Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368EBFF/7D17A77E5F0D11EB82B4DC12F8AEA228/VXxQVOz-i3-NkEQbeBzzP0UL2j4.mft
File:                     VXxQVOz-i3-NkEQbeBzzP0UL2j4.mft (raw, json)
Hash identifier:          FcMEga2ZmMRn6prOz9+Ke6LNElolyPmb6d27kmnT4FE=
Subject key identifier:   2D:D9:40:39:89:00:CF:70:70:CB:E2:09:9F:60:82:62:28:5C:8B:1D
Authority key identifier: 55:7C:50:54:EC:FE:8B:7F:8D:90:44:1B:78:1C:F3:3F:45:0B:DA:3E
Certificate issuer:       /CN=F368EBFFAF/serialNumber=557C5054ECFE8B7F8D90441B781CF33F450BDA3E
Certificate serial:       025C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VXxQVOz-i3-NkEQbeBzzP0UL2j4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368EBFF/7D17A77E5F0D11EB82B4DC12F8AEA228/VXxQVOz-i3-NkEQbeBzzP0UL2j4.mft
Manifest number:          025A
Signing time:             Thu 08 Sep 2022 01:15:20 +0000
Manifest this update:     Thu 08 Sep 2022 01:15:19 +0000
Manifest next update:     Sat 10 Sep 2022 01:15:19 +0000
Files and hashes:         1: VXxQVOz-i3-NkEQbeBzzP0UL2j4.crl (hash: i1mJh53yRxPtkdTxPplpM3nlgC5i59DRVJMxcozBVEs=)
                          2: B7B213A65F0D11EBB8372F13F8AEA228.roa (hash: puwCWa3gsqTC7rOKDcvW6nPKVc6UX97pHCigCS62l3Y=)
                          3: D933EF865F0D11EB89D37413F8AEA228.roa (hash: 28JofjgL2Nv8KIBnbizHD6SKJ+JtdELcZhPjZH0jIOQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368EBFFAF/serialNumber=557C5054ECFE8B7F8D90441B781CF33F450BDA3E
        Validity
            Not Before: Sep  8 01:15:19 2022 GMT
            Not After : Sep 10 01:15:19 2022 GMT
        Subject: CN=63194228-6bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:21:5c:90:f1:00:d5:ab:3b:b2:4d:7f:84:
                    09:df:e3:cb:63:49:8c:d8:dc:22:e5:29:87:b1:9a:
                    3d:62:16:0b:a8:68:2c:fd:42:f8:b6:84:92:bb:c5:
                    2d:39:9c:8c:d1:18:e5:76:8f:b9:7d:1c:6e:8c:37:
                    64:36:c8:b0:9f:00:2a:03:c1:30:f1:88:c3:91:fc:
                    ea:8b:77:a0:a6:4b:8e:04:b7:6c:0a:5d:c6:31:f0:
                    e0:fe:e7:bf:51:7a:6c:5a:01:46:2c:a2:14:be:a1:
                    ab:8b:8c:bd:dd:2e:e6:db:03:6b:f1:5c:3c:b2:a6:
                    63:1a:da:2a:8b:06:4e:46:f5:ec:53:fb:0b:72:1d:
                    1d:54:1d:ec:a2:62:93:2c:46:20:43:4a:8d:39:83:
                    a0:51:d5:3e:59:4f:99:f6:00:72:9c:61:4c:bb:07:
                    33:1d:af:dd:33:fb:c5:e2:d4:8c:9c:c9:b5:e1:fe:
                    d6:9c:32:b8:3e:25:cd:9a:c5:79:ba:32:85:d1:5e:
                    cc:44:60:3f:e7:d7:38:4f:35:5a:5d:f2:36:a9:d1:
                    99:8a:dd:ee:f9:94:99:42:b7:06:74:ec:20:8f:1e:
                    1c:17:e2:64:6a:c1:47:3b:ed:f7:03:1a:71:24:49:
                    a7:ea:4a:c7:a8:7d:77:35:27:7e:43:e5:c4:ee:c6:
                    c4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D9:40:39:89:00:CF:70:70:CB:E2:09:9F:60:82:62:28:5C:8B:1D
            X509v3 Authority Key Identifier:
                keyid:55:7C:50:54:EC:FE:8B:7F:8D:90:44:1B:78:1C:F3:3F:45:0B:DA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368EBFF/7D17A77E5F0D11EB82B4DC12F8AEA228/VXxQVOz-i3-NkEQbeBzzP0UL2j4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VXxQVOz-i3-NkEQbeBzzP0UL2j4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368EBFF/7D17A77E5F0D11EB82B4DC12F8AEA228/VXxQVOz-i3-NkEQbeBzzP0UL2j4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:10:3f:9b:54:f6:45:4f:ec:20:2e:e3:4c:f9:6a:fa:3f:92:
         69:4b:51:a6:4e:f6:fb:0c:d6:13:fb:93:de:5c:be:44:37:c8:
         ee:60:bf:f8:da:a7:97:49:e8:48:00:fc:d1:71:03:50:73:62:
         5f:2c:48:84:2a:17:c1:8a:8d:b9:d9:2a:3c:55:42:1d:2b:0f:
         e3:97:24:a4:11:ac:38:95:0a:a8:94:f3:96:13:16:cd:7a:17:
         a3:19:c5:ad:9c:e8:00:4b:14:6e:1e:1e:de:b7:a2:b0:84:67:
         0a:1a:eb:40:77:5c:15:23:28:aa:7c:7c:58:1e:f0:6f:ef:25:
         e8:7f:31:b3:d6:6d:55:29:8b:fc:c4:93:15:9a:f4:5d:6c:5b:
         d0:6e:f4:30:20:69:9f:1e:fd:e9:d1:f8:0e:d4:37:a3:cc:99:
         b9:e6:d9:df:cc:34:7f:b9:08:bc:be:3c:bd:cc:9c:ee:23:79:
         10:4c:01:2a:b4:38:92:68:ba:c0:a4:2c:e4:06:97:c7:37:db:
         a7:ac:19:45:3d:05:07:0c:ab:e1:9f:57:ae:f5:4c:36:84:0e:
         30:88:1d:a6:f6:b6:e2:e1:2a:b1:89:8a:34:99:15:c1:09:2e:
         b5:56:3d:ae:d2:31:28:5d:31:5a:6f:5b:76:af:a6:7e:71:a3:
         72:25:f6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----