Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
File:                     AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft (raw, json)
Hash identifier:          lD2F+QhMaM8Yg3BDwzgn05StVKtL1JRLmn4tUAs8eLA=
Subject key identifier:   13:60:08:EB:FE:1E:D9:36:B3:62:A1:A0:C1:72:75:4F:F5:79:B5:0D
Authority key identifier: 01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69
Certificate issuer:       /CN=F367278DAF/serialNumber=019C57AF353AA8DDD6AE5D19B551EE045EF0E469
Certificate serial:       0205
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
Manifest number:          0204
Signing time:             Sat 29 Mar 2025 03:11:36 +0000
Manifest this update:     Sat 29 Mar 2025 03:11:35 +0000
Manifest next update:     Mon 31 Mar 2025 03:11:35 +0000
Files and hashes:         1: AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl (hash: Vs1QZmFnl6qxjS+cTbniLKkPhsWJqFMbEXex8xR03vI=)
                          2: C450DAB0852B11EEA03755784AD9E6FC.roa (hash: +41zmHN4DGC6b99Vfy5ZDUkMkjOSaYpSIq26rSH1w4E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367278DAF
        Validity
            Not Before: Mar 29 03:11:35 2025 GMT
            Not After : Mar 31 03:11:35 2025 GMT
        Subject: CN=67e764e8-1998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:e7:ea:ab:c7:78:ee:57:3c:5f:2b:8e:9e:
                    9b:4f:1f:40:85:20:98:52:2f:ee:57:34:03:d7:51:
                    b4:06:8d:be:79:0a:61:0b:9f:f0:e1:e4:cd:52:db:
                    21:da:fe:cc:d5:b5:7c:15:57:d7:95:ba:e7:e2:82:
                    8e:a9:97:76:e2:2d:86:b8:60:4d:97:6c:5b:a0:53:
                    a2:fc:85:23:27:b0:ff:c9:6b:a3:d6:30:57:3a:16:
                    40:aa:7b:33:f8:c2:a5:3d:1a:dc:d2:84:d6:2b:7c:
                    7a:8c:19:bc:19:37:9b:d3:29:e6:c0:4f:1a:85:c7:
                    70:00:0e:73:58:88:c9:c0:01:bb:4d:1f:a3:7a:8e:
                    01:d0:7c:66:c6:df:f3:15:91:3e:0e:48:96:f2:fc:
                    cb:24:f9:1e:20:47:6c:83:bc:bc:43:a9:0f:e5:3e:
                    0d:af:8e:12:c4:07:67:14:63:74:e2:76:ac:d6:c4:
                    2d:51:79:c7:5e:2f:f8:55:5a:c8:7d:0b:2c:b2:5d:
                    72:c8:1c:f9:b4:4a:59:b3:70:21:51:a7:6e:d5:bf:
                    c6:9a:a1:06:80:79:43:35:1e:99:fc:00:00:48:bf:
                    4e:71:9d:a8:44:c9:5d:7c:15:ff:40:10:66:cb:60:
                    ef:64:8e:68:cb:b4:ed:f6:06:0f:43:c1:64:2b:5d:
                    36:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:60:08:EB:FE:1E:D9:36:B3:62:A1:A0:C1:72:75:4F:F5:79:B5:0D
            X509v3 Authority Key Identifier:
                keyid:01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:db:e2:e7:a5:23:d7:61:fd:b6:59:76:06:10:a2:2b:41:dd:
         48:8c:fe:5d:c3:84:2f:88:41:1f:8e:7e:b8:aa:3d:63:89:f5:
         ed:f8:d8:6c:3f:ae:d1:9e:3f:82:c9:40:b1:4f:21:19:80:e0:
         57:59:c0:43:05:c5:05:6b:46:a4:e6:ee:43:ce:74:e6:eb:07:
         e4:37:de:0a:fa:04:2e:52:8e:2f:f8:7c:2d:eb:6c:64:70:6f:
         50:76:6e:8d:bf:a6:55:12:52:c3:4f:14:18:0a:33:06:f2:8a:
         93:64:1f:3d:d6:84:a0:8e:61:24:1f:67:03:4d:e9:b0:85:ea:
         d5:71:7d:2d:c9:5a:b6:a2:86:95:3e:7c:1e:53:17:77:dc:35:
         b3:8a:8e:32:3c:b2:a1:33:ca:eb:1a:fb:d4:a2:c2:86:de:95:
         66:6b:0c:78:a8:45:25:d6:17:e8:b7:9e:05:6d:a6:f0:da:20:
         d2:c2:e4:7b:95:93:a3:b8:9f:ba:1f:a7:0c:8b:58:29:36:0a:
         28:bd:eb:af:cc:87:ec:13:4f:ad:8b:84:f1:94:c6:d2:55:55:
         29:73:66:a7:95:46:10:0f:40:27:44:97:19:05:b5:a8:3b:7c:
         f7:78:ab:e9:40:ce:69:05:5a:02:54:df:1b:f4:35:21:62:c7:
         4e:86:89:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----