Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
File:                     vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft (raw, json)
Hash identifier:          f6zhSYCZOyeKSFoFuKYkUUJ43mVKQmk39/WeNoKZASE=
Subject key identifier:   27:F4:52:89:7E:50:0E:7F:79:83:7B:88:0B:E1:48:77:37:00:14:6F
Authority key identifier: BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05
Certificate issuer:       /CN=F36F1295AF/serialNumber=BDB1AF1F8B4EB6F3A42370F91E71C532C7F46005
Certificate serial:       029F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
Manifest number:          029E
Signing time:             Sat 29 Mar 2025 02:59:45 +0000
Manifest this update:     Sat 29 Mar 2025 02:59:44 +0000
Manifest next update:     Mon 31 Mar 2025 02:59:44 +0000
Files and hashes:         1: vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl (hash: sR7Tqo+NOMLvxnasbHk4cXrP9NxCl9HPrbITWPpp1ew=)
                          2: C66A8CFA0F6611EE86DEEA374AD9E6FC.roa (hash: CtMLiyHqHp/2c3885KFMX3Kp1Td1UoRIr2a2dfZo4lI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671 (0x29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F1295AF
        Validity
            Not Before: Mar 29 02:59:44 2025 GMT
            Not After : Mar 31 02:59:44 2025 GMT
        Subject: CN=67e76221-de0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:7a:32:cc:b8:44:f5:0e:7b:a7:9d:b5:de:
                    37:fb:f7:a8:0a:3c:24:51:bf:2d:c8:40:51:4f:55:
                    c2:4c:40:87:11:a7:f3:c3:d8:bd:9a:ee:08:12:63:
                    d7:d1:a2:39:c1:fb:04:6d:a1:e9:56:39:9c:e2:7d:
                    19:de:48:c8:05:7f:d8:9f:f5:a3:f1:62:72:7f:58:
                    d6:dd:3b:24:ff:cf:24:86:ba:b0:da:28:58:bd:20:
                    cf:91:f0:a6:64:f1:78:30:36:5b:34:76:82:4b:af:
                    43:19:0b:ff:84:57:4f:1d:70:bc:4d:df:24:af:91:
                    bc:17:a6:73:1f:80:3a:13:b8:9c:0d:ea:83:aa:bf:
                    4c:f5:f5:8c:0b:f6:2b:c9:bd:a2:bc:52:70:af:d8:
                    b4:f7:56:6a:31:25:11:0c:c4:84:3b:98:3d:b9:2c:
                    83:4a:c9:0e:4c:75:5b:dd:3c:d9:e2:41:bc:32:ff:
                    2c:73:0c:2b:71:09:e1:0d:41:61:d0:35:74:19:cd:
                    ce:f3:65:68:93:0a:b3:43:b3:9d:4e:2d:5e:09:08:
                    9f:17:92:b2:dc:10:67:1b:c5:9e:83:bd:d0:33:d4:
                    33:07:e0:8a:e4:62:3c:73:6f:d5:94:12:ef:12:5e:
                    4f:9d:28:c3:e1:26:53:38:ea:5c:a5:b9:fd:b9:d7:
                    ca:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F4:52:89:7E:50:0E:7F:79:83:7B:88:0B:E1:48:77:37:00:14:6F
            X509v3 Authority Key Identifier:
                keyid:BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3c:9e:83:ff:45:8f:8e:9f:ec:9f:81:e9:c7:ec:61:3d:ff:
         5f:1f:51:1a:45:f1:d4:07:6d:03:f0:18:1b:3a:fa:23:98:23:
         04:d5:c2:66:e3:62:b6:50:c2:df:71:d6:1d:70:b9:ea:f9:96:
         c9:e7:01:1a:a2:9f:19:60:83:56:96:bc:ac:fb:c1:ca:01:9f:
         84:0b:43:ca:a9:e0:d2:88:ec:2f:7a:ea:f8:55:fd:f1:8d:28:
         d2:af:81:4c:22:e7:8f:c7:17:fc:76:bf:4e:55:a7:b2:98:00:
         7a:f4:eb:33:d4:8a:55:c2:86:69:49:14:c4:cc:64:44:fc:2a:
         b9:60:67:a2:38:c0:eb:2e:7d:a8:63:a3:63:05:31:f2:09:84:
         8d:50:50:83:54:e8:13:49:db:2d:da:3b:d2:a9:86:6a:41:de:
         37:eb:17:87:63:6a:4a:61:a2:d8:da:13:63:d3:56:2a:23:d6:
         c9:ad:89:35:e0:f8:b7:36:97:73:75:85:b1:80:72:e9:6b:b6:
         98:7a:89:5c:ea:52:57:fe:42:76:f4:51:f4:55:b1:84:f0:dc:
         5f:a3:f2:24:e0:c2:5a:03:26:b0:11:b4:b5:2e:fe:e4:a7:70:
         0c:6f:3f:ba:48:e2:ba:16:80:49:95:9d:4d:79:2b:ec:ae:2a:
         ab:d9:43:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----