Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646C24/1C86B7862B5B11EC8EBEF540D8A014CE/VQQJRTYi7Z5eG31S9ldocG0ifYg.mft
File:                     VQQJRTYi7Z5eG31S9ldocG0ifYg.mft (raw, json)
Hash identifier:          JHGGOSMrswCeG0eXEZnVsaocAyEbRopyDH1Z+TEMqL4=
Subject key identifier:   3C:EB:E3:2D:B4:01:A4:E3:D4:4E:BD:60:FA:46:B0:3C:86:FD:E2:09
Authority key identifier: 55:04:09:45:36:22:ED:9E:5E:1B:7D:52:F6:57:68:70:6D:22:7D:88
Certificate issuer:       /CN=F3646C24AF/serialNumber=550409453622ED9E5E1B7D52F65768706D227D88
Certificate serial:       0172
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VQQJRTYi7Z5eG31S9ldocG0ifYg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646C24/1C86B7862B5B11EC8EBEF540D8A014CE/VQQJRTYi7Z5eG31S9ldocG0ifYg.mft
Manifest number:          0173
Signing time:             Wed 12 Oct 2022 01:33:19 +0000
Manifest this update:     Wed 12 Oct 2022 01:33:18 +0000
Manifest next update:     Fri 14 Oct 2022 01:33:18 +0000
Files and hashes:         1: VQQJRTYi7Z5eG31S9ldocG0ifYg.crl (hash: vBD5D/GOGMwXZlYgEkjXmUjfipMYVj7KsP675wnBEms=)
                          2: 2A95002031A611ECBD6EEE2AD8A014CE.roa (hash: GQ0uFz9GGcoQrvK3dOf11j4lRNdLxakphQpiW0dvWow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646C24AF/serialNumber=550409453622ED9E5E1B7D52F65768706D227D88
        Validity
            Not Before: Oct 12 01:33:18 2022 GMT
            Not After : Oct 14 01:33:18 2022 GMT
        Subject: CN=6346195f-7190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1f:9b:48:a6:1a:a6:e9:6e:67:b9:e6:7d:32:
                    54:cd:fe:46:4e:5a:88:2a:bc:34:88:cb:20:55:d2:
                    a8:05:bc:e4:93:e9:a8:c0:f1:63:6c:3a:82:8e:ed:
                    b0:2b:3e:8c:41:ac:88:a0:be:d1:0d:b9:f6:66:2a:
                    58:55:d0:e0:88:4a:4d:88:0b:ef:5d:81:47:af:8e:
                    58:45:d3:66:9a:33:25:b2:11:ca:2d:b0:cb:e1:dd:
                    6b:33:30:1b:b6:1b:ac:b6:4d:dd:14:3a:08:91:8c:
                    9c:26:69:cf:ee:88:af:f3:6f:ec:c9:8a:12:d0:7d:
                    0c:9f:cf:a1:26:bc:b8:ad:a7:d0:05:ad:86:ee:4e:
                    99:9d:f3:32:e0:2a:d7:76:5b:5b:27:1f:f6:f6:79:
                    74:ad:77:d2:b4:2f:10:5e:dc:8d:f0:34:d3:32:5f:
                    2b:59:e2:1f:0a:88:cf:09:75:e5:08:f8:30:fb:49:
                    5a:d5:51:bb:d4:51:a9:75:52:d8:a6:7f:76:48:b1:
                    d0:e0:af:1b:02:33:a1:f6:31:50:44:87:52:72:6b:
                    5c:80:f3:99:88:36:f4:f3:86:b0:4b:fe:53:db:7f:
                    a9:61:79:c1:3a:2b:5d:1b:cd:13:b6:5e:f2:93:b5:
                    0f:11:ec:2c:c8:9e:27:c3:e6:b0:45:74:c8:cb:fa:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EB:E3:2D:B4:01:A4:E3:D4:4E:BD:60:FA:46:B0:3C:86:FD:E2:09
            X509v3 Authority Key Identifier:
                keyid:55:04:09:45:36:22:ED:9E:5E:1B:7D:52:F6:57:68:70:6D:22:7D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646C24/1C86B7862B5B11EC8EBEF540D8A014CE/VQQJRTYi7Z5eG31S9ldocG0ifYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VQQJRTYi7Z5eG31S9ldocG0ifYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646C24/1C86B7862B5B11EC8EBEF540D8A014CE/VQQJRTYi7Z5eG31S9ldocG0ifYg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:88:45:b4:11:bd:61:e6:0e:e0:b4:b2:a4:19:51:42:eb:
         8c:12:96:27:69:ae:85:70:45:c8:dc:7b:d9:67:d4:11:03:6c:
         1b:61:8a:03:52:d3:be:38:3c:28:0f:d8:36:44:8d:9c:f7:bc:
         a2:15:e2:95:d8:24:49:ac:31:50:08:6b:c0:c7:de:6f:51:7a:
         71:bf:66:09:f5:c2:8b:94:40:6e:3e:f4:6d:49:21:32:7f:c5:
         4d:9a:26:c9:10:fe:49:b2:d0:aa:05:66:ec:e5:8c:fd:5f:39:
         1c:ee:c3:54:5f:e4:77:c2:7c:99:e3:05:69:cb:07:f0:4d:0a:
         e2:82:85:b5:d4:3a:82:9c:b1:65:e8:e6:a9:fc:e5:1c:c4:e2:
         40:0e:73:1b:26:de:6b:84:5f:7e:29:b3:02:7f:17:bb:bf:97:
         a5:13:e5:57:b0:f8:fe:26:11:21:05:b6:81:f8:87:c6:a9:8e:
         3e:fb:35:f5:df:d8:fa:0f:37:79:e7:90:e0:a1:3e:2f:6e:83:
         95:3c:7e:22:b8:cc:e8:b4:5c:8f:27:15:f9:fc:1a:b1:ba:20:
         7d:1e:23:06:2e:82:9e:33:cf:7f:c0:31:23:76:ec:a0:d9:42:
         bc:17:11:fa:6e:45:5f:58:dc:43:11:a5:dc:e1:ef:ce:4d:73:
         74:e4:e3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----