Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.mft
File:                     Vamk1ndOPRyda8EBAHTd-iVAqgI.mft (raw, json)
Hash identifier:          HEdUP+rztZwUiYNFLirqyKkew/b0BncOtzd0nR4SEqI=
Subject key identifier:   DD:80:9A:6E:08:09:9A:94:30:75:CE:A7:23:2E:A3:4C:0B:BB:86:A2
Authority key identifier: 55:A9:A4:D6:77:4E:3D:1C:9D:6B:C1:01:00:74:DD:FA:25:40:AA:02
Certificate issuer:       /CN=F365646EAF/serialNumber=55A9A4D6774E3D1C9D6BC1010074DDFA2540AA02
Certificate serial:       0258
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vamk1ndOPRyda8EBAHTd-iVAqgI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.mft
Manifest number:          0257
Signing time:             Sat 29 Mar 2025 03:05:47 +0000
Manifest this update:     Sat 29 Mar 2025 03:05:47 +0000
Manifest next update:     Mon 31 Mar 2025 03:05:47 +0000
Files and hashes:         1: Vamk1ndOPRyda8EBAHTd-iVAqgI.crl (hash: LHl4dLi0qbqZdfWSE6uPbof9zW6bsqmMHiKjAw708nU=)
                          2: 50E525E4457B11EEB9C84B4D4AD9E6FC.roa (hash: /3fCZ5M7gX+2d2oVslebu/Gi7jYTFXq9ULmP31irCn8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365646EAF
        Validity
            Not Before: Mar 29 03:05:47 2025 GMT
            Not After : Mar 31 03:05:47 2025 GMT
        Subject: CN=67e7638b-3486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:ab:bd:82:bb:0f:00:12:32:c3:6b:02:82:
                    6e:49:d7:88:2c:b0:0d:bf:d2:34:72:90:d0:06:6e:
                    5c:7c:19:b5:67:77:e2:2f:a9:eb:9f:c7:9e:61:93:
                    af:96:ca:f7:30:cf:26:a2:c4:5b:81:00:cd:69:fe:
                    98:8e:1b:cf:1d:73:12:03:79:88:a2:2d:e0:2d:e5:
                    cd:4f:46:51:b9:c1:ed:bd:7e:fd:36:68:19:cb:fa:
                    86:df:58:ff:b3:73:82:38:b0:36:fb:38:64:fe:4c:
                    b9:8e:0b:9f:29:ef:4c:9d:65:52:db:f1:f6:b6:92:
                    97:a9:0f:cf:e4:16:81:91:b3:d6:b0:c3:89:61:22:
                    96:f8:63:d5:e8:89:a1:ac:bd:25:96:8c:70:45:a6:
                    91:5e:8c:93:34:d7:19:d1:7e:8a:64:73:6c:1e:ac:
                    c9:eb:04:81:2f:1c:42:e6:74:63:af:96:af:cc:32:
                    23:ec:8b:4c:e9:2c:2b:35:fc:fa:c8:45:d1:d4:18:
                    51:2c:4e:c4:e6:09:de:30:ea:9f:8f:ef:a8:65:42:
                    ed:36:cf:94:41:9d:f4:ba:e9:60:12:64:96:45:93:
                    11:88:16:ac:95:44:75:8f:60:c4:43:03:39:8e:43:
                    90:de:aa:35:18:f3:cc:01:d9:38:e6:13:f3:f4:6d:
                    10:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:80:9A:6E:08:09:9A:94:30:75:CE:A7:23:2E:A3:4C:0B:BB:86:A2
            X509v3 Authority Key Identifier:
                keyid:55:A9:A4:D6:77:4E:3D:1C:9D:6B:C1:01:00:74:DD:FA:25:40:AA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vamk1ndOPRyda8EBAHTd-iVAqgI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365646E/B0BF4C7A457A11EEA6B33A4B4AD9E6FC/Vamk1ndOPRyda8EBAHTd-iVAqgI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:5b:a4:1b:b5:a8:83:39:f5:2f:99:8d:d5:5c:7b:92:8d:1b:
         f1:0f:b5:3c:00:e1:0d:12:eb:78:c8:76:94:74:0a:32:4e:7b:
         f2:22:8f:c2:91:f2:82:71:30:6c:b6:94:9d:a9:b5:35:81:7c:
         56:ba:fc:bb:27:4d:3e:53:b9:9c:da:93:f1:1f:79:a7:ee:a7:
         27:20:00:0b:6a:89:fb:ec:fd:5d:bf:f4:ce:ea:be:27:8a:71:
         20:f1:38:a5:fa:5f:50:ea:7e:91:23:f0:c9:42:53:19:7a:f8:
         8e:1f:ed:ee:82:57:95:2d:18:7c:bc:3f:a8:46:2e:e8:e0:a6:
         e7:40:33:06:f4:b5:25:63:b2:63:cd:37:25:4c:16:f2:51:40:
         7e:71:33:2f:d1:50:25:db:d3:7b:a8:80:43:69:fa:b5:2a:14:
         bf:b2:23:7b:79:3c:7e:cb:6f:fe:ea:5b:60:f9:7f:fd:16:b7:
         49:f2:a4:0f:66:94:2d:0b:e1:1d:ee:77:f0:5e:5a:98:5f:88:
         13:aa:c4:d8:48:ee:aa:7b:26:5d:db:71:6f:3a:16:33:a3:5b:
         52:82:69:6c:39:eb:a9:79:b3:4b:fd:7c:4e:78:04:a3:be:1e:
         28:72:46:16:90:85:6c:73:b8:30:10:da:e5:84:e5:09:03:d7:
         9f:84:a9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----