Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
File:                     nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json)
Hash identifier:          U889rseALFJrDVnV9TZW8gwkzK/QVRwhimI+8esVKt4=
Subject key identifier:   9C:CD:A7:40:59:EE:C1:97:B4:D1:27:CA:AB:14:FE:6F:1C:F3:43:38
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Certificate issuer:       /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial:       0E05
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
Manifest number:          0DF9
Signing time:             Sat 29 Mar 2025 00:58:02 +0000
Manifest this update:     Sat 29 Mar 2025 00:58:00 +0000
Manifest next update:     Mon 31 Mar 2025 00:58:00 +0000
Files and hashes:         1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: gT2fyoNL7W77absVPWpN3Qu/AlhEytO4lRZJ7MVf3v0=)
                          2: 0F970AA45DDA11EEA9B9B7884AD9E6FC.roa (hash: FMUt2MM7DebKkBEnbyLy3J47YqdDugPo2mNzNBuOTcI=)
                          3: 1214F7F4585D11E59D5C7317F8AEA228.roa (hash: 0FpgqvuIfv2t7pEzVo665VBSLTVkVC883PZi8zGnUOQ=)
                          4: 4252D1905DDE11EEA38F26174AD9E6FC.roa (hash: YEcxnJNljEbbPt+jZqFFjrHFGQrlfrLBxbAphuQ3lR4=)
                          5: AA2ED722D22511EDA73BE0D2F1222468.roa (hash: Bz6y/9VDXHlj+h8pTwHUCwEbbK4O3DXKaYbf9T3u4Kk=)
                          6: F8A03EA22DD711ED9D0F7E83F1222468.roa (hash: A3D2coJfMGVfkM4t+C0wadunWeeP5Netmzy2NPiOcNE=)
                          7: B52245B0585C11E5AF923917F8AEA228.roa (hash: w98JhuMKbeVGaXUfnIIH2kCqGJut86/4raJT2iIszDU=)
                          8: DAD32A825DD911EE908D0E884AD9E6FC.roa (hash: jYCM5n5GYzsPy5dOD3c0IJ0ltyMzwLsK1AtouHVwLZ0=)
                          9: 67208BD45DDE11EEA367B1174AD9E6FC.roa (hash: dUOADrTH86yUTFdknQpwKyYi7Ckfi6ZQrgp/0K1+5iw=)
                          10: 3EB8BE4ED22611EDAF3CB0D4F1222468.roa (hash: 8rUeH5+hrD/1gu9Yu/+gBbmACyJtB7cXUwPkrzQinJI=)
                          11: 4C3C8DC6585C11E58ADCBB15F8AEA228.roa (hash: ztbK9LFQQYS+tWoyZX54zNQ+XC25dMZgasKrqJ1v5pE=)
                          12: 08DDC9D85DDE11EE97117A164AD9E6FC.roa (hash: YTPBR2O7UMDxBF3Dv5l5lllDC58HOmSCof2QHjhKZws=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3589 (0xe05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36549B1AF
        Validity
            Not Before: Mar 29 00:58:00 2025 GMT
            Not After : Mar 31 00:58:00 2025 GMT
        Subject: CN=67e7459a-ac6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d7:a0:f2:d4:10:49:e9:8f:75:16:b2:a0:9c:
                    86:9b:0a:ad:d3:68:0c:d5:5f:45:e9:22:02:de:3c:
                    4f:e9:b8:c8:7b:fc:f9:6e:f1:ce:12:00:ab:84:d2:
                    f5:19:43:ae:45:e9:fc:6f:3c:08:6a:4f:20:ca:6b:
                    43:06:41:2c:cb:5f:71:31:95:a6:a9:91:36:85:a6:
                    5b:23:0f:1a:5a:a2:83:44:9c:ab:3b:d8:e4:03:b4:
                    9f:9d:39:79:02:6d:09:d2:60:38:d7:8a:c6:7e:35:
                    70:5d:d9:20:06:5a:13:17:21:da:23:7a:94:93:50:
                    a9:b6:77:c9:76:8c:47:bb:01:38:5d:b7:e7:1b:52:
                    03:43:1d:42:ba:cc:82:50:fe:e0:bf:14:ef:cf:12:
                    d1:05:44:b6:71:53:3c:7a:00:44:af:d0:86:da:f7:
                    ed:3d:2e:0a:a0:e2:83:5d:40:7c:3e:4e:d7:ed:48:
                    2e:61:25:2d:f6:0e:f1:7a:38:4a:d1:d2:84:a4:8f:
                    a0:62:39:11:23:bc:8f:1a:1a:8a:89:3b:72:5e:ea:
                    2d:a8:0e:e1:70:35:47:8d:c6:27:fd:40:66:03:43:
                    61:73:8d:06:a3:84:d8:7d:48:1d:b6:03:30:0c:54:
                    f0:93:c4:df:b2:15:cd:5b:95:04:c5:c2:aa:67:09:
                    cb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CD:A7:40:59:EE:C1:97:B4:D1:27:CA:AB:14:FE:6F:1C:F3:43:38
            X509v3 Authority Key Identifier:
                keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:9b:ff:e9:5c:79:61:76:5a:7a:f2:8b:df:8b:ea:62:46:fd:
         e1:db:8d:31:e5:f0:c1:bb:d9:3d:72:72:e7:e7:13:24:cc:c7:
         a3:da:bd:e7:10:6f:53:77:63:c6:6b:65:a1:63:8c:67:ac:f0:
         71:53:cb:2b:72:fc:8e:2d:ba:17:f4:3a:e5:46:a2:14:38:48:
         9d:c7:5a:41:7e:f4:81:51:6b:39:ef:38:14:79:d0:db:d7:6e:
         cd:06:b1:fe:74:ec:24:17:4d:a2:88:05:e7:a4:19:ab:c8:cc:
         92:fd:5c:68:b0:7e:55:4e:0f:d8:30:e1:c0:e7:d3:c0:5e:67:
         33:d8:a8:80:8e:37:d7:0b:83:43:78:ac:10:7d:3d:c5:c5:87:
         81:00:cc:7c:79:f6:5e:72:94:5d:6a:a2:67:2f:86:1c:83:62:
         a4:ac:6f:53:8f:d8:ba:d8:cc:59:39:4b:28:cd:8f:24:cd:17:
         49:f3:13:cd:69:e8:e5:63:47:c2:33:b3:4c:a7:81:6f:7a:54:
         ca:6b:94:f8:e0:28:64:c3:6f:f1:0e:6c:1f:b6:1e:59:e7:5a:
         3a:73:fa:99:aa:24:46:31:95:e6:48:db:59:ad:f4:a1:45:5f:
         e9:cf:67:a9:52:b5:87:c9:d5:9e:a2:1b:d5:79:fd:10:a5:be:
         64:a7:e1:47
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDgUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTQ5QjFBRjExMC8GA1UEBRMoOUYxNzM4M0VCNjY3RTU0N0JBMDBDRkI3RjkxNEY0
Mjg0QzU4NDlDQzAeFw0yNTAzMjkwMDU4MDBaFw0yNTAzMzEwMDU4MDBaMBgxFjAU
BgNVBAMTDTY3ZTc0NTlhLWFjNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDY16Dy1BBJ6Y91FrKgnIabCq3TaAzVX0XpIgLePE/puMh7/Plu8c4SAKuE
0vUZQ65F6fxvPAhqTyDKa0MGQSzLX3ExlaapkTaFplsjDxpaooNEnKs72OQDtJ+d
OXkCbQnSYDjXisZ+NXBd2SAGWhMXIdojepSTUKm2d8l2jEe7AThdt+cbUgNDHUK6
zIJQ/uC/FO/PEtEFRLZxUzx6AESv0Iba9+09Lgqg4oNdQHw+TtftSC5hJS32DvF6
OErR0oSkj6BiOREjvI8aGoqJO3Je6i2oDuFwNUeNxif9QGYDQ2FzjQajhNh9SB22
AzAMVPCTxN+yFc1blQTFwqpnCcs7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnM2n
QFnuwZe00SfKqxT+bxzzQzgwHwYDVR0jBBgwFoAUnxc4PrZn5Ue6AM+3+RT0KExY
ScwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0OUIxL0RGNzg4Qzk4NTYxMzExRTVCMUEwRTM2MEY4QUVBMjI4L254YzRQ
clpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL254YzRQclpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTQ5QjEvREY3ODhDOTg1NjEzMTFFNUIxQTBFMzYwRjhB
RUEyMjgvbnhjNFByWm41VWU2QU0tMy1SVDBLRXhZU2N3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFm//pXHlhdlp68ovfi+piRv3h240x
5fDBu9k9cnLn5xMkzMej2r3nEG9Td2PGa2WhY4xnrPBxU8srcvyOLboX9DrlRqIU
OEidx1pBfvSBUWs57zgUedDb127NBrH+dOwkF02iiAXnpBmryMyS/VxosH5VTg/Y
MOHA59PAXmcz2KiAjjfXC4NDeKwQfT3FxYeBAMx8efZecpRdaqJnL4Ycg2KkrG9T
j9i62MxZOUsozY8kzRdJ8xPNaejlY0fCM7NMp4FvelTKa5T44Chkw2/xDmwfth5Z
51o6c/qZqiRGMZXmSNtZrfShRV/pz2epUrWHydWeohvVef0Qpb5kp+FH
-----END CERTIFICATE-----