Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
File:                     M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft (raw, json)
Hash identifier:          WXHq6qdy6ad2LmUZTwwkfoS/WtOh3IuFBmucO7iMilc=
Subject key identifier:   8F:CE:80:8A:D8:29:C4:28:47:3E:FE:2A:3C:A8:22:7D:4A:7B:2A:53
Authority key identifier: 33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92
Certificate issuer:       /CN=F36E4CC6AF/serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
Certificate serial:       0160
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
Manifest number:          015F
Signing time:             Sat 29 Mar 2025 03:23:43 +0000
Manifest this update:     Sat 29 Mar 2025 03:23:42 +0000
Manifest next update:     Mon 31 Mar 2025 03:23:42 +0000
Files and hashes:         1: M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl (hash: cdouVGT5+VW4+K1E4EhJWmeh3zM8/5K7e3Y1vxrZGVo=)
                          2: C0E88DD6025E11EFB5BAAD30017001B1.roa (hash: DJWXY1V0N/SZP8fVnsyyzg0SRQs5AOjIUrDn4upoYrc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4CC6AF
        Validity
            Not Before: Mar 29 03:23:42 2025 GMT
            Not After : Mar 31 03:23:42 2025 GMT
        Subject: CN=67e767bf-cc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:e9:37:c0:94:ff:90:af:a6:f9:35:c7:d3:
                    12:48:71:d1:d5:05:0c:93:28:4f:f2:2d:3d:19:94:
                    d4:78:2b:16:9b:f5:2c:04:b1:ff:8f:a0:44:ad:1c:
                    85:ad:90:32:41:db:a7:91:c1:a6:32:5b:1c:a8:5b:
                    e5:a8:aa:b9:ef:19:16:71:b2:68:4a:99:6e:97:57:
                    6e:4e:91:38:82:4c:60:64:da:01:14:e3:13:7e:cc:
                    d8:06:ff:3d:1a:39:60:d6:ff:7c:69:34:28:05:01:
                    99:47:88:3f:62:67:24:a4:21:7e:6c:30:1e:93:4b:
                    22:24:14:3c:19:45:d5:50:c2:65:48:d9:1e:0c:b8:
                    40:ae:5a:eb:21:d5:31:f3:17:ce:48:72:ad:f3:bf:
                    8a:cd:b0:0f:82:39:cb:13:f5:1c:54:0e:d9:c9:9f:
                    29:40:34:45:36:d1:c8:a3:a1:24:b8:4e:50:aa:fd:
                    b4:5e:da:eb:9f:73:91:a0:87:0e:5e:8d:bd:6d:92:
                    51:e3:d4:6c:7d:25:2c:f3:76:fa:95:79:da:4a:c3:
                    db:9a:4d:8a:a5:d8:a2:de:0f:ab:66:d5:ff:a2:b9:
                    07:3b:d0:a4:67:62:6f:e8:7d:24:12:b6:dd:79:0a:
                    e5:85:f0:9f:5c:5a:25:98:7f:f7:d8:a6:36:72:a1:
                    32:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CE:80:8A:D8:29:C4:28:47:3E:FE:2A:3C:A8:22:7D:4A:7B:2A:53
            X509v3 Authority Key Identifier:
                keyid:33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:03:c1:4f:e4:bf:a2:aa:86:6f:52:c8:91:03:73:fc:59:a9:
         02:0c:52:7c:4f:c9:f1:c5:17:c7:62:9c:4d:8c:78:a2:00:7b:
         3d:92:69:52:6a:34:6a:c1:6c:9c:a7:b8:c6:48:c5:36:1e:f5:
         4a:8c:9f:23:96:82:81:5f:66:db:34:fd:89:fd:42:07:d1:10:
         99:7a:11:19:1b:8e:45:c9:17:e1:9b:fc:9b:dc:82:a3:95:ff:
         af:7f:dd:70:1d:42:33:8e:88:46:81:5b:53:1b:32:cd:25:a4:
         92:8c:2f:87:ea:ce:12:68:66:ba:6a:fb:52:0d:76:79:6f:da:
         04:1b:b5:04:55:fc:55:e9:7d:24:ff:0d:23:47:89:87:12:fa:
         ab:93:a9:ba:0b:42:de:13:3e:3b:57:71:51:0e:c8:95:7b:a4:
         74:56:00:c8:ec:e2:a5:9a:11:92:0c:e9:25:64:89:75:3d:82:
         02:1a:e6:73:72:a3:39:ad:ea:f5:2b:57:52:14:47:84:f2:58:
         8c:f4:03:40:da:98:25:c3:c3:8d:25:7c:75:14:50:db:58:ce:
         dc:07:9b:c5:70:e7:8c:72:b9:fe:c5:89:37:62:1e:12:16:ab:
         84:8f:60:a6:fd:5f:a8:11:ac:3a:cb:72:00:37:a3:7e:b5:54:
         5a:c5:01:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----