Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
File:                     DD2lBSocT7aPxjEmUGBjsCoEIWY.mft (raw, json)
Hash identifier:          JbfNLaMMd4nPGpwAdICQCjxi4ieFVmAQEazKvagFT/Q=
Subject key identifier:   30:1B:14:EA:76:73:E9:23:00:E2:9A:F8:34:A9:79:5C:8F:4D:84:6A
Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
Certificate issuer:       /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Certificate serial:       03ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
Manifest number:          03EB
Signing time:             Sat 29 Mar 2025 02:35:35 +0000
Manifest this update:     Sat 29 Mar 2025 02:35:35 +0000
Manifest next update:     Mon 31 Mar 2025 02:35:35 +0000
Files and hashes:         1: DD2lBSocT7aPxjEmUGBjsCoEIWY.crl (hash: gPzOP68ilroUCKDhJYeFpkuorVxgt07/gQTtcW9kUTQ=)
                          2: 85DF150A4A0111EDBC8B019BF1222468.roa (hash: J0Z0C8a+DkOgBeapJ5WKsqyTDXB+uEMzdHyF0iz3ZIY=)
                          3: 89BEE5CE14B411EDB752D0F4F1222468.roa (hash: gxHiaz+MfliBB76QRhqTW1JJeJt0mkLpc0IJlrSjQm0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674DA7AF
        Validity
            Not Before: Mar 29 02:35:35 2025 GMT
            Not After : Mar 31 02:35:35 2025 GMT
        Subject: CN=67e75c77-2571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9c:09:ad:05:73:f9:4a:ff:da:c6:9c:30:31:
                    0d:cb:9c:d5:48:38:36:c7:03:37:15:b7:03:64:88:
                    33:07:e6:d5:35:cb:2f:46:ac:3b:0a:44:c4:21:30:
                    e5:5d:b2:96:ea:91:79:32:db:3d:c8:42:0d:1e:c6:
                    99:9d:76:63:07:71:a5:14:c9:b4:db:fc:17:0b:f8:
                    47:bd:73:1b:a9:eb:86:f0:b0:de:7e:66:30:63:ac:
                    1f:da:fa:1c:79:50:2b:0d:24:56:af:bf:8c:46:86:
                    d6:49:c2:64:71:a8:08:8f:c1:c6:1a:26:6d:71:97:
                    3c:b7:5d:0b:90:43:e8:5c:a1:38:8f:74:30:be:15:
                    6d:ad:7f:51:64:70:4e:b0:93:35:f9:b5:be:d2:b9:
                    aa:e3:90:4f:66:42:ab:8a:79:d7:cb:24:ce:87:94:
                    1f:c0:76:db:f2:1d:69:b0:16:a7:20:73:54:12:6c:
                    7b:8f:8b:f4:f5:47:44:ab:03:dc:d9:4e:a1:9d:2f:
                    80:03:23:f7:89:8e:30:c5:a8:26:11:3a:7b:c4:bb:
                    6e:83:62:ca:e5:f9:e7:35:8b:a4:38:5d:d1:67:87:
                    cd:0b:8f:88:6c:1e:6f:7e:68:c2:df:a7:47:99:d8:
                    72:f3:32:85:81:b3:8a:cd:80:d8:e6:2d:9b:b6:de:
                    f6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1B:14:EA:76:73:E9:23:00:E2:9A:F8:34:A9:79:5C:8F:4D:84:6A
            X509v3 Authority Key Identifier:
                keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0d:0b:62:ec:ca:98:ac:ec:b8:06:e2:17:0b:2e:4a:29:b9:
         00:7e:ed:09:92:60:5e:a1:27:81:55:41:e3:9a:d1:f5:a1:91:
         f4:e2:5f:6c:59:cb:c5:3c:64:43:24:2e:75:ab:03:05:ec:e1:
         4d:37:2f:6f:50:99:4b:3d:6b:3a:c4:0a:84:4a:e8:34:6f:f4:
         f8:4b:13:83:d0:88:9a:bc:48:0f:47:53:87:56:2a:0f:3d:aa:
         d6:70:ef:2b:8e:84:f3:06:ba:47:28:50:5b:b2:77:0c:9e:62:
         3a:06:3a:9d:cc:41:f1:73:3b:8e:ad:3f:e9:c3:a5:db:07:90:
         65:f1:27:6f:cf:aa:df:eb:15:82:4f:ef:ad:c2:10:28:cc:93:
         6e:01:73:99:8c:b9:7f:90:b8:0b:ee:8e:1f:cc:48:bc:03:5a:
         8f:7e:32:11:88:3d:3f:ee:82:4d:08:04:9a:87:55:44:83:b0:
         e8:c7:3a:9d:ef:38:df:35:94:07:bf:09:f4:f2:75:0e:38:41:
         ef:be:2a:22:22:37:73:0f:06:a1:d8:10:05:aa:9a:9a:24:86:
         bd:ae:11:10:ac:68:af:fa:3d:2a:8e:1d:ee:27:fb:16:2a:0b:
         45:26:62:2a:ea:75:de:ac:b6:2a:9c:bb:03:c8:bd:95:2d:97:
         4a:7c:78:fb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzREQTdBRjExMC8GA1UEBRMoMEMzREE1MDUyQTFDNEZCNjhGQzYzMTI2NTA2MDYz
QjAyQTA0MjE2NjAeFw0yNTAzMjkwMjM1MzVaFw0yNTAzMzEwMjM1MzVaMBgxFjAU
BgNVBAMTDTY3ZTc1Yzc3LTI1NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDinAmtBXP5Sv/axpwwMQ3LnNVIODbHAzcVtwNkiDMH5tU1yy9GrDsKRMQh
MOVdspbqkXky2z3IQg0expmddmMHcaUUybTb/BcL+Ee9cxup64bwsN5+ZjBjrB/a
+hx5UCsNJFavv4xGhtZJwmRxqAiPwcYaJm1xlzy3XQuQQ+hcoTiPdDC+FW2tf1Fk
cE6wkzX5tb7SuarjkE9mQquKedfLJM6HlB/AdtvyHWmwFqcgc1QSbHuPi/T1R0Sr
A9zZTqGdL4ADI/eJjjDFqCYROnvEu26DYsrl+ec1i6Q4XdFnh80Lj4hsHm9+aMLf
p0eZ2HLzMoWBs4rNgNjmLZu23vbzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMBsU
6nZz6SMA4pr4NKl5XI9NhGowHwYDVR0jBBgwFoAUDD2lBSocT7aPxjEmUGBjsCoE
IWYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0REE3L0M2NjFFRTZFMTRCMzExRURBMTIzNjhGMkYxMjIyNDY4L0REMmxC
U29jVDdhUHhqRW1VR0Jqc0NvRUlXWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0REMmxCU29jVDdhUHhqRW1VR0Jqc0NvRUlXWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzREQTcvQzY2MUVFNkUxNEIzMTFFREExMjM2OEYyRjEy
MjI0NjgvREQybEJTb2NUN2FQeGpFbVVHQmpzQ29FSVdZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9DQti7MqYrOy4BuIXCy5KKbkAfu0J
kmBeoSeBVUHjmtH1oZH04l9sWcvFPGRDJC51qwMF7OFNNy9vUJlLPWs6xAqESug0
b/T4SxOD0IiavEgPR1OHVioPParWcO8rjoTzBrpHKFBbsncMnmI6BjqdzEHxczuO
rT/pw6XbB5Bl8Sdvz6rf6xWCT++twhAozJNuAXOZjLl/kLgL7o4fzEi8A1qPfjIR
iD0/7oJNCASah1VEg7Doxzqd7zjfNZQHvwn08nUOOEHvvioiIjdzDwah2BAFqpqa
JIa9rhEQrGiv+j0qjh3uJ/sWKgtFJmIq6nXerLYqnLsDyL2VLZdKfHj7
-----END CERTIFICATE-----