Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F599/079376949F1A11EAB40EAF4BF8AEA228/VGq-v1BhoaLDCovwpzr8fjUUUdc.mft
File:                     VGq-v1BhoaLDCovwpzr8fjUUUdc.mft (raw, json)
Hash identifier:          7I2Uzu5L8E1YLkV5bxABVaYuDQsY+g2UauQ/j8eC5lw=
Subject key identifier:   03:70:5A:2C:E4:9E:99:E8:0F:FC:F9:16:61:4C:4E:79:76:BB:D6:4A
Authority key identifier: 54:6A:BE:BF:50:61:A1:A2:C3:0A:8B:F0:A7:3A:FC:7E:35:14:51:D7
Certificate issuer:       /CN=F367F599AF/serialNumber=546ABEBF5061A1A2C30A8BF0A73AFC7E351451D7
Certificate serial:       0591
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VGq-v1BhoaLDCovwpzr8fjUUUdc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F599/079376949F1A11EAB40EAF4BF8AEA228/VGq-v1BhoaLDCovwpzr8fjUUUdc.mft
Manifest number:          058F
Signing time:             Mon 11 Mar 2024 01:13:32 +0000
Manifest this update:     Mon 11 Mar 2024 01:13:32 +0000
Manifest next update:     Wed 13 Mar 2024 01:13:32 +0000
Files and hashes:         1: VGq-v1BhoaLDCovwpzr8fjUUUdc.crl (hash: er7rmmjAhxHmxM1K0HmNwAEDXb/tr45Yhrk6JGInzKs=)
                          2: 29DBEF409F6211EA98E96015F8AEA228.roa (hash: 8veJTUvN3000d5yOvmBToiRE9Gih6eb26YcFYoC2F0I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425 (0x591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F599AF/serialNumber=546ABEBF5061A1A2C30A8BF0A73AFC7E351451D7
        Validity
            Not Before: Mar 11 01:13:32 2024 GMT
            Not After : Mar 13 01:13:32 2024 GMT
        Subject: CN=65ee5abc-f0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:03:98:f9:0e:8d:b7:06:68:7a:63:73:ed:
                    8a:14:cd:41:cc:28:44:9e:94:df:e3:e2:a9:06:4c:
                    c3:1f:87:ea:2a:94:21:e5:d0:94:b6:51:90:76:42:
                    68:ca:e6:99:c6:ee:85:2e:60:32:ec:ad:4c:be:f2:
                    b9:12:33:35:26:31:f5:e9:e3:19:7c:3e:ba:f2:a9:
                    19:8a:3a:20:e1:d5:6b:de:54:c0:60:c3:71:ed:74:
                    53:cb:38:71:44:e7:ae:98:f8:79:24:9c:4f:b0:98:
                    3d:b2:ee:7a:ce:d7:74:e6:73:80:0b:70:33:11:0e:
                    c9:ee:da:39:5b:a3:ff:58:b4:6d:1c:67:7d:c8:09:
                    d5:28:a0:b3:0b:64:01:12:9a:7d:57:02:f1:31:63:
                    40:cd:eb:68:9d:06:72:d0:cc:3a:03:e4:d4:6a:f5:
                    c6:54:9d:8b:7a:bc:c6:4c:97:10:a6:d3:ee:e3:b6:
                    d7:0d:f5:84:0d:77:62:fe:c3:ef:b8:7a:9a:0d:fc:
                    6a:42:7e:55:bb:4e:21:87:d9:2c:7a:91:fb:37:0c:
                    bb:c5:40:4e:60:07:db:1c:7e:1e:13:bb:2b:8a:a3:
                    b2:c4:2c:52:6d:95:bf:f3:6f:80:c2:a9:2d:43:01:
                    65:b3:54:5f:ed:0a:51:0f:ae:e6:ba:26:f7:de:b1:
                    b4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:70:5A:2C:E4:9E:99:E8:0F:FC:F9:16:61:4C:4E:79:76:BB:D6:4A
            X509v3 Authority Key Identifier:
                keyid:54:6A:BE:BF:50:61:A1:A2:C3:0A:8B:F0:A7:3A:FC:7E:35:14:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F599/079376949F1A11EAB40EAF4BF8AEA228/VGq-v1BhoaLDCovwpzr8fjUUUdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VGq-v1BhoaLDCovwpzr8fjUUUdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F599/079376949F1A11EAB40EAF4BF8AEA228/VGq-v1BhoaLDCovwpzr8fjUUUdc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:38:02:8d:a0:22:c9:8b:2e:a7:53:57:65:ba:22:f3:6c:d5:
         83:b8:44:b2:b7:47:53:33:67:2c:d5:be:cb:25:80:cc:4c:ff:
         e5:aa:81:a7:f0:85:8a:e1:3c:9c:08:86:8a:14:41:d0:da:98:
         5d:84:74:fb:3b:a9:a6:8f:81:61:5d:49:42:a2:16:90:89:50:
         31:0d:a8:3f:44:20:1f:3c:d8:a3:3c:11:95:1f:a8:c7:b7:64:
         2d:24:7c:d0:0a:17:a0:64:8b:2a:6d:7b:b3:cb:3a:2e:58:19:
         4e:14:48:5e:e4:0f:e2:65:b0:eb:34:52:e7:dc:e1:c8:b0:1a:
         2c:43:f9:a5:64:2d:3f:71:00:c1:e0:8d:91:cf:49:8e:8b:00:
         d6:18:03:c1:51:29:33:e2:39:34:1a:de:fc:5b:4c:57:9c:f5:
         3a:72:ef:4f:f3:8d:41:55:6e:04:3c:79:3b:81:41:fa:44:1e:
         85:55:32:4c:e4:60:5f:0a:43:3e:cc:1b:a6:b9:07:37:d1:79:
         e3:34:8b:bd:f4:8f:14:ed:77:8a:ba:29:b3:56:b0:d6:9f:3c:
         d3:2e:51:7b:bc:f7:2b:4c:8a:1d:1f:b5:67:26:72:0e:bc:7b:
         28:b3:87:39:6e:4b:6e:59:ba:15:f2:bf:a3:ea:b0:3f:75:28:
         0f:8a:87:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----