Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/mb2B8eMsUHseqNUtIHQXUVd7bIo.mft
File:                     mb2B8eMsUHseqNUtIHQXUVd7bIo.mft (raw, json)
Hash identifier:          DQ1fghaUyse80kyGFirJIjWGGwZEB51lqUXpJTBZPS4=
Subject key identifier:   0D:E9:9F:EA:07:28:75:8C:FC:9E:AA:7F:80:E5:B5:F5:75:83:20:A0
Authority key identifier: 99:BD:81:F1:E3:2C:50:7B:1E:A8:D5:2D:20:74:17:51:57:7B:6C:8A
Certificate issuer:       /CN=F36505B2AF/serialNumber=99BD81F1E32C507B1EA8D52D20741751577B6C8A
Certificate serial:       A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mb2B8eMsUHseqNUtIHQXUVd7bIo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/mb2B8eMsUHseqNUtIHQXUVd7bIo.mft
Manifest number:          A1
Signing time:             Fri 20 Jan 2023 10:04:32 +0000
Manifest this update:     Fri 20 Jan 2023 10:04:31 +0000
Manifest next update:     Sun 22 Jan 2023 10:04:31 +0000
Files and hashes:         1: mb2B8eMsUHseqNUtIHQXUVd7bIo.crl (hash: 9GGPnL4niqgT3xqOh4exbmA/oKPdwP0xhIt51H8T/dU=)
                          2: 58EAFC0E238111EDB7101283F1222468.roa (hash: jC0lNMvg1A9nkBmF+KGBb9m0SCbpHTNLW8X98Fmi6c0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36505B2AF/serialNumber=99BD81F1E32C507B1EA8D52D20741751577B6C8A
        Validity
            Not Before: Jan 20 10:04:31 2023 GMT
            Not After : Jan 22 10:04:31 2023 GMT
        Subject: CN=63ca6730-30a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7f:1d:5c:3f:4c:78:71:14:6e:fe:27:dc:e7:
                    31:03:07:2d:e1:b6:a5:8f:bb:a7:e2:f7:e1:0f:25:
                    53:9e:7a:2c:e9:ca:96:62:86:b6:df:c0:97:78:f9:
                    9a:65:e1:7e:08:e3:64:18:54:56:f6:c2:d7:0c:2a:
                    22:b0:d8:3e:d5:02:44:01:d5:94:58:53:49:7c:cb:
                    e2:4e:66:6e:c0:fe:f1:12:12:47:6d:6b:74:eb:84:
                    4f:be:da:37:39:ca:90:14:5d:86:14:31:a0:2d:49:
                    1a:83:ee:50:76:50:85:ae:80:34:0f:31:41:f4:93:
                    3b:e5:c4:0a:fa:50:a0:28:fc:29:30:5d:cd:a7:e1:
                    64:60:d8:a7:1b:1d:43:4b:96:1f:f4:ca:43:a8:59:
                    f4:30:0f:a1:10:d3:6b:d1:76:e4:ce:a9:73:4c:6b:
                    4a:8a:b1:7e:3e:96:39:07:03:29:b8:71:cd:04:ab:
                    b9:cb:b4:20:9e:f3:85:55:36:61:44:ba:ce:74:f0:
                    7a:fc:ea:46:17:46:58:c3:89:1c:fb:4c:31:2e:60:
                    57:89:fe:f5:f6:db:67:ab:46:78:8d:23:10:1a:39:
                    d5:e6:7a:f7:d1:36:a2:fb:b4:3e:cc:2d:19:02:a9:
                    99:5e:25:0c:06:e7:45:0b:f6:64:52:b6:2d:80:2d:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E9:9F:EA:07:28:75:8C:FC:9E:AA:7F:80:E5:B5:F5:75:83:20:A0
            X509v3 Authority Key Identifier:
                keyid:99:BD:81:F1:E3:2C:50:7B:1E:A8:D5:2D:20:74:17:51:57:7B:6C:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/mb2B8eMsUHseqNUtIHQXUVd7bIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mb2B8eMsUHseqNUtIHQXUVd7bIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/0569917622D711ED862FD6E0F1222468/mb2B8eMsUHseqNUtIHQXUVd7bIo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:98:b9:d0:54:3c:42:43:af:99:8a:b1:04:35:f4:4a:fe:88:
         ab:14:34:e8:b6:58:40:04:d6:ba:49:3d:fa:6e:34:17:90:d0:
         08:0f:22:1e:87:d7:5d:5f:ae:a2:38:9c:24:b9:40:cb:56:74:
         ef:bf:e7:4a:88:63:56:01:7e:cc:9c:85:2e:7e:15:cf:34:8f:
         be:b9:14:4f:be:a9:0e:dd:20:63:67:4c:97:38:66:ab:e1:a3:
         c0:68:dc:b2:ea:8f:33:f1:05:ec:c8:c0:56:04:ad:25:5c:b2:
         7e:e0:e0:a5:91:f9:0a:73:cf:a7:3f:6b:97:dc:ab:dc:1d:b6:
         2b:c1:05:dd:bd:71:43:27:9f:95:fe:47:2d:83:71:f0:f5:29:
         ac:63:7a:f1:84:36:a3:b1:82:62:2f:7c:b7:7e:a5:a1:cd:dc:
         31:02:45:55:30:80:50:6b:cf:6d:ee:10:96:23:38:86:b7:dc:
         d9:1d:d0:d7:3b:5a:1d:7f:69:65:d3:a4:cc:8e:20:49:c5:74:
         7f:3a:cd:e4:1c:52:0c:44:9f:43:b2:eb:e4:4e:c5:3b:c1:48:
         ad:16:32:1a:76:06:07:1a:0a:9c:1d:9b:11:6f:8f:45:9d:b7:
         7f:b6:cc:4a:d6:b8:5d:b0:33:ec:4e:bf:21:c1:c3:f8:7d:ee:
         b8:e1:19:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----