Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
File:                     6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft (raw, json)
Hash identifier:          l7UzshE6LDmE3ebj2GxAvl6KnycA9/fZBd1C5kEOQ3U=
Subject key identifier:   BB:36:3F:A2:79:5A:00:BC:82:9E:E4:CE:FE:13:2F:F3:BD:57:2A:FB
Authority key identifier: EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D
Certificate issuer:       /CN=F36F151EAF/serialNumber=EA95913551827BA6D653BA86AE93A4EE1F58CD5D
Certificate serial:       0536
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
Manifest number:          0531
Signing time:             Sat 29 Mar 2025 02:16:37 +0000
Manifest this update:     Sat 29 Mar 2025 02:16:36 +0000
Manifest next update:     Mon 31 Mar 2025 02:16:36 +0000
Files and hashes:         1: 6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl (hash: KvaKlH6aG4PIr/YDe76Q3NvuqQbGLos+ALaVaeAcvdo=)
                          2: 4480C2C43DB411EDAF6555B6F1222468.roa (hash: ao9hJXOKcb8xdv5UDxQleshSTVF6cW6dU5YDRAc43H0=)
                          3: 36CB15D21A1D11ECB0653032D8A014CE.roa (hash: bf4enB0HBdnrVbbzmad98aieReASPacG5zOGEFbBhW0=)
                          4: 7726038A1A1D11ECB5429A32D8A014CE.roa (hash: NZtUzRcCuqAnHwyzoZoriA7cseEjof5sDErEexpi67o=)
                          5: 7C381A5E1A1B11EC9638A92FD8A014CE.roa (hash: 8Ju/cLcaf4mtiTdpIKc66LzEmQlHp2Jv+UTzMDmzCaQ=)
                          6: FCBD1C3C1A1C11EC9910CB31D8A014CE.roa (hash: bLcjaegOBZo8jdxeDcM/ylZYrU7ynfrKHYL+3rOGWoU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1334 (0x536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F151EAF
        Validity
            Not Before: Mar 29 02:16:36 2025 GMT
            Not After : Mar 31 02:16:36 2025 GMT
        Subject: CN=67e75805-e383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:eb:87:0f:33:ff:23:dc:5a:fc:11:2b:1b:
                    8a:df:1a:db:7f:81:2d:5e:4a:e0:60:95:d4:b9:24:
                    59:cb:0b:60:7a:4f:04:8f:c5:a5:49:64:7a:51:8f:
                    94:dd:fd:b0:5d:5d:f3:2b:71:da:8b:95:8f:25:55:
                    0d:c3:38:45:1c:6e:d3:b8:d1:00:66:4e:48:76:5c:
                    44:2a:60:75:9f:61:ad:bc:29:b7:13:8d:c1:70:c8:
                    56:3d:18:d0:72:1d:d2:19:89:1f:8f:ac:6a:c1:fa:
                    a0:dd:c0:48:f4:64:37:95:14:a4:04:ad:7f:a5:5a:
                    50:5b:88:7f:3a:41:8d:7e:f0:74:7e:a8:a0:cc:01:
                    29:37:5e:13:41:dc:6d:d2:e2:61:c8:fc:d0:f7:3d:
                    43:6c:91:03:48:42:14:f3:f9:66:84:91:f3:87:ca:
                    65:08:06:2f:d2:93:eb:56:9f:52:7a:8c:db:cd:8d:
                    41:0f:36:0b:25:09:58:29:5c:23:0b:e0:6e:49:42:
                    9e:48:39:e3:fe:8c:de:6e:53:26:8e:89:cc:32:8e:
                    29:ea:c0:1f:cf:f6:71:cc:44:14:1d:79:6c:0a:9c:
                    25:90:7c:b1:50:0b:ac:74:da:54:47:7e:b7:05:c9:
                    30:ce:d9:e8:22:7d:bf:28:df:62:b3:54:7d:3c:28:
                    bb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:36:3F:A2:79:5A:00:BC:82:9E:E4:CE:FE:13:2F:F3:BD:57:2A:FB
            X509v3 Authority Key Identifier:
                keyid:EA:95:91:35:51:82:7B:A6:D6:53:BA:86:AE:93:A4:EE:1F:58:CD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6pWRNVGCe6bWU7qGrpOk7h9YzV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F151E/F98CDB7C1A1911EC9393452DD8A014CE/6pWRNVGCe6bWU7qGrpOk7h9YzV0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:de:33:a5:7a:d1:70:6d:67:d5:a2:cb:56:3e:2e:10:54:7b:
         1a:3b:52:4a:02:a2:76:a5:4f:1e:b9:90:58:54:26:0a:5d:25:
         f2:05:8a:39:d8:4f:48:94:08:5c:fc:a6:22:07:e9:76:69:47:
         87:1b:f6:b1:1b:bd:8f:7a:60:a4:fb:90:ad:3f:58:b0:da:9e:
         54:aa:e4:2e:d2:0f:6d:26:92:e1:6d:fd:41:c0:2c:bb:38:ed:
         cb:48:db:81:31:07:da:80:e1:9f:87:3d:7a:3d:d7:a4:05:cd:
         89:fd:2f:c7:a9:ea:81:9f:65:c6:8a:7c:d9:78:5f:a1:fd:f8:
         99:9b:11:92:02:56:b6:9b:f1:ef:49:b4:81:4b:71:63:79:4d:
         1a:cd:71:5d:0d:8d:c7:1e:d2:eb:dd:6d:03:7d:34:4f:97:0b:
         03:69:a4:d5:00:d5:0e:ce:4a:4b:bb:b7:c0:80:2b:e3:e9:32:
         f3:d8:e0:e6:e0:d7:49:12:d7:ea:49:73:91:64:ae:c0:da:d7:
         b7:1c:3b:66:8b:40:40:f2:b0:78:31:1f:67:8f:1c:69:40:0c:
         bb:ba:f7:02:44:f4:33:39:4a:de:e3:b0:0f:60:c7:a7:0d:60:
         f2:b8:03:64:f5:cb:62:d9:37:2f:cc:94:fa:cc:97:89:29:c0:
         9f:84:b9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----