Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/ajEj09qLvBGNPABC9HmTsxb2THc.mft
File:                     ajEj09qLvBGNPABC9HmTsxb2THc.mft (raw, json)
Hash identifier:          9M1GfBfPnNkIjDxoMFeO4b8E4o4k2hwOVH68XkGrU8U=
Subject key identifier:   AD:BF:FE:65:33:8C:11:00:AB:2C:EC:C7:14:77:BB:16:02:6E:0F:11
Authority key identifier: 6A:31:23:D3:DA:8B:BC:11:8D:3C:00:42:F4:79:93:B3:16:F6:4C:77
Certificate issuer:       /CN=F3657687AF/serialNumber=6A3123D3DA8BBC118D3C0042F47993B316F64C77
Certificate serial:       0230
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ajEj09qLvBGNPABC9HmTsxb2THc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/ajEj09qLvBGNPABC9HmTsxb2THc.mft
Manifest number:          022E
Signing time:             Mon 18 Mar 2024 01:59:27 +0000
Manifest this update:     Mon 18 Mar 2024 01:59:26 +0000
Manifest next update:     Wed 20 Mar 2024 01:59:26 +0000
Files and hashes:         1: ajEj09qLvBGNPABC9HmTsxb2THc.crl (hash: tzX/+62erzsmkIKG6Vi5ky4Ivc0R6b3Vfn3Keo/nZOQ=)
                          2: 0948D8EE4ABC11EDBAB6B182F1222468.roa (hash: J6Km21jhg8epLEBYKvNSv3hVw0p/Xknhtr8HUAcTJAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3657687AF/serialNumber=6A3123D3DA8BBC118D3C0042F47993B316F64C77
        Validity
            Not Before: Mar 18 01:59:26 2024 GMT
            Not After : Mar 20 01:59:26 2024 GMT
        Subject: CN=65f79ffe-c2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1b:ef:9c:25:c6:0e:83:4d:62:da:e8:96:cc:
                    05:14:26:79:60:d1:50:28:77:a4:fb:fa:4c:c9:4c:
                    fc:16:8c:08:5c:89:60:a0:a1:9f:84:27:27:2e:07:
                    0c:ac:ad:0b:73:d2:97:50:ba:30:28:d5:54:dc:e1:
                    01:e8:b0:b1:40:88:aa:29:8a:31:c3:0a:87:f0:2f:
                    53:b3:7f:82:6b:bc:69:de:39:95:ab:88:23:6e:d2:
                    f3:a5:66:46:5b:5b:8c:81:4b:aa:71:1b:7d:88:e2:
                    3a:9c:2a:f2:12:5b:2d:19:ab:44:c5:64:32:c5:6b:
                    cc:f5:30:5f:ec:d0:90:d9:d5:fc:4c:1e:a3:cd:c5:
                    01:6c:68:03:4d:16:88:ad:99:17:ec:78:76:f1:12:
                    96:6e:24:e0:98:12:65:bc:94:20:8e:fc:a5:6c:35:
                    16:32:b7:e1:a2:d2:b7:87:71:de:9a:bf:cb:0a:14:
                    df:01:d4:ac:c6:78:11:cf:b3:79:94:66:e9:15:f3:
                    55:0f:22:c9:67:40:4d:da:b4:ce:28:48:8f:dc:e6:
                    bd:8b:4f:c4:13:88:0b:47:12:51:db:dd:87:86:90:
                    eb:54:17:9f:ed:f1:fa:e5:8b:74:88:c9:4f:39:e1:
                    36:8f:6c:ce:4a:d0:8a:c1:48:23:66:90:60:e7:d2:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BF:FE:65:33:8C:11:00:AB:2C:EC:C7:14:77:BB:16:02:6E:0F:11
            X509v3 Authority Key Identifier:
                keyid:6A:31:23:D3:DA:8B:BC:11:8D:3C:00:42:F4:79:93:B3:16:F6:4C:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/ajEj09qLvBGNPABC9HmTsxb2THc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ajEj09qLvBGNPABC9HmTsxb2THc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657687/0CDC263C44EA11ED8801C5D5F1222468/ajEj09qLvBGNPABC9HmTsxb2THc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:db:58:d4:8a:d9:b9:78:5a:be:13:75:68:71:1c:2c:8f:ce:
         3a:99:49:6a:40:1a:a8:81:cb:80:7a:a1:80:20:58:c0:c7:60:
         c1:1c:e7:ad:d1:04:f1:4c:9e:27:8e:ee:77:4b:f4:74:12:81:
         ca:8e:43:20:fc:8a:6b:f7:72:2e:0e:93:01:5b:3a:e5:39:38:
         80:a3:8e:71:29:cc:c5:56:41:ba:3a:91:30:5a:6a:fd:e4:5a:
         b4:34:1c:68:09:41:bc:54:5c:7e:4b:43:94:e5:a9:7f:53:8c:
         d2:4d:52:ec:69:1f:a3:e8:fd:74:63:ee:5f:68:0b:3f:5e:e9:
         ba:77:8c:d7:36:36:c9:9c:29:33:0f:b8:55:bc:8b:44:f9:1b:
         67:bd:8e:35:35:77:24:df:79:3d:ad:79:69:c7:fa:7f:62:8e:
         13:89:70:12:eb:61:90:0e:37:87:7f:69:b7:04:6d:90:26:96:
         ad:8c:d5:30:5e:8a:42:06:22:1d:75:0e:b5:c9:7a:e5:53:2d:
         e1:b2:df:c9:2f:27:43:79:9b:fb:2b:3a:e1:ec:5b:d6:f3:72:
         dc:69:a6:89:89:f9:c9:98:57:b6:1b:89:92:46:3b:9e:9e:fb:
         6c:20:09:99:b8:22:43:1b:0e:a6:ad:02:29:ec:45:ce:cf:01:
         19:f3:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----