Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
File:                     e1iV_2kARwqoGjQt5flx5dPHR3c.mft (raw, json)
Hash identifier:          vNYxqL2jJAicGVoP068cBxLvJOD2WMnTZtX/eXppVQ0=
Subject key identifier:   28:EE:69:72:E7:A8:E2:5F:C8:B0:96:45:89:57:8E:98:8C:81:EA:74
Authority key identifier: 7B:58:95:FF:69:00:47:0A:A8:1A:34:2D:E5:F9:71:E5:D3:C7:47:77
Certificate issuer:       /CN=F36FE536AF/serialNumber=7B5895FF6900470AA81A342DE5F971E5D3C74777
Certificate serial:       02C5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
Manifest number:          02BD
Signing time:             Sat 29 Mar 2025 02:56:32 +0000
Manifest this update:     Sat 29 Mar 2025 02:56:32 +0000
Manifest next update:     Mon 31 Mar 2025 02:56:32 +0000
Files and hashes:         1: e1iV_2kARwqoGjQt5flx5dPHR3c.crl (hash: UOt6nn2Kjeiz2Ps8+tc1VGmq2tvH+DjU26fwUnL0dKc=)
                          2: 309D28EEFEF511EDB00B88614AD9E6FC.roa (hash: ItCUIKFD8b+1zCASnhN/PPJuqcP6wgszn4o8P0pDqGw=)
                          3: DC35A5700A9C11EE858690314AD9E6FC.roa (hash: kgYyy6flMlYfObZnYV9e+HUynGelZVH2UDelqXJZlPU=)
                          4: 12BF6F7E0BE511EEB9B1FC134AD9E6FC.roa (hash: MkJTfBrBOzSWuJsHZrjclrv6ki4SKSbL2gRo3ZL+5k0=)
                          5: B54AC7C80A9D11EE985BF2334AD9E6FC.roa (hash: 5GeL0Czu/2etXZ5gA3VSe87hGnbfOU48c/oQ6DlZFyk=)
                          6: 3BB9461C0A9A11EEB90FD5294AD9E6FC.roa (hash: Tae9uYsJEm2EQyNZaJjgk20CLEDDhMv3lRYM23y3kYM=)
                          7: 63A562B60A9D11EE92A6DD324AD9E6FC.roa (hash: 3b9GaVwGq6W0niXUTfZp8msqwmz7KJ9S2n6bL+Jfmo8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE536AF
        Validity
            Not Before: Mar 29 02:56:32 2025 GMT
            Not After : Mar 31 02:56:32 2025 GMT
        Subject: CN=67e76160-c1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:2e:66:82:e3:12:2f:ae:15:41:0f:92:48:
                    b7:4d:30:ee:0c:8e:b5:2d:04:44:45:de:1f:3a:5a:
                    36:0d:b4:7d:33:3a:4e:2e:9c:33:49:b5:3e:de:a7:
                    0e:96:b1:26:05:a2:96:93:aa:d1:6f:2b:cd:0c:c6:
                    01:db:a2:49:d1:c9:41:9b:3d:1d:be:53:43:83:dd:
                    71:04:61:63:b9:5f:b8:1c:d1:3d:b8:dc:db:5a:91:
                    e2:cb:de:ac:8a:e7:41:e3:86:73:2d:c0:6b:09:a3:
                    6e:da:4c:08:22:ac:53:f6:b0:a0:ee:0b:25:57:57:
                    20:df:b4:52:c3:bb:3a:e4:48:d4:d7:8e:ca:a2:8e:
                    cf:f4:87:b8:90:57:d0:b2:7d:54:02:b5:bc:25:6f:
                    13:5a:36:d5:b5:cb:c0:10:af:d8:26:fc:99:86:5a:
                    f3:06:42:d3:a5:d8:69:7b:96:27:4d:36:2b:1d:03:
                    e4:90:23:70:76:68:a7:96:92:f3:4f:9d:c7:a2:72:
                    67:95:a5:88:57:b1:c8:e8:e2:d8:3f:74:3d:33:ff:
                    07:4a:dd:dd:6b:3f:19:0a:34:b4:d5:3b:03:b4:da:
                    b1:57:12:21:f0:b0:49:32:a8:96:6e:8c:1e:01:a1:
                    3a:81:57:ed:f0:de:19:3c:bb:94:30:b1:97:78:43:
                    eb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EE:69:72:E7:A8:E2:5F:C8:B0:96:45:89:57:8E:98:8C:81:EA:74
            X509v3 Authority Key Identifier:
                keyid:7B:58:95:FF:69:00:47:0A:A8:1A:34:2D:E5:F9:71:E5:D3:C7:47:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e1iV_2kARwqoGjQt5flx5dPHR3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE536/4A7E2C3EFDE911ED9A9DFA3A4AD9E6FC/e1iV_2kARwqoGjQt5flx5dPHR3c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:89:dd:e8:20:bc:7c:e1:65:58:4c:08:ac:c2:e4:b6:7d:85:
         ec:d1:f4:87:9f:4d:02:ad:9d:75:de:74:b8:a9:ca:ce:d4:d2:
         31:4b:f6:bd:6f:59:7a:01:e0:59:54:a2:b1:fc:7d:7d:d5:1d:
         41:ea:19:0c:25:c6:7e:1b:6f:bd:7a:ab:f4:1a:ea:f4:a9:63:
         bc:7d:03:c1:ae:68:c7:fe:23:b0:80:1c:17:5d:aa:7d:02:0b:
         ab:28:9d:c0:94:19:27:10:ee:ad:b4:f2:0e:5d:cf:39:7d:bc:
         74:65:01:64:d2:82:46:c5:5e:0a:dc:b5:8d:5c:89:47:8b:31:
         28:a0:2c:88:87:89:d8:67:1f:e3:07:c4:bf:ff:76:b2:99:0f:
         f9:07:b0:2a:95:87:be:37:e0:32:6a:45:f5:e6:fd:1a:c2:d1:
         5f:36:5f:7a:c4:dc:7b:64:7f:49:2e:8d:26:15:be:22:84:4f:
         ed:d0:06:40:96:c3:8c:93:cf:f1:e4:3b:2d:89:a0:69:78:dd:
         1c:7a:32:4d:85:6a:19:1d:88:89:5d:35:6e:50:76:cc:63:bd:
         3d:ce:0b:7a:22:0b:14:3e:60:79:3f:4b:e5:74:5d:bf:e0:02:
         35:0f:86:7d:05:b7:93:16:da:97:a4:fe:4a:5b:51:fa:57:2f:
         00:0e:89:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----