Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
File:                     FrjfWzvnTBrmjjHBcBFapze9XnA.mft (raw, json)
Hash identifier:          jKY1yNxeXEQSLXJ2j9XKzsuZxpcv67GjL1yVZKLPGCY=
Subject key identifier:   62:C9:8D:BB:14:BA:6F:97:7B:7A:4B:D3:1C:D1:15:CF:43:FA:B1:B6
Authority key identifier: 16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70
Certificate issuer:       /CN=F3668A5FAF/serialNumber=16B8DF5B3BE74C1AE68E31C170115AA737BD5E70
Certificate serial:       0529
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
Manifest number:          0528
Signing time:             Sat 29 Mar 2025 02:17:29 +0000
Manifest this update:     Sat 29 Mar 2025 02:17:29 +0000
Manifest next update:     Mon 31 Mar 2025 02:17:29 +0000
Files and hashes:         1: FrjfWzvnTBrmjjHBcBFapze9XnA.crl (hash: 6/KGmo8n8Tshb8hNyAgFVuShLRDYH8Wl9BCZ3LzIebM=)
                          2: DF0B42061D3011ECBD63FB02D8A014CE.roa (hash: /YQXCdcgCrNhLL360EhRhY7BDY5J8NgmUeOOyfGlQ8Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1321 (0x529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668A5FAF
        Validity
            Not Before: Mar 29 02:17:29 2025 GMT
            Not After : Mar 31 02:17:29 2025 GMT
        Subject: CN=67e75839-4623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:c1:aa:b6:9e:17:9b:2d:e1:39:1a:de:08:
                    5f:73:1a:53:d3:4d:b8:62:24:b0:54:fe:72:1a:eb:
                    e8:4b:90:3d:bb:53:e7:29:5d:b4:5c:b4:46:e7:0f:
                    10:79:27:b2:7a:bb:30:da:ef:7a:a2:1e:be:39:3f:
                    49:a8:f8:76:76:b9:6b:9b:ed:76:49:ff:b9:35:4d:
                    b1:0f:fe:87:40:a2:a3:10:7e:a4:23:d5:5c:de:5c:
                    8d:fd:e7:93:31:60:7e:fd:ad:2e:71:2e:78:17:1f:
                    ae:8d:6a:a0:90:13:dd:26:ca:fe:69:d5:30:de:09:
                    fc:28:39:37:ae:27:2c:e3:69:5c:b5:4e:09:7f:bc:
                    2b:38:dc:7a:86:81:2e:52:cf:2d:f1:fe:1d:a0:9e:
                    3b:fe:57:ce:e4:af:8d:48:93:e0:05:43:17:4f:96:
                    12:17:1e:6d:28:0a:1b:93:23:f3:ff:9f:a9:bd:3b:
                    46:6d:b0:24:62:22:6c:9c:01:ee:d1:de:27:3a:b6:
                    e1:5c:db:cc:fb:68:22:cc:7c:c5:1c:10:7d:e7:77:
                    30:f7:58:8f:e0:01:1e:97:e0:ff:9d:25:f1:fa:b2:
                    39:23:4a:0b:53:ee:34:c2:53:9e:3c:be:d1:43:35:
                    ca:de:8c:8d:2c:9a:51:b0:77:d6:a2:50:ec:f7:81:
                    f1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C9:8D:BB:14:BA:6F:97:7B:7A:4B:D3:1C:D1:15:CF:43:FA:B1:B6
            X509v3 Authority Key Identifier:
                keyid:16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:8d:95:6b:68:05:43:47:d1:78:b1:ad:99:c1:2c:9b:a1:92:
         bc:90:7d:87:04:2b:f6:eb:d0:83:36:5d:75:a4:e4:21:ae:f9:
         ba:91:90:bd:cb:76:f6:a2:39:18:7f:ce:43:3b:b8:78:07:8a:
         ac:45:46:13:3e:70:f1:89:56:91:2a:0b:72:60:df:df:a5:95:
         6e:7b:c9:5e:f7:88:14:f9:97:2e:ea:cf:dc:c3:77:86:46:73:
         0e:d1:37:75:45:57:0e:ce:59:88:f6:75:ca:0a:66:2c:93:df:
         f1:04:92:72:75:49:1d:e4:db:96:27:13:b1:6b:7a:62:0f:bf:
         88:b0:2a:cf:b7:ec:f4:b0:44:c8:81:3d:e5:1d:b1:fa:be:5b:
         33:fb:17:be:bd:bd:85:6a:b6:32:4d:73:9f:b3:42:01:26:8f:
         72:09:51:8d:44:b4:c5:cb:da:25:80:87:9f:09:f6:44:0b:4f:
         21:64:3d:74:d8:11:c0:0c:e1:7e:9c:a7:59:83:9b:d0:f0:36:
         4c:6e:e0:d7:39:d7:7c:07:6e:40:7a:80:de:68:60:fe:a5:5a:
         4d:90:a4:18:97:fe:d8:68:67:81:d2:a7:42:0b:30:7e:63:56:
         e8:cd:78:b8:e8:76:62:56:1b:d0:49:ec:1d:31:ee:7f:49:e3:
         25:fc:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----