Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
File:                     PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft (raw, json)
Hash identifier:          iX0OW0nSkV5WLX5A45K0O8PCi8QAUmhQURr2xzUKQGs=
Subject key identifier:   FE:7E:D4:28:D9:D2:8A:BA:EF:BB:98:B5:93:68:7E:BF:86:F5:FA:14
Authority key identifier: 3D:2A:F3:53:44:65:E3:FA:EC:A9:5B:BD:23:1F:72:3C:8A:06:F5:D1
Certificate issuer:       /CN=F36E8936AF/serialNumber=3D2AF3534465E3FAECA95BBD231F723C8A06F5D1
Certificate serial:       034B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
Manifest number:          034A
Signing time:             Sat 29 Mar 2025 02:45:19 +0000
Manifest this update:     Sat 29 Mar 2025 02:45:19 +0000
Manifest next update:     Mon 31 Mar 2025 02:45:19 +0000
Files and hashes:         1: PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl (hash: 2ahUKaxamcDKSlIk3cz5Ygh1f8lECBh4q3lzHPpCbuA=)
                          2: DFF1E77490ED11ED942A0B7DF1222468.roa (hash: 9WA9paanDgVyhx1/5/CO95xKP5kF7OW8npO/gngIuxQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8936AF
        Validity
            Not Before: Mar 29 02:45:19 2025 GMT
            Not After : Mar 31 02:45:19 2025 GMT
        Subject: CN=67e75ebf-16c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:d0:da:d2:68:14:22:cf:53:2d:b9:e0:10:
                    8f:83:c0:d7:05:d3:1b:8a:52:d8:e1:26:7e:26:f1:
                    ce:f6:9a:19:4a:2e:c9:24:46:26:9d:15:a3:32:2f:
                    bf:0d:45:28:42:8b:ef:63:a3:ac:9a:fd:e3:ee:c5:
                    ef:8d:b8:b4:f6:2f:23:25:2b:a9:9f:17:18:e8:1c:
                    2a:92:52:e1:a2:98:28:0d:54:6f:da:17:6e:8b:f3:
                    f1:24:0b:63:bb:c4:19:c0:24:bc:5b:48:0f:57:0a:
                    cd:16:71:a2:7f:00:83:5e:23:84:0d:ea:13:e9:8f:
                    02:fd:1d:35:57:2e:0e:4f:d8:57:17:64:10:c0:68:
                    36:d9:ed:9c:61:cc:be:b1:ef:d2:db:58:91:f5:96:
                    e7:a9:cb:77:8e:8f:60:66:a8:8f:2b:5e:67:ba:02:
                    6e:78:4c:e8:27:cc:ef:6d:ec:09:ee:4e:f9:52:70:
                    1a:4e:7b:e5:c6:6f:f6:dc:9e:3d:f8:c7:55:e9:eb:
                    71:ae:cc:0d:12:ee:68:89:be:85:cc:38:e0:a3:67:
                    26:c6:85:39:1f:8f:3a:b1:a4:34:8a:cd:95:e5:66:
                    79:51:f4:be:42:30:b8:a6:e7:0d:87:50:14:59:9f:
                    34:87:ef:17:4a:ac:83:40:e5:57:4f:4e:5d:04:d4:
                    cf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7E:D4:28:D9:D2:8A:BA:EF:BB:98:B5:93:68:7E:BF:86:F5:FA:14
            X509v3 Authority Key Identifier:
                keyid:3D:2A:F3:53:44:65:E3:FA:EC:A9:5B:BD:23:1F:72:3C:8A:06:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f5:3a:7f:07:b6:4c:3c:31:fc:c1:ac:b9:f9:d2:8b:1d:60:
         a2:71:bb:5d:1d:15:44:a0:fa:ba:eb:9e:7b:03:b6:d8:98:32:
         e2:1c:19:43:08:8e:e7:85:d2:ab:bf:42:e3:eb:f8:c2:a7:4d:
         b1:65:7a:dd:88:dc:72:36:de:29:81:54:e7:3b:8b:f1:27:a4:
         de:f1:f3:9e:d6:48:52:98:3d:21:6f:de:6d:ac:c4:11:f3:d5:
         6c:ac:61:1f:91:64:12:ef:f2:6b:c7:18:98:80:0c:f5:ff:d4:
         3b:58:a3:13:b3:4c:07:0d:4e:21:dd:27:13:b7:cf:9d:72:70:
         f5:2c:50:d2:fd:48:85:e1:76:51:e8:59:47:29:77:19:d6:f4:
         03:8f:bd:78:14:31:0c:41:1f:3f:a2:5c:a4:49:74:1b:ae:d2:
         7f:54:5c:ef:10:c1:d8:b0:b1:26:39:2c:21:cc:2b:83:dd:62:
         f0:64:49:d7:9e:e5:16:f4:67:d7:37:c8:ec:81:00:e1:4c:f4:
         1c:7d:cd:ef:3b:b8:44:15:a5:82:cc:c2:89:26:6b:fa:c2:b0:
         a3:82:8f:3f:78:09:c1:05:59:12:f5:6d:28:e4:00:e8:47:fa:
         fa:5e:14:c5:b7:a6:28:d3:14:58:51:b2:b4:bd:05:58:a6:e6:
         6a:ce:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----