Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
File:                     xlOxWlDuQwH_JY2KKnwYY4PFDro.mft (raw, json)
Hash identifier:          cgOCRDSZQNJPA33etZf2yRvyYqKxlDHsqYFg7X1ocmc=
Subject key identifier:   A0:72:F6:E4:A4:75:86:AF:CC:14:22:FF:FA:85:C6:57:01:F6:D9:E1
Authority key identifier: C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA
Certificate issuer:       /CN=F367D68CAF/serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
Certificate serial:       05DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
Manifest number:          05DD
Signing time:             Sat 29 Mar 2025 02:03:20 +0000
Manifest this update:     Sat 29 Mar 2025 02:03:19 +0000
Manifest next update:     Mon 31 Mar 2025 02:03:19 +0000
Files and hashes:         1: xlOxWlDuQwH_JY2KKnwYY4PFDro.crl (hash: HacQhKLX9yD5NWEeeUO5yFQSDnoasLDienvh/0FpdIg=)
                          2: 69EE67B4920711EBA4D68A7DF8AEA228.roa (hash: PWOhXQJ0fibjAAccGAeAnloClqV+BwPlt2KmVpD849M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D68CAF
        Validity
            Not Before: Mar 29 02:03:19 2025 GMT
            Not After : Mar 31 02:03:19 2025 GMT
        Subject: CN=67e754e8-ba10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:f0:13:98:ad:ec:fb:8d:cf:11:ea:66:fd:
                    e3:4a:50:16:0b:a9:67:4f:76:e2:02:5f:3e:45:08:
                    fb:05:9e:57:ff:96:61:1b:90:3d:96:2c:bf:06:fa:
                    fe:83:8b:f7:d8:5f:aa:91:9b:72:aa:03:f8:61:5b:
                    ec:35:70:06:38:78:c6:47:e6:0e:7d:92:82:be:8d:
                    46:b1:e6:7c:53:0e:49:d6:51:43:f4:01:1f:cd:7d:
                    e0:a6:74:92:d7:6a:d2:a9:85:b7:8c:14:74:c8:91:
                    5f:e3:60:20:db:ca:90:ec:f6:c3:d3:8a:48:b9:23:
                    73:51:fa:b5:c8:2a:2b:29:33:40:c4:73:87:cb:53:
                    16:fc:7f:cf:b4:81:e6:c8:c6:b6:ab:b7:e3:46:91:
                    49:ec:54:f6:d4:1d:10:4d:ef:a0:0c:be:c1:7d:77:
                    85:be:2f:7f:89:db:3f:6b:55:0b:fd:8f:10:c2:27:
                    6b:7b:01:84:08:d3:69:ec:39:69:f1:5f:ff:30:93:
                    42:d5:3d:b1:ed:d1:8c:27:2b:a8:fc:29:12:64:97:
                    3d:86:1e:4a:cf:ca:c3:1b:fb:ea:ef:af:11:09:f9:
                    de:e7:0f:da:24:85:cc:b3:c4:29:1e:0b:0c:0f:5f:
                    3f:af:cb:11:7a:06:8e:d5:09:39:50:e2:f3:b1:28:
                    b6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:72:F6:E4:A4:75:86:AF:CC:14:22:FF:FA:85:C6:57:01:F6:D9:E1
            X509v3 Authority Key Identifier:
                keyid:C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e2:ef:8e:22:57:59:30:70:11:ae:6f:1c:b0:f5:16:fb:54:
         4a:bc:7a:4e:ab:20:fa:4b:1c:23:05:1c:44:92:0f:8c:7a:ec:
         b2:8f:2f:34:ba:21:55:fc:8b:4d:04:88:6a:a9:0f:83:db:1e:
         0c:e6:9d:3e:ac:cf:4c:b6:b7:47:89:0b:fa:35:81:b9:d6:02:
         22:d9:e9:13:c3:d3:94:87:01:de:5b:74:5b:45:41:94:55:f0:
         e7:0f:16:07:07:9f:ac:39:ee:ad:a8:a7:c1:95:25:10:00:b2:
         ce:87:38:96:35:03:58:bb:43:2f:a0:88:4e:dd:57:37:39:ac:
         22:c2:1c:0c:dc:d4:31:b5:84:c8:b4:05:c1:62:e7:ad:e7:fc:
         68:de:f2:38:83:82:35:08:c4:b1:11:ab:df:a4:0a:96:72:3f:
         65:06:68:b9:4c:80:25:5a:18:f2:76:1b:34:9f:91:70:72:79:
         ad:1a:77:43:56:00:96:db:79:9b:c5:85:f6:52:14:3a:d7:fb:
         2f:61:dc:39:84:c2:3d:45:78:df:4c:d7:a9:15:70:db:a4:9d:
         cc:46:49:37:58:62:79:c7:fd:6d:e1:a4:dc:4e:f1:81:46:da:
         b1:64:e7:dc:12:db:cc:25:20:57:fa:99:cf:6d:ad:d8:9d:9e:
         8b:10:70:73
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBd4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0Q2OENBRjExMC8GA1UEBRMoQzY1M0IxNUE1MEVFNDMwMUZGMjU4RDhBMkE3QzE4
NjM4M0M1MEVCQTAeFw0yNTAzMjkwMjAzMTlaFw0yNTAzMzEwMjAzMTlaMBgxFjAU
BgNVBAMTDTY3ZTc1NGU4LWJhMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3R/ATmK3s+43PEepm/eNKUBYLqWdPduICXz5FCPsFnlf/lmEbkD2WLL8G
+v6Di/fYX6qRm3KqA/hhW+w1cAY4eMZH5g59koK+jUax5nxTDknWUUP0AR/NfeCm
dJLXatKphbeMFHTIkV/jYCDbypDs9sPTiki5I3NR+rXIKispM0DEc4fLUxb8f8+0
gebIxrart+NGkUnsVPbUHRBN76AMvsF9d4W+L3+J2z9rVQv9jxDCJ2t7AYQI02ns
OWnxX/8wk0LVPbHt0YwnK6j8KRJklz2GHkrPysMb++rvrxEJ+d7nD9okhcyzxCke
CwwPXz+vyxF6Bo7VCTlQ4vOxKLZNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUoHL2
5KR1hq/MFCL/+oXGVwH22eEwHwYDVR0jBBgwFoAUxlOxWlDuQwH/JY2KKnwYY4PF
DrowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdENjhDL0I2OEY3RUQ4OTIwNjExRUJBQjEzQkM3Q0Y4QUVBMjI4L3hsT3hX
bER1UXdIX0pZMktLbndZWTRQRkRyby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hsT3hXbER1UXdIX0pZMktLbndZWTRQRkRyby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0Q2OEMvQjY4RjdFRDg5MjA2MTFFQkFCMTNCQzdDRjhB
RUEyMjgveGxPeFdsRHVRd0hfSlkyS0tud1lZNFBGRHJvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAs4u+OIldZMHARrm8csPUW+1RKvHpO
qyD6SxwjBRxEkg+Meuyyjy80uiFV/ItNBIhqqQ+D2x4M5p0+rM9MtrdHiQv6NYG5
1gIi2ekTw9OUhwHeW3RbRUGUVfDnDxYHB5+sOe6tqKfBlSUQALLOhziWNQNYu0Mv
oIhO3Vc3OawiwhwM3NQxtYTItAXBYuet5/xo3vI4g4I1CMSxEavfpAqWcj9lBmi5
TIAlWhjydhs0n5FwcnmtGndDVgCW23mbxYX2UhQ61/svYdw5hMI9RXjfTNepFXDb
pJ3MRkk3WGJ5x/1t4aTcTvGBRtqxZOfcEtvMJSBX+pnPba3YnZ6LEHBz
-----END CERTIFICATE-----