Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CAA/BF3D18AA5AAF11E98D1CFE77F8AEA228/acTmnBikpPpiNxFnY9x8nZs3VvI.mft
File:                     acTmnBikpPpiNxFnY9x8nZs3VvI.mft (raw, json)
Hash identifier:          8u6k+tIn6WpSEEC3D1Y+UdGXOSfgEcqbHjv0Qs+ffW4=
Subject key identifier:   2E:3A:07:52:0A:32:D0:F4:7D:6D:30:E6:25:3B:BB:C9:91:95:15:97
Authority key identifier: 69:C4:E6:9C:18:A4:A4:FA:62:37:11:67:63:DC:7C:9D:9B:37:56:F2
Certificate issuer:       /CN=F3668CAAAR/serialNumber=69C4E69C18A4A4FA6237116763DC7C9D9B3756F2
Certificate serial:       0590
Authority info access:    rsync://rpki.afrinic.net/repository/arin/acTmnBikpPpiNxFnY9x8nZs3VvI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/BF3D18AA5AAF11E98D1CFE77F8AEA228/acTmnBikpPpiNxFnY9x8nZs3VvI.mft
Manifest number:          058A
Signing time:             Fri 20 Jan 2023 00:49:18 +0000
Manifest this update:     Fri 20 Jan 2023 00:49:18 +0000
Manifest next update:     Sun 22 Jan 2023 00:49:18 +0000
Files and hashes:         1: acTmnBikpPpiNxFnY9x8nZs3VvI.crl (hash: Q9DtTIeN7t0ixcaBdPz6d+f7ALhslyXUulkJZ76bgFg=)
                          2: D517E75C9C5911EB9B92A219F8AEA228.roa (hash: +tfCf3CxVrJGRIHm73LMruImKrYcjsq3c6jAW1uYXvg=)
                          3: 2E338F385AB411E9B25DA97BF8AEA228.roa (hash: fVMeIC12J8ZkCINj0pPKqwn7YeHgIgWUl8YCmwa8V1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1424 (0x590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CAAAR/serialNumber=69C4E69C18A4A4FA6237116763DC7C9D9B3756F2
        Validity
            Not Before: Jan 20 00:49:18 2023 GMT
            Not After : Jan 22 00:49:18 2023 GMT
        Subject: CN=63c9e50e-decb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:5d:34:b7:fb:d1:f8:b6:c2:0d:c1:5e:63:
                    ba:f8:35:03:3d:2b:76:37:d4:14:83:41:3a:f1:f8:
                    47:2c:15:eb:09:f9:ef:60:41:55:01:ce:fa:ef:30:
                    cb:a8:9b:ff:0c:cc:87:7c:6c:1f:52:81:fc:5b:99:
                    1b:aa:e6:9f:ce:7e:cb:63:c5:e6:e8:61:4b:c6:ed:
                    00:29:90:cc:76:f3:6a:df:b3:a5:38:9c:0c:22:a7:
                    d1:43:18:1b:ba:1d:52:77:7a:82:1c:42:88:ff:0e:
                    4b:9c:07:27:f4:f0:04:e7:d9:40:15:fe:56:9b:3c:
                    d6:c4:25:98:d7:c9:63:25:36:2f:d6:56:0b:0f:ac:
                    c9:85:dc:aa:5d:79:29:e4:9d:f4:50:5c:34:3d:63:
                    cc:42:4b:ef:f2:99:d2:c9:9d:9f:c3:7a:c9:d3:75:
                    d8:32:1d:cd:87:54:67:d3:82:93:1a:25:7a:27:c9:
                    97:12:4f:62:74:a7:b6:81:01:db:a9:0b:f9:b2:9a:
                    82:7d:d9:6a:48:56:0c:8a:12:fb:d2:f7:6a:59:fb:
                    67:8f:d1:06:99:aa:9f:36:79:1d:2a:5d:c8:35:de:
                    ef:34:d2:c0:7a:12:ad:72:ec:23:30:78:42:b5:2f:
                    92:20:19:c6:8b:95:33:ec:22:7a:6e:10:1c:13:4a:
                    f3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3A:07:52:0A:32:D0:F4:7D:6D:30:E6:25:3B:BB:C9:91:95:15:97
            X509v3 Authority Key Identifier:
                keyid:69:C4:E6:9C:18:A4:A4:FA:62:37:11:67:63:DC:7C:9D:9B:37:56:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/BF3D18AA5AAF11E98D1CFE77F8AEA228/acTmnBikpPpiNxFnY9x8nZs3VvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/acTmnBikpPpiNxFnY9x8nZs3VvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CAA/BF3D18AA5AAF11E98D1CFE77F8AEA228/acTmnBikpPpiNxFnY9x8nZs3VvI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f6:04:49:84:df:08:54:ce:43:69:22:c4:ab:aa:f2:30:4a:
         07:2c:3f:25:c8:81:9b:96:8b:c1:63:e4:ea:b3:fa:54:af:e9:
         ab:c0:5a:c4:bb:e8:d1:a6:54:a6:8b:f4:57:01:5b:e1:8c:37:
         2e:7e:4a:ed:f8:bd:22:b8:a6:35:1d:e7:af:6e:ef:73:97:20:
         74:c7:67:a2:d0:08:d7:0b:50:4b:dc:c1:cc:b8:c7:0f:34:63:
         a1:19:10:b2:3c:63:14:14:9b:ce:f4:ba:3f:90:56:01:fb:e4:
         88:fc:b5:cc:ad:b8:61:44:aa:eb:29:63:6f:8b:7b:ae:fb:08:
         29:6a:45:57:0b:4f:00:ee:e4:49:38:9f:2e:a0:7a:b6:5e:c1:
         22:e5:ed:9a:91:cc:c1:7e:e3:c7:74:8e:6c:3e:6e:38:50:09:
         33:ed:7e:7d:03:33:b1:f0:78:f6:27:63:51:89:13:e8:fc:15:
         73:1a:c4:cd:e9:59:ac:5b:dd:4e:f6:89:af:c3:88:99:91:5e:
         01:04:b1:9d:3c:07:35:08:19:01:e7:76:d5:cd:74:28:88:32:
         fd:9e:f4:58:14:2b:2d:69:8a:67:33:7a:6d:a3:7d:7d:16:88:
         c6:99:01:c2:71:bd:33:b9:9f:fc:dd:b2:a8:a6:b4:53:eb:fd:
         fe:3f:8d:36
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBZAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjhDQUFBUjExMC8GA1UEBRMoNjlDNEU2OUMxOEE0QTRGQTYyMzcxMTY3NjNEQzdD
OUQ5QjM3NTZGMjAeFw0yMzAxMjAwMDQ5MThaFw0yMzAxMjIwMDQ5MThaMBgxFjAU
BgNVBAMMDTYzYzllNTBlLWRlY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6rV00t/vR+LbCDcFeY7r4NQM9K3Y31BSDQTrx+EcsFesJ+e9gQVUBzvrv
MMuom/8MzId8bB9SgfxbmRuq5p/OfstjxeboYUvG7QApkMx282rfs6U4nAwip9FD
GBu6HVJ3eoIcQoj/DkucByf08ATn2UAV/labPNbEJZjXyWMlNi/WVgsPrMmF3Kpd
eSnknfRQXDQ9Y8xCS+/ymdLJnZ/DesnTddgyHc2HVGfTgpMaJXonyZcST2J0p7aB
AdupC/mymoJ92WpIVgyKEvvS92pZ+2eP0QaZqp82eR0qXcg13u800sB6Eq1y7CMw
eEK1L5IgGcaLlTPsInpuEBwTSvMZAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQULjoH
Ugoy0PR9bTDmJTu7yZGVFZcwHwYDVR0jBBgwFoAUacTmnBikpPpiNxFnY9x8nZs3
VvIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4Q0FBL0JGM0QxOEFBNUFBRjExRTk4RDFDRkU3N0Y4QUVBMjI4L2FjVG1u
QmlrcFBwaU54Rm5ZOXg4blpzM1Z2SS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2FjVG1uQmlrcFBwaU54Rm5ZOXg4blpzM1Z2SS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjhDQUEvQkYzRDE4QUE1QUFGMTFFOThEMUNGRTc3RjhBRUEy
MjgvYWNUbW5CaWtwUHBpTnhGblk5eDhuWnMzVnZJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAw9gRJhN8IVM5DaSLEq6ryMEoHLD8lyIGb
lovBY+Tqs/pUr+mrwFrEu+jRplSmi/RXAVvhjDcufkrt+L0iuKY1Heevbu9zlyB0
x2ei0AjXC1BL3MHMuMcPNGOhGRCyPGMUFJvO9Lo/kFYB++SI/LXMrbhhRKrrKWNv
i3uu+wgpakVXC08A7uRJOJ8uoHq2XsEi5e2akczBfuPHdI5sPm44UAkz7X59AzOx
8Hj2J2NRiRPo/BVzGsTN6VmsW91O9omvw4iZkV4BBLGdPAc1CBkB53bVzXQoiDL9
nvRYFCstaYpnM3pto319FojGmQHCcb0zuZ/83bKoprRT6/3+P402
-----END CERTIFICATE-----