Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
File:                     fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft (raw, json)
Hash identifier:          NXkmvLcSmhxb+4Wfm5YdwvQ/E01Jfude6O7NTa64ck0=
Subject key identifier:   BE:E1:53:A3:20:36:57:FA:3F:6D:70:58:87:86:70:C6:8A:E3:20:66
Authority key identifier: 7F:2A:FF:E8:95:FD:28:0C:96:84:1E:CE:C0:DD:7A:59:D3:F2:E5:99
Certificate issuer:       /CN=F3670C40AF/serialNumber=7F2AFFE895FD280C96841ECEC0DD7A59D3F2E599
Certificate serial:       0889
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
Manifest number:          0888
Signing time:             Sat 29 Mar 2025 01:37:34 +0000
Manifest this update:     Sat 29 Mar 2025 01:37:34 +0000
Manifest next update:     Mon 31 Mar 2025 01:37:33 +0000
Files and hashes:         1: fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl (hash: nd0ps2rRWVLO43MGPOQuAzPkWsuhgWJsJvjmp3htD3Q=)
                          2: 9F760182864511E980359A57F8AEA228.roa (hash: JfR+cGc/NacDq66cJcP1mnmtznOSJj3hgdYO7OA0hMI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185 (0x889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AF
        Validity
            Not Before: Mar 29 01:37:34 2025 GMT
            Not After : Mar 31 01:37:33 2025 GMT
        Subject: CN=67e74ede-070f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:84:80:3f:45:9c:21:cc:a5:33:a0:67:62:
                    e0:3a:78:ac:2a:6b:9b:72:f0:92:e2:0a:14:8e:e2:
                    b4:b2:fe:91:aa:c9:e1:2c:09:0b:e8:e1:62:49:c1:
                    9c:99:70:6d:06:fa:75:6b:ff:4b:90:3c:b9:09:2e:
                    71:a1:9d:cf:db:09:e9:2f:36:3c:86:e3:8f:b4:2f:
                    ca:e2:db:bb:d5:eb:a9:99:d4:68:36:83:a1:61:cc:
                    c4:b8:32:5d:19:da:22:d0:37:ed:47:f5:f7:59:f1:
                    04:ba:2e:bf:4d:ad:cb:56:4e:7a:3e:72:72:05:80:
                    c2:b1:9a:71:f0:fb:7d:4a:56:34:84:a7:aa:76:c8:
                    36:38:7c:48:d8:5b:ee:d0:c2:09:b3:71:dd:b5:e9:
                    48:64:38:d1:1b:eb:72:0b:fa:29:12:2e:cb:84:b6:
                    ea:b0:97:65:e5:80:15:a5:41:28:e3:40:e1:7a:fd:
                    80:0a:8f:d9:ac:9b:f2:75:5c:de:24:0d:45:71:ab:
                    b7:a9:6b:04:fa:54:ef:86:63:de:04:a3:e1:1d:fe:
                    59:de:b6:7e:dc:df:f7:7f:88:dd:79:80:6d:c1:14:
                    ed:e3:44:e1:1c:1d:2b:c7:3e:3e:77:b2:1a:69:39:
                    73:37:2c:29:ec:f2:c8:32:80:bc:68:f3:8e:e3:06:
                    f6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E1:53:A3:20:36:57:FA:3F:6D:70:58:87:86:70:C6:8A:E3:20:66
            X509v3 Authority Key Identifier:
                keyid:7F:2A:FF:E8:95:FD:28:0C:96:84:1E:CE:C0:DD:7A:59:D3:F2:E5:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fyr_6JX9KAyWhB7OwN16WdPy5Zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/CD7DA64E864411E9A9D7EB56F8AEA228/fyr_6JX9KAyWhB7OwN16WdPy5Zk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4d:69:f4:dd:4a:26:b2:7a:97:ce:0d:a5:ce:34:f1:5c:77:
         f1:9d:62:d4:a9:98:cd:57:66:2c:3e:fb:31:50:e7:e5:b9:0a:
         32:5a:54:59:1a:fc:56:86:4a:53:9f:8e:75:aa:b1:59:ed:61:
         29:f9:a4:18:30:2f:20:e5:e7:94:80:b5:3c:70:e2:27:08:e6:
         49:da:9d:ce:26:6e:b8:0c:9c:15:80:9c:77:25:bb:e4:a2:a0:
         9a:f6:cb:26:ff:ea:8a:10:58:67:3b:89:91:b6:5f:31:37:e2:
         a9:73:03:67:1a:97:e0:a5:cd:4a:e9:41:44:74:10:b3:cc:0d:
         25:7d:6d:23:81:b9:1d:3c:6d:d3:6b:20:df:1b:7a:cf:82:95:
         34:ed:f4:91:fb:d9:6b:7f:50:54:81:1f:0c:af:22:53:68:ba:
         c7:2b:5f:3f:63:b4:4e:92:8a:41:aa:c5:13:dc:c8:2f:77:4b:
         46:43:99:cf:47:ec:72:68:db:af:68:22:5b:92:da:b6:f8:61:
         3d:9c:6f:1c:25:36:4b:10:53:a0:6d:7d:c4:89:11:b7:59:88:
         26:e4:5f:ae:55:0b:12:43:c0:c0:06:08:8a:99:6c:38:a8:49:
         e7:b2:4c:c0:6a:af:39:ff:5f:4b:4d:a4:24:53:56:7f:d7:a8:
         e7:76:16:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----