Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/vfR3_mnBmwLvWrQBVpIGtCST4iU.mft
File:                     vfR3_mnBmwLvWrQBVpIGtCST4iU.mft (raw, json)
Hash identifier:          1zF55RylIZ1eswZ+dzeF4f9IUbj+yoq/NV0ondzipdQ=
Subject key identifier:   68:55:0C:0F:B9:3B:7E:4D:AF:F1:6D:A0:1B:58:B5:4B:7B:2F:18:46
Authority key identifier: BD:F4:77:FE:69:C1:9B:02:EF:5A:B4:01:56:92:06:B4:24:93:E2:25
Certificate issuer:       /CN=F3640DFDAF/serialNumber=BDF477FE69C19B02EF5AB401569206B42493E225
Certificate serial:       10
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vfR3_mnBmwLvWrQBVpIGtCST4iU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/vfR3_mnBmwLvWrQBVpIGtCST4iU.mft
Manifest number:          28
Signing time:             Tue 22 Oct 2024 11:57:45 +0000
Manifest this update:     Tue 22 Oct 2024 11:57:45 +0000
Manifest next update:     Thu 24 Oct 2024 11:57:45 +0000
Files and hashes:         1: vfR3_mnBmwLvWrQBVpIGtCST4iU.crl (hash: 3k6aILBFCMFtMIoFlMWp/4JhYYU1haoWqnYUcE52HG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640DFDAF/serialNumber=BDF477FE69C19B02EF5AB401569206B42493E225
        Validity
            Not Before: Oct 22 11:57:45 2024 GMT
            Not After : Oct 24 11:57:45 2024 GMT
        Subject: CN=67179339-1081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:18:55:c5:8b:38:31:28:5d:f5:36:45:58:4e:
                    af:38:56:07:df:3d:a8:f8:ae:e1:07:2b:eb:10:cf:
                    e4:52:2e:21:ea:38:60:34:b0:02:ba:69:a0:b1:e8:
                    56:3e:e2:11:0b:ab:a6:7a:a3:b7:fe:33:fc:12:fa:
                    e8:2c:b6:0b:26:cd:03:4a:eb:d6:12:04:f6:b1:f3:
                    34:32:ed:08:e9:d5:a1:00:5f:54:f0:9a:98:f0:a7:
                    e9:7b:9f:ac:b8:0f:01:8d:77:ae:53:54:b6:55:00:
                    16:8e:33:88:90:af:84:6d:8c:c2:15:52:2d:b9:80:
                    06:62:ca:68:5e:50:6d:76:b0:5e:a7:b6:52:fd:ef:
                    52:19:50:e7:48:72:24:7b:3b:9e:20:f0:16:4e:ac:
                    fc:b8:f8:d8:3a:0e:80:cd:2b:f8:cf:12:8a:70:ac:
                    de:e5:5b:56:93:e4:56:ca:c4:66:31:2f:99:e2:61:
                    a0:38:42:be:58:4a:f1:11:b4:84:51:78:29:dd:9d:
                    52:2c:0e:18:e2:35:d1:71:0d:b0:6e:84:b0:0b:c9:
                    34:1d:cb:12:cb:28:3d:14:75:63:5a:0e:df:e2:15:
                    33:9b:02:a6:d3:5a:57:27:1b:d5:ab:27:d0:44:fa:
                    07:36:ac:e3:ea:b2:57:bd:9e:06:b1:2c:cc:aa:1b:
                    1e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:55:0C:0F:B9:3B:7E:4D:AF:F1:6D:A0:1B:58:B5:4B:7B:2F:18:46
            X509v3 Authority Key Identifier:
                keyid:BD:F4:77:FE:69:C1:9B:02:EF:5A:B4:01:56:92:06:B4:24:93:E2:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/vfR3_mnBmwLvWrQBVpIGtCST4iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vfR3_mnBmwLvWrQBVpIGtCST4iU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/vfR3_mnBmwLvWrQBVpIGtCST4iU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:dd:cf:1e:d2:e8:ad:8a:02:60:a7:8f:6a:c4:56:49:d8:02:
         88:f9:97:35:20:f1:4d:36:4f:c3:49:ee:c4:bf:4d:5b:97:d2:
         60:fb:ad:ab:d4:1b:42:c0:de:79:48:fa:99:53:00:ed:5d:ac:
         3e:60:75:d1:c2:1a:fb:c2:f7:a5:6c:71:3f:27:e0:5b:78:fa:
         48:e4:d1:44:e5:9e:cd:1b:f1:27:47:94:91:7e:b5:dd:6c:ad:
         77:4d:b7:30:e0:74:ee:1b:bf:77:82:b4:8d:df:27:13:cc:c6:
         69:a3:7f:71:74:dc:fb:47:ee:c7:90:fa:4d:b0:07:09:2c:d6:
         45:bd:e2:2f:f1:4b:2e:b1:26:3a:47:dd:04:e1:c2:14:78:54:
         c8:65:70:52:84:12:f7:e2:99:a6:f1:7b:d8:db:4d:9c:de:99:
         0d:a1:7a:02:45:0e:18:86:dd:57:f9:40:09:05:b1:02:37:48:
         19:4d:ec:75:c6:88:f7:3a:f3:94:37:1d:f2:85:50:63:c2:ad:
         ca:58:3e:6f:09:36:f2:07:0b:ad:d1:fd:df:99:14:dc:78:18:
         b8:5c:7d:1e:2f:f8:2c:69:91:7d:82:70:9c:d0:b5:22:66:bf:
         ac:25:fe:af:9e:b5:fb:43:d3:f9:41:ba:72:91:b5:81:e4:3d:
         2f:39:6a:c9
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBEDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MERGREFGMTEwLwYDVQQFEyhCREY0NzdGRTY5QzE5QjAyRUY1QUI0MDE1NjkyMDZC
NDI0OTNFMjI1MB4XDTI0MTAyMjExNTc0NVoXDTI0MTAyNDExNTc0NVowGDEWMBQG
A1UEAxMNNjcxNzkzMzktMTA4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJIYVcWLODEoXfU2RVhOrzhWB989qPiu4Qcr6xDP5FIuIeo4YDSwArppoLHo
Vj7iEQurpnqjt/4z/BL66Cy2CybNA0rr1hIE9rHzNDLtCOnVoQBfVPCamPCn6Xuf
rLgPAY13rlNUtlUAFo4ziJCvhG2MwhVSLbmABmLKaF5QbXawXqe2Uv3vUhlQ50hy
JHs7niDwFk6s/Lj42DoOgM0r+M8SinCs3uVbVpPkVsrEZjEvmeJhoDhCvlhK8RG0
hFF4Kd2dUiwOGOI10XENsG6EsAvJNB3LEssoPRR1Y1oO3+IVM5sCptNaVycb1asn
0ET6Bzas4+qyV72eBrEszKobHj0CAwEAAaOCArgwggK0MB0GA1UdDgQWBBRoVQwP
uTt+Ta/xbaAbWLVLey8YRjAfBgNVHSMEGDAWgBS99Hf+acGbAu9atAFWkga0JJPi
JTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDBERkQvQUUwOTg3RDI4OTZFMTFFRjgyNDJFRTc3NzYyRTk1MUEvdmZSM19t
bkJtd0x2V3JRQlZwSUd0Q1NUNGlVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdmZSM19tbkJtd0x2V3JRQlZwSUd0Q1NUNGlVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY0MERGRC9BRTA5ODdEMjg5NkUxMUVGODI0MkVFNzc3NjJF
OTUxQS92ZlIzX21uQm13THZXclFCVnBJR3RDU1Q0aVUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBACzdzx7S6K2KAmCnj2rEVknYAoj5lzUg
8U02T8NJ7sS/TVuX0mD7ravUG0LA3nlI+plTAO1drD5gddHCGvvC96VscT8n4Ft4
+kjk0UTlns0b8SdHlJF+td1srXdNtzDgdO4bv3eCtI3fJxPMxmmjf3F03PtH7seQ
+k2wBwks1kW94i/xSy6xJjpH3QThwhR4VMhlcFKEEvfimabxe9jbTZzemQ2hegJF
DhiG3Vf5QAkFsQI3SBlN7HXGiPc685Q3HfKFUGPCrcpYPm8JNvIHC63R/d+ZFNx4
GLhcfR4v+CxpkX2CcJzQtSJmv6wl/q+etftD0/lBunKRtYHkPS85ask=
-----END CERTIFICATE-----