Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
File:                     -YeB5n2eqWryWAashtEAb4IfqjY.mft (raw, json)
Hash identifier:          vvwofKb2GP+fKrwQ11AF5mpyKPMq2PnJNU2poz+wL50=
Subject key identifier:   DA:3A:0F:CD:E0:19:A8:79:B7:35:97:73:8A:F5:1F:86:1B:81:2E:2B
Authority key identifier: F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36
Certificate issuer:       /CN=F3692D98AF/serialNumber=F98781E67D9EA96AF25806AC86D1006F821FAA36
Certificate serial:       0201
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
Manifest number:          01FC
Signing time:             Sat 29 Mar 2025 03:13:22 +0000
Manifest this update:     Sat 29 Mar 2025 03:13:21 +0000
Manifest next update:     Mon 31 Mar 2025 03:13:21 +0000
Files and hashes:         1: -YeB5n2eqWryWAashtEAb4IfqjY.crl (hash: igeD6Btvi31SaoOqf7/bN1uwc2qpIGxnFkpBWY9VwD8=)
                          2: F3D28466A49B11EE881B3A7CD25BE465.roa (hash: 8ql7+vusURAXXO1QjIU3wb4N2LTfHKWe3IzCBlZgxWQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D98AF
        Validity
            Not Before: Mar 29 03:13:21 2025 GMT
            Not After : Mar 31 03:13:21 2025 GMT
        Subject: CN=67e76551-966a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:fd:45:31:80:f5:0d:c7:34:8a:7f:56:e4:
                    9f:88:83:de:43:3b:be:3f:90:71:9b:27:03:b4:10:
                    7b:93:2d:5e:c5:d6:12:19:49:e4:22:10:f1:32:da:
                    df:12:41:be:4c:34:b3:bd:2f:81:ff:17:f6:bf:32:
                    69:e7:d5:06:30:de:ab:b5:8a:47:59:17:aa:d5:ae:
                    cd:8d:06:0a:8d:0c:65:86:e3:03:11:3d:e3:7e:ac:
                    fe:52:2a:ef:92:e0:bb:03:b9:1d:e2:21:4a:30:f1:
                    45:cf:4d:6c:e7:f9:45:fc:b7:99:d3:03:4a:91:9d:
                    51:57:95:6e:9e:7e:0f:14:90:ae:8e:97:25:79:40:
                    c0:b0:f7:3a:bb:00:f3:4d:ce:db:dc:b5:61:1f:34:
                    a5:21:a7:5a:37:f9:8d:a3:4d:f8:7e:c5:bf:6e:d5:
                    53:5f:f8:df:a7:1f:2d:20:b4:0e:1b:2f:c3:94:fa:
                    a1:f0:3a:6b:80:19:d3:9e:96:10:d7:59:ca:08:aa:
                    42:9b:d4:f2:4f:63:ec:0f:bf:14:44:b6:52:6a:b3:
                    21:11:f6:6c:62:2c:e2:53:5c:13:4d:9e:c4:ff:f0:
                    0d:89:43:b0:1c:94:ce:aa:87:7f:3c:f4:7b:8d:06:
                    1d:6e:30:12:b2:ea:29:1b:f6:84:2a:40:69:a8:7e:
                    07:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3A:0F:CD:E0:19:A8:79:B7:35:97:73:8A:F5:1F:86:1B:81:2E:2B
            X509v3 Authority Key Identifier:
                keyid:F9:87:81:E6:7D:9E:A9:6A:F2:58:06:AC:86:D1:00:6F:82:1F:AA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-YeB5n2eqWryWAashtEAb4IfqjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D98/AFE95F7498F011EE8A47CA59D25BE465/-YeB5n2eqWryWAashtEAb4IfqjY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:e3:a9:89:ab:9f:a7:d6:05:84:e9:e8:26:7d:56:3c:a7:
         9e:ad:be:dc:98:1e:ac:fa:c4:c9:07:b9:92:8f:cc:62:c2:75:
         57:7d:9a:d8:2f:c1:36:ce:f8:67:fc:97:95:21:67:47:f9:e3:
         2b:07:7c:63:f4:8a:3a:d0:67:4f:44:a5:02:b0:ff:a4:1c:6e:
         ca:c4:b0:70:84:2b:17:95:90:0a:3c:6c:eb:53:aa:2b:2d:a0:
         47:75:01:35:22:0d:de:24:c5:3f:21:44:74:a5:9a:a6:c4:d9:
         d4:78:8b:68:7f:83:1f:ee:5d:7c:c3:69:f8:7a:23:8b:7b:fc:
         c7:2b:03:7a:0a:aa:34:f1:a7:e7:97:c1:16:63:45:32:13:8c:
         72:16:08:25:af:c7:20:e2:f6:1e:9e:39:9f:38:c1:1e:7b:cc:
         4d:03:7f:99:b4:14:d1:7e:e7:45:77:c3:5e:cc:a0:28:76:79:
         3b:09:4d:a8:eb:51:84:0f:65:fb:f8:dd:93:7b:e4:c3:e4:9d:
         0e:d8:6f:b2:25:b9:b5:a1:0b:dc:d3:39:ab:39:32:00:fa:d8:
         f4:7a:3a:72:17:01:b7:72:73:92:eb:40:94:1d:a9:73:48:d9:
         e5:a4:f6:07:6c:16:b9:dd:9f:40:f5:02:e1:a6:82:8a:78:16:
         c5:75:b1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----