Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
File:                     TNw7PW0GCBEg29bsI2NRx172TMw.mft (raw, json)
Hash identifier:          PNJK0yzDN5XtSrDbGq64G/RI8ekbgBefcmeYd44k9dQ=
Subject key identifier:   9F:C3:0C:F6:11:6B:23:88:5F:08:28:4D:0E:25:04:7F:95:0E:E3:C3
Authority key identifier: 4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
Certificate issuer:       /CN=F36DA6FBAF/serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Certificate serial:       1C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
Manifest number:          19
Signing time:             Sat 29 Mar 2025 03:49:06 +0000
Manifest this update:     Sat 29 Mar 2025 03:49:05 +0000
Manifest next update:     Mon 31 Mar 2025 03:49:05 +0000
Files and hashes:         1: TNw7PW0GCBEg29bsI2NRx172TMw.crl (hash: 4aEs+h+rewMKPNIkRu39pphFSnGRwFO8f0Mz6r/6U9M=)
                          2: 51D56DFEFE6311EF8981AA93762E951A.roa (hash: v1iecGoXLrBsavXRX1kf0YmMMDAB2gV9RZnpPeiZxzU=)
                          3: 81829ED6FE6411EF86C6749A762E951A.roa (hash: p0zc+GDWSPngPzC4UqPmM1kDzoimJaQE4vWQrsCXryc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA6FBAF
        Validity
            Not Before: Mar 29 03:49:05 2025 GMT
            Not After : Mar 31 03:49:05 2025 GMT
        Subject: CN=67e76db2-3106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:46:9e:80:b4:8f:0d:e3:f8:bb:7b:cd:46:45:
                    c9:27:14:b0:10:c7:b8:50:e3:48:70:e5:cc:11:ee:
                    98:88:b5:f4:74:e9:b3:33:44:25:27:3f:97:bc:6b:
                    0b:24:70:08:fb:14:4f:e1:4c:b5:9a:1d:e9:76:58:
                    53:e7:bb:6d:ee:44:43:a7:2d:80:b6:75:90:18:fa:
                    10:e1:6a:3a:d0:6e:44:34:fd:5c:95:4b:69:2c:d5:
                    98:68:00:37:91:07:ac:bb:aa:60:1d:c6:2b:65:ef:
                    84:01:40:a5:0e:60:e7:32:c5:55:d0:ae:94:45:bc:
                    0e:49:f1:d4:91:67:54:67:9c:d6:c4:dd:72:12:e1:
                    d6:ef:3e:7e:5e:bb:16:ed:92:db:f8:14:aa:ed:08:
                    a2:fc:2e:05:cc:19:65:f4:be:db:6c:b2:64:bd:03:
                    c9:15:6c:af:75:c1:c0:17:ff:bf:35:53:19:bb:ae:
                    70:a8:30:c3:f2:a0:74:72:86:9f:25:20:13:c4:e9:
                    ea:fc:4c:92:dd:54:1c:d5:d5:44:60:28:dc:78:5b:
                    2e:3e:38:6e:7a:c4:ba:72:eb:58:e7:f3:44:fb:4b:
                    c7:69:ae:8f:bd:29:08:1d:da:1c:5c:75:e6:9c:37:
                    55:dc:37:ec:4c:2c:71:d1:5b:25:2d:9d:cf:70:46:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C3:0C:F6:11:6B:23:88:5F:08:28:4D:0E:25:04:7F:95:0E:E3:C3
            X509v3 Authority Key Identifier:
                keyid:4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:36:0e:79:3f:21:3f:b6:2c:8a:64:61:0b:16:8f:63:ce:bb:
         87:6c:c6:5c:92:c4:26:4e:59:9b:6d:f2:9a:d4:b8:a4:84:58:
         5f:94:e2:2a:2f:32:f4:d2:c4:62:5c:ec:bb:6b:4a:47:03:87:
         40:58:d4:87:39:f2:3d:1e:18:6c:35:b4:4a:97:ab:dc:f8:24:
         6f:ce:23:b7:9c:80:19:51:ad:a3:a0:da:fc:f5:59:63:3e:56:
         d7:ce:b9:a1:5e:d5:b0:06:7b:10:76:ae:5c:a6:36:6f:0f:3d:
         70:2d:e3:89:34:e9:8d:ff:3a:fa:2a:c9:f5:f7:55:85:b4:8a:
         6a:e8:fe:6c:5c:b8:e0:cf:2c:30:56:58:d4:51:0c:d5:25:2f:
         3e:b1:7b:56:fb:81:11:ab:e8:19:a2:ed:6b:63:7e:55:80:0e:
         17:0a:4c:e0:0d:a3:ea:99:34:a6:97:54:fa:fe:47:b0:62:62:
         d6:50:d2:64:e1:e7:d4:6e:2b:19:38:8c:ca:17:45:a1:fe:b1:
         68:dd:2a:0b:67:d7:e1:63:b5:86:a7:15:d9:bf:6b:5d:b8:9f:
         dd:e0:26:bc:cf:b2:86:34:2b:ed:3e:dc:61:c4:bf:c3:03:f2:
         12:cf:c6:75:d1:94:cb:60:0d:98:ac:58:0d:0d:7e:0f:8b:c3:
         6a:85:ad:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----