Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696DE6/89E35F64187211ED9F36EADEF1222468/rTghQhVGilE0JqMJTWmaR871xOw.mft
File:                     rTghQhVGilE0JqMJTWmaR871xOw.mft (raw, json)
Hash identifier:          3eehYi2Utr9mUel0ytou8TS6DP1rpd1sl0Gl4fiJjM0=
Subject key identifier:   F0:74:9E:DD:DF:2F:AB:31:E0:64:29:6D:08:25:C6:C0:E5:CE:15:78
Authority key identifier: AD:38:21:42:15:46:8A:51:34:26:A3:09:4D:69:9A:47:CE:F5:C4:EC
Certificate issuer:       /CN=F3696DE6AF/serialNumber=AD38214215468A513426A3094D699A47CEF5C4EC
Certificate serial:       85
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rTghQhVGilE0JqMJTWmaR871xOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696DE6/89E35F64187211ED9F36EADEF1222468/rTghQhVGilE0JqMJTWmaR871xOw.mft
Manifest number:          84
Signing time:             Thu 15 Dec 2022 11:53:06 +0000
Manifest this update:     Thu 15 Dec 2022 11:53:06 +0000
Manifest next update:     Sat 17 Dec 2022 11:53:06 +0000
Files and hashes:         1: rTghQhVGilE0JqMJTWmaR871xOw.crl (hash: YPAMw4P4PQzTIA+GMaFgqinjCcaAiRmJYP7n9I9K6KY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696DE6AF/serialNumber=AD38214215468A513426A3094D699A47CEF5C4EC
        Validity
            Not Before: Dec 15 11:53:06 2022 GMT
            Not After : Dec 17 11:53:06 2022 GMT
        Subject: CN=639b0aa2-1485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:58:74:b7:b4:8b:17:9f:77:53:3e:ea:5e:
                    52:29:15:3c:f5:cc:7d:82:5c:5a:e1:4e:b3:bb:e6:
                    57:f4:0d:f5:c4:a4:2b:ea:2c:25:82:c2:13:73:f5:
                    21:4e:67:e3:97:45:28:ac:e4:b6:10:fe:6f:06:35:
                    cf:a6:42:45:be:fa:2d:1e:4d:ba:a0:78:6e:2c:b4:
                    5f:a7:53:1c:e1:4f:cd:65:41:6f:d8:4a:08:64:5f:
                    5b:ca:ea:d4:d6:14:92:3d:09:ca:79:8c:fa:7f:00:
                    8f:2d:a9:e0:06:3f:7e:44:aa:44:f5:67:58:12:83:
                    cc:10:36:2b:3d:0a:4a:de:69:4c:69:73:1a:8b:6f:
                    b1:dd:44:de:6f:c6:40:22:2f:17:8d:1d:73:79:ed:
                    84:a7:ce:88:42:23:d0:3a:49:c6:bb:7c:2a:04:fc:
                    8e:3b:43:52:5e:0b:4c:06:76:b6:9c:87:29:54:5c:
                    d3:f9:7b:a1:a2:b1:fd:79:52:66:eb:5e:2a:ce:e2:
                    7a:0d:54:b2:a0:ff:73:06:1e:2d:9c:da:53:ee:0a:
                    34:12:a8:42:2f:74:35:92:1e:53:d2:c6:1f:31:80:
                    5f:14:69:ed:a8:8f:50:70:ba:42:68:f5:5e:3d:84:
                    e9:2e:af:4e:bd:8f:25:92:ee:79:31:0e:e3:3e:f3:
                    14:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:74:9E:DD:DF:2F:AB:31:E0:64:29:6D:08:25:C6:C0:E5:CE:15:78
            X509v3 Authority Key Identifier:
                keyid:AD:38:21:42:15:46:8A:51:34:26:A3:09:4D:69:9A:47:CE:F5:C4:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696DE6/89E35F64187211ED9F36EADEF1222468/rTghQhVGilE0JqMJTWmaR871xOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rTghQhVGilE0JqMJTWmaR871xOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696DE6/89E35F64187211ED9F36EADEF1222468/rTghQhVGilE0JqMJTWmaR871xOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:6d:77:41:84:09:e2:be:a5:65:ca:0d:af:2e:b2:5d:f9:7c:
         84:10:04:b3:94:82:f2:cd:10:dc:58:bd:1f:e7:a1:4d:94:44:
         2e:9e:cb:1c:86:33:fb:e5:cf:52:c8:ba:7b:5c:cb:1a:a6:9e:
         3f:2e:5d:e9:fd:26:86:27:95:2b:a0:29:20:1f:c7:10:f1:45:
         4f:bd:1d:3c:c0:45:76:01:b8:89:03:a0:ae:76:4e:8b:da:be:
         9f:87:2b:3d:72:6e:aa:3e:15:d5:97:44:5f:2e:c4:09:8a:51:
         46:ce:47:d3:af:8c:11:59:97:a0:29:4c:6a:f1:9f:35:f8:84:
         be:34:ed:28:38:64:29:52:0f:92:d8:c6:5a:46:94:cd:c5:80:
         83:d2:66:4d:45:c6:55:1f:e3:9d:20:a1:ee:2b:e8:16:15:11:
         58:12:c8:52:56:2a:04:31:24:0c:a5:56:44:29:1f:31:9f:be:
         c8:2f:34:f0:0b:e3:a9:ac:a1:aa:a8:52:0d:f1:a2:d1:8e:d7:
         40:a7:3d:f4:45:97:16:65:58:33:62:03:e1:d0:dc:db:4c:fe:
         82:d4:3e:55:04:99:22:06:f8:fb:0d:fd:91:f9:67:f6:25:91:
         e8:a5:e1:8c:60:4d:0d:d4:4e:08:ad:8c:83:1e:49:16:4a:92:
         f3:28:66:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----