ad:5f:de:7b:84:55:cb:47:d6:23:52:51:1f:0e:
                    19:84:e6:b3:83:8a:d8:22:d7:70:23:db:62:09:c7:
                    6e:50:b7:e6:77:cc:33:3f:93:47:20:6e:59:54:24:
                    fe:83:f1:eb:76:e1:a5:b3:c3:9f:b9:58:a1:08:35:
                    4e:62:f7:b7:ca:de:2b:8e:f1:e2:63:cb:4e:61:e1:
                    2a:4d:4b:ce:c5:0b:50:f7:91:51:06:95:60:1b:43:
                    e6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CF:37:AF:D1:06:B2:20:2B:BE:70:39:19:C1:DA:F0:2D:1B:C2:79
            X509v3 Authority Key Identifier:
                keyid:4E:1C:F6:4D:A2:23:F8:B8:A2:70:A1:DF:0F:A8:DE:C7:92:A4:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/Thz2TaIj-LiicKHfD6jex5KkXNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Thz2TaIj-LiicKHfD6jex5KkXNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/Thz2TaIj-LiicKHfD6jex5KkXNs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:98:57:55:dc:d0:23:28:ea:45:dc:e8:aa:ee:50:39:20:0d:
         84:82:0b:be:c2:ff:e8:aa:80:e0:d0:7e:0b:a4:00:8f:fc:2e:
         e8:34:7d:22:35:a8:9a:33:c3:9e:92:12:2f:cb:95:e3:d3:2f:
         9b:a0:39:5c:a5:99:67:9d:ad:3b:7e:16:aa:1d:95:f2:d5:9c:
         cb:a9:b4:9d:e2:6c:ea:3d:87:76:ef:84:af:d9:37:65:39:99:
         0f:6a:26:c1:38:66:76:ae:0e:d7:56:86:a4:63:cc:8a:98:77:
         ae:f6:72:82:76:f6:e9:1b:05:0b:71:35:e9:b4:8f:af:8f:66:
         1e:2e:02:7c:50:a8:44:e9:b2:7b:2c:f7:97:1c:41:e4:03:b8:
         c7:bd:ae:0f:2e:c8:21:78:a0:c6:81:56:d0:ea:93:15:b5:77:
         25:33:e7:63:53:2f:f3:1e:8e:a6:ba:28:52:20:3a:9d:18:5c:
         d8:b4:e8:57:11:59:17:98:5a:24:ac:99:1e:0a:53:ae:20:19:
         3e:39:90:d5:1b:a5:d0:37:f8:79:49:ac:ec:d0:04:a8:cc:16:
         89:56:e5:e3:fd:8a:2c:be:3b:51:4c:50:14:7f:0a:f1:2e:ec:
         c3:09:f9:fa:1f:df:46:80:47:e1:52:a9:e2:bb:14:68:e5:2c:
         53:a9:90:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----