Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
File:                     8fHKBYLoJWPuJfCZF2si382cw2Q.mft (raw, json)
Hash identifier:          9wwY85hu4aglug3HK3S1k3K35oHxooDb7AWLlShKZ0c=
Subject key identifier:   9D:20:C2:A2:80:4A:22:B1:6F:0A:0F:8A:06:32:A2:45:F8:92:B5:E7
Authority key identifier: F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64
Certificate issuer:       /CN=F36C08D4AF/serialNumber=F1F1CA0582E82563EE25F099176B22DFCD9CC364
Certificate serial:       022B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
Manifest number:          022A
Signing time:             Sat 29 Mar 2025 03:08:19 +0000
Manifest this update:     Sat 29 Mar 2025 03:08:19 +0000
Manifest next update:     Mon 31 Mar 2025 03:08:19 +0000
Files and hashes:         1: 8fHKBYLoJWPuJfCZF2si382cw2Q.crl (hash: FgTzsvrvV9EgmEBT+AgsEaJ9lmbtfXl5DPGafzbHDHI=)
                          2: 715EC0EE69A911EE84A41F174AD9E6FC.roa (hash: GA/yRfN+j7YpzqeDRBlxUIhR1rbQNxt7HY+jSgnz5l0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C08D4AF
        Validity
            Not Before: Mar 29 03:08:19 2025 GMT
            Not After : Mar 31 03:08:19 2025 GMT
        Subject: CN=67e76423-2783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:df:b8:73:8c:71:5f:2a:1b:2d:57:5c:18:
                    81:7d:d8:42:4e:c5:6c:a1:9f:7c:c1:0b:44:a5:aa:
                    97:83:87:bf:f1:14:ef:b9:b4:00:5d:68:1f:1c:e6:
                    c8:0b:ed:f3:50:cb:a1:18:1b:27:9f:02:95:3b:88:
                    ca:ac:82:06:86:70:e8:52:80:36:52:d3:96:dc:c1:
                    6c:b3:1d:f3:bc:0c:ab:42:ba:4d:f0:1d:d2:f2:20:
                    56:86:c7:72:35:b8:bb:5b:e1:11:6a:77:3b:00:94:
                    a7:62:84:b8:09:08:dd:1f:1c:09:b4:db:73:8f:73:
                    29:ff:73:9b:7d:ff:a4:47:3b:31:19:e4:87:44:9d:
                    0c:c4:8b:0a:97:16:bc:08:12:5b:31:49:5a:0f:43:
                    fe:4a:91:83:c3:b1:c7:92:a5:81:e0:ba:0d:97:80:
                    4b:96:90:fa:a1:15:fd:42:81:66:b6:a0:cb:9a:f7:
                    bd:bd:ab:ec:66:d0:02:6b:91:d5:61:cc:cc:d4:ec:
                    f6:63:db:34:c7:9d:23:76:ac:33:31:a6:4b:39:3e:
                    bb:07:1d:4c:a4:25:d4:cd:d0:1f:f4:97:b0:17:43:
                    11:16:70:c0:09:5e:34:f5:67:ec:33:2f:f1:54:ad:
                    4c:38:71:af:ce:cb:42:6e:ad:a8:be:00:8d:54:df:
                    16:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:20:C2:A2:80:4A:22:B1:6F:0A:0F:8A:06:32:A2:45:F8:92:B5:E7
            X509v3 Authority Key Identifier:
                keyid:F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ef:c0:dd:29:83:3a:d2:7b:62:7b:d6:f9:d1:91:bf:fe:f7:
         ea:f8:78:d0:e5:c6:94:2e:6c:ea:61:ed:1d:0c:9a:ca:6d:a2:
         e5:4d:af:00:e9:3f:90:b1:d6:f6:78:75:02:1b:38:d9:dc:67:
         80:1a:92:a8:02:3d:39:1f:20:5a:f2:b4:71:2d:01:4b:27:c2:
         7f:ca:0c:9e:7b:5e:d0:4f:a1:0d:80:3e:94:9c:93:48:45:b7:
         63:18:4f:ef:b1:9b:6f:ab:1b:c5:e5:5b:9f:f4:f7:6e:bc:73:
         a5:c7:ad:01:e9:f0:2c:f5:4b:a1:c9:13:bb:51:0c:79:19:71:
         32:53:91:4d:70:a3:98:5a:80:bf:c3:ff:92:aa:96:39:40:59:
         fd:4d:96:42:f6:5b:58:07:6b:f5:f8:7c:cc:ec:85:df:f7:63:
         64:c0:79:7d:cd:84:a7:33:83:1e:90:09:7b:ec:23:e5:a9:0f:
         21:cb:24:97:0d:2e:dd:45:49:80:16:8e:b9:3f:c9:09:e0:68:
         77:9a:76:31:d5:e1:73:d9:6e:38:2f:10:ac:ae:39:57:3c:0a:
         03:05:56:e8:ad:7f:6f:50:11:bd:82:99:a8:08:47:ed:39:13:
         db:6a:56:4e:6e:0c:3a:fa:8e:73:86:7c:f8:49:fd:cf:8c:16:
         32:d2:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----