Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft
File:                     F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft (raw, json)
Hash identifier:          jhkuVSGIakTbsz++P6W0NuwYJJIXyX2nJyPFv80znFI=
Subject key identifier:   9B:37:9F:8B:B1:B7:27:30:B2:11:06:B1:92:A9:6E:5C:C4:5A:89:9D
Authority key identifier: 17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA
Certificate issuer:       /CN=F36BB12FAF/serialNumber=1744BC20B7060579C93E4E2AA7E654289C2AF7CA
Certificate serial:       91
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft
Manifest number:          8C
Signing time:             Sat 29 Mar 2025 03:42:22 +0000
Manifest this update:     Sat 29 Mar 2025 03:42:22 +0000
Manifest next update:     Mon 31 Mar 2025 03:42:22 +0000
Files and hashes:         1: F0S8ILcGBXnJPk4qp-ZUKJwq98o.crl (hash: o2xhSaRluqds+Km9GB/BFUYOnW4dCnbOkk1UOVu4H/Q=)
                          2: 2AF19AACA99D11EF9770FA9D762E951A.roa (hash: 8M8qeh2c4jU96jCRf8I7t2WItg43FZr+wCVd7xVx4+A=)
                          3: 65EE6608A93411EF8563F881762E951A.roa (hash: XRj1rCaLDHj9RuND/dNnP241OC1a/Tkrtdg/iPOM2xc=)
                          4: 3F1DD4FEA93011EFB957CF66762E951A.roa (hash: mf8in6dN/rBkyYBFBPJrqKH3gZCm9Dld1VfS1yx67mU=)
                          5: ACD5EF52A92D11EFB660CA57762E951A.roa (hash: x+lXF/o9k7izJiAJeM43TTxxkhFqOAoIEnFPFeHdVRM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BB12FAF
        Validity
            Not Before: Mar 29 03:42:22 2025 GMT
            Not After : Mar 31 03:42:22 2025 GMT
        Subject: CN=67e76c1e-fb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:be:00:8c:05:35:6e:a7:5c:f3:16:a8:fe:
                    de:ad:b9:2e:64:2c:cd:16:94:66:3b:be:87:65:99:
                    5a:5a:e3:d7:d6:e7:e9:c2:62:e5:8a:5c:fb:f9:74:
                    31:b2:4e:40:0b:a3:4d:97:52:d5:f3:d0:71:eb:0b:
                    d7:38:7d:90:36:5f:6b:3a:2c:d7:8c:58:27:73:bc:
                    90:6c:d9:f0:fd:e7:6c:0f:cc:8b:3d:ba:29:4a:5a:
                    03:2b:e1:cf:b5:01:af:76:c4:f0:e1:2f:99:4c:06:
                    8c:27:1d:53:44:5d:92:a0:ad:20:37:fa:5c:81:b6:
                    d4:a5:ca:c9:fa:1f:1b:3f:e8:c0:53:d6:53:70:46:
                    e6:3f:36:c6:8b:cc:9f:0f:33:cd:5e:f1:bd:25:68:
                    a3:ba:e2:33:77:d0:07:d2:b3:ae:e2:4f:d9:d1:04:
                    31:e8:95:db:f7:84:7f:e7:37:df:94:3f:14:a4:2d:
                    94:f0:2e:86:1d:ad:ae:7b:78:f7:1a:11:01:2c:a9:
                    71:a9:b7:12:51:08:cc:06:5c:78:27:7b:5d:be:9d:
                    4d:4a:d8:72:28:5e:c4:31:a4:93:49:f8:5f:09:03:
                    10:18:6a:ab:2f:18:f5:a8:e2:a4:a7:6c:7c:34:80:
                    2f:b1:f1:12:9e:a9:7c:ed:2e:0e:db:51:92:99:be:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:37:9F:8B:B1:B7:27:30:B2:11:06:B1:92:A9:6E:5C:C4:5A:89:9D
            X509v3 Authority Key Identifier:
                keyid:17:44:BC:20:B7:06:05:79:C9:3E:4E:2A:A7:E6:54:28:9C:2A:F7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F0S8ILcGBXnJPk4qp-ZUKJwq98o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB12F/5C09C380A7E511EFB56A0C52762E951A/F0S8ILcGBXnJPk4qp-ZUKJwq98o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:a0:76:53:2d:e4:88:27:e5:67:0e:91:f6:09:59:c0:e5:
         37:a2:6c:c5:76:f0:01:27:04:e4:93:89:cb:fe:fd:2a:d6:8f:
         96:92:ee:66:13:91:2b:4a:5d:ae:74:e2:c2:65:1b:ab:96:e1:
         b7:da:fd:25:4b:5b:57:bd:d6:8e:60:5f:0f:0a:9f:a5:6f:e8:
         93:66:0d:76:b1:51:ee:3b:d5:5e:2c:b6:b8:45:a7:49:19:54:
         d7:59:f3:a4:7e:23:e5:05:03:c8:cb:8f:86:77:ad:ee:67:f6:
         b3:1c:db:b3:9c:e3:2c:a0:4e:4d:86:cd:a8:44:00:4d:ff:05:
         98:b8:ca:eb:e1:39:f1:f2:62:d4:83:2f:30:8a:83:77:d9:d5:
         ba:a8:d2:9d:a9:02:45:39:ef:b3:27:a6:fc:80:5a:d1:2d:f6:
         32:5a:c4:bc:f4:a1:ec:49:65:4b:91:6d:7c:e4:02:8a:eb:5e:
         fb:13:51:97:1e:55:a8:00:27:e9:fe:92:19:99:55:18:41:8c:
         6e:90:b7:91:a0:5a:6e:49:f3:72:77:26:e5:ae:e4:51:21:e4:
         62:1c:a6:da:70:cb:61:60:ce:66:61:e9:51:3f:5f:4d:0e:0b:
         3c:e6:75:c0:88:81:bf:10:13:d4:c8:ce:d3:c6:71:fb:dc:8e:
         6c:35:a5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----