Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
File:                     qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft (raw, json)
Hash identifier:          N4TE6MlIgx1lABfHu9tIGUO3vQObLtNt63AMKpaFgmE=
Subject key identifier:   A7:2C:6D:35:E4:93:99:28:E6:81:1F:CC:8C:2C:FA:4C:75:0B:57:87
Authority key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Certificate issuer:       /CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Certificate serial:       0621
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
Manifest number:          0615
Signing time:             Sat 29 Mar 2025 02:01:27 +0000
Manifest this update:     Sat 29 Mar 2025 02:01:27 +0000
Manifest next update:     Mon 31 Mar 2025 02:01:27 +0000
Files and hashes:         1: qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl (hash: 7jRZ0IBru1appZ41X8+Yctm785WqzkCot9PoWvD1cjU=)
                          2: 751920CE7E9611EE8D4DD95B4AD9E6FC.roa (hash: CNMY5e2drHouzm76FLKpVmYcbX4KrOkhsePbbpZjJY8=)
                          3: 44E2BFD6BEB611EEB2F13E55775412E6.roa (hash: 6BGl+d3/Qn7Bi9MGN7eS+0tAvnZagMzcLCnJkf/75K0=)
                          4: 1516EA16764311EB901D143DF8AEA228.roa (hash: NKQ3jb8Jf2A8DHKj6MSRen4+1RRngARTbxS7x9DY4og=)
                          5: 9C0922A07CDA11EE826623584AD9E6FC.roa (hash: uECmY3jV3qiuTfMrOHue7zCKctO8EvT0qW7ZBh1T6zE=)
                          6: B27462D677CE11EE92D72D474AD9E6FC.roa (hash: jAN4r34ofSFeK8zRXd4T/2zGryJDsF7FCE205yiNRzU=)
                          7: 2DA2A10A7E9811EEB624E1614AD9E6FC.roa (hash: z/8MHOUuN5njwZAEAwp8qmMotdx3/iv3rmL5RO3TKDM=)
                          8: 9041503A357F11ED918CA4F4F1222468.roa (hash: d9OBwQy2VVd8P9taUy3HKMMWH3ZjWatzRT+TYQdJ6mE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36493E2AF
        Validity
            Not Before: Mar 29 02:01:27 2025 GMT
            Not After : Mar 31 02:01:27 2025 GMT
        Subject: CN=67e75477-0e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:84:33:02:ce:e5:c0:e5:31:94:3e:37:0f:
                    e2:51:6b:bb:3b:47:aa:b9:b9:d6:dd:1c:fc:2c:91:
                    08:45:86:63:84:8d:c7:93:27:9d:3f:a2:9f:f4:30:
                    33:a7:a6:eb:f5:89:27:67:a0:34:f7:e0:83:77:9c:
                    88:de:85:8a:26:48:ad:f6:54:6b:7a:24:01:d7:55:
                    a0:8c:74:7e:32:24:e1:40:2f:27:79:d7:52:56:32:
                    c5:89:27:e1:fe:a7:f1:05:9d:a7:25:f5:72:2a:f6:
                    2f:00:01:4b:06:1c:d9:15:7c:81:aa:fc:5b:f8:88:
                    f7:1d:05:60:43:e2:58:32:36:57:cd:1b:2b:bf:33:
                    8e:be:c5:c0:24:73:ed:67:89:d0:c9:ca:33:81:cc:
                    b5:17:f0:80:ec:e7:89:7f:78:af:11:40:83:dc:29:
                    d9:57:23:76:f1:e1:12:4d:57:e0:c7:bd:87:d3:98:
                    92:0b:20:99:50:60:7d:5f:78:44:9b:d3:0f:ce:ff:
                    01:c1:db:cb:11:d8:f0:f2:0e:21:a0:2f:c6:45:b1:
                    44:17:dd:d3:4c:a5:96:7e:73:32:fc:87:c1:87:02:
                    b4:94:82:1c:7b:02:9b:3c:58:81:4d:03:4b:06:9d:
                    ca:23:52:da:e4:55:5e:9e:bf:18:15:77:de:5e:fc:
                    81:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2C:6D:35:E4:93:99:28:E6:81:1F:CC:8C:2C:FA:4C:75:0B:57:87
            X509v3 Authority Key Identifier:
                keyid:A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:06:81:21:97:b6:55:74:01:97:b5:0a:03:54:5c:fb:ad:94:
         8f:db:4b:9a:18:0c:0d:5e:cd:8b:d8:b5:5e:df:8b:6a:75:9d:
         97:de:a2:3c:2b:6a:e2:c2:b9:94:c3:db:b8:f3:8c:5c:46:e8:
         b6:3d:12:90:c2:40:02:ca:83:7a:ca:3b:bd:a5:df:1c:b2:65:
         f8:ea:e7:e1:03:c7:80:ad:ea:ef:07:4b:11:cc:8e:80:8d:e1:
         42:80:09:47:0e:f4:4f:bc:02:c1:2b:a8:df:73:56:b5:e1:1d:
         52:90:8d:d1:53:a4:31:f8:f0:22:b4:e3:2a:52:5f:ea:8a:0e:
         72:b7:89:91:0c:fe:a2:78:2d:0a:c5:20:98:d1:e6:bf:4c:40:
         19:0d:55:3e:f9:3b:ed:10:44:3c:12:3c:88:34:fc:f4:91:fb:
         1a:80:f6:38:5c:bb:f0:c8:34:0c:0b:81:97:17:f1:2a:79:45:
         92:7b:3b:2f:68:c9:ee:7c:41:56:46:bd:fc:ce:42:f5:8d:01:
         08:a7:55:5e:8e:fb:10:5f:87:a0:11:c8:7b:f6:a0:14:bd:5f:
         ff:6f:c6:13:b2:85:82:34:7a:0a:62:89:45:17:ba:48:50:83:
         f3:a9:16:4b:59:c4:6d:f0:17:4b:6a:d4:56:5a:4f:67:dd:bc:
         1f:bf:70:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----