Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
File:                     k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft (raw, json)
Hash identifier:          xEh/VwJQKz9ysuk9+GDO2t6Een0zyoGDQxvxkOptsv4=
Subject key identifier:   9B:5D:B0:28:AD:BB:78:3D:36:15:F2:D6:79:4A:20:1A:F0:52:2F:73
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Certificate issuer:       /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial:       0897
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
Manifest number:          088E
Signing time:             Sat 29 Mar 2025 01:39:55 +0000
Manifest this update:     Sat 29 Mar 2025 01:39:55 +0000
Manifest next update:     Mon 31 Mar 2025 01:39:55 +0000
Files and hashes:         1: k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl (hash: zYNEzDRA2/CweqZf78DtpqS9P8tVbFra/e7JYtn5IPc=)
                          2: C7641772A95111E996327569F8AEA228.roa (hash: zc2sHBHJr4VAxxPP7oCatGt+nqgAgifPd0TVAOYCceY=)
                          3: A3FDC7B0A95111E9AAD65A69F8AEA228.roa (hash: 0K5eGgVbvu8FC7WyD8sLN1TIhCRCwpbYVJe4XMYjSoU=)
                          4: DB963EBAA95011E9B922BA68F8AEA228.roa (hash: vNERaKTpGQ3bPaoxkOtKP33r5596Gf5AbL5hU7WDtMM=)
                          5: 040A9D2CA95211E9BA19AD69F8AEA228.roa (hash: d5eKRJswPQOdst1U1f3S5KMf2lH/jWZCYOfKv1LJoCI=)
                          6: E558A086A95111E981E48069F8AEA228.roa (hash: MBZdMaPZOc8kPGCwpfLOeCgHyo2GuPSxS7SV1R8ZrgE=)
                          7: E95E4E02065B11F0BF610D92762E951A.roa (hash: hC1qoRCVr73SSJvtnxgOKj5VeDUtOUW6+PzCj2xq8vw=)
                          8: 833F912AA95111E9AEA64269F8AEA228.roa (hash: CVPSUPHc97z8+REt/xLFN1h3Agjjhgwt02UGfD7Jtsc=)
                          9: 7B3DF01C8F6F11E9B8F82D5FF8AEA228.roa (hash: nFOWMxTM8t65qguasjyQKc77AeNcYXGCBaZB7vYGI0Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2199 (0x897)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FEA6BAF
        Validity
            Not Before: Mar 29 01:39:55 2025 GMT
            Not After : Mar 31 01:39:55 2025 GMT
        Subject: CN=67e74f6b-d760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:1f:2a:d6:5a:9c:5f:1d:a8:dc:66:70:9e:
                    90:57:f5:dd:75:f7:49:e0:07:5b:f8:c5:10:88:3b:
                    f4:3d:05:5f:42:ed:b1:3a:ce:29:aa:8d:a6:e0:cc:
                    cf:23:82:bb:3f:30:d5:61:40:1c:36:87:f1:d1:78:
                    ba:a4:2c:e0:58:bd:d4:4a:0e:ec:53:70:64:32:9b:
                    7b:de:be:e2:0d:f9:b3:37:6f:c6:de:0d:4f:5d:6a:
                    92:fd:ba:0d:83:b8:be:0e:a7:47:59:35:37:f8:c6:
                    d0:cd:cf:36:cc:c0:95:94:db:0a:e8:9b:35:9f:fd:
                    5e:da:45:6c:5f:d3:fc:c5:89:15:e8:d4:8e:bf:6e:
                    1e:ca:10:14:9a:2a:58:ee:a3:9c:74:32:e8:ba:0c:
                    f7:df:fb:22:70:fa:e7:1d:f7:a4:cf:ac:3a:2f:2b:
                    04:57:3c:cf:ac:c9:bc:57:2d:62:8f:73:6c:33:2a:
                    54:52:29:e3:3c:5f:25:1e:04:13:e7:5b:ce:a4:ab:
                    f8:f1:6e:12:67:d7:0e:1f:f4:af:04:21:d3:d1:88:
                    7a:99:98:35:a4:a2:60:d4:09:0d:d2:1c:19:bc:f5:
                    1d:04:99:a1:12:8b:6c:9b:0a:7c:fc:28:c8:1f:92:
                    d6:b2:ca:5f:d1:d9:cb:e6:22:17:e0:ef:c7:33:4d:
                    26:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5D:B0:28:AD:BB:78:3D:36:15:F2:D6:79:4A:20:1A:F0:52:2F:73
            X509v3 Authority Key Identifier:
                keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b1:1c:a4:37:a6:f1:69:ae:6d:34:c4:88:02:29:4e:6a:16:
         9a:09:68:55:c7:fe:fb:39:81:a3:fc:ba:42:1b:96:f2:88:27:
         bc:a0:5c:09:d8:e3:cc:1b:c8:89:2c:c6:b4:da:8d:36:bb:69:
         4c:df:86:5f:21:b0:12:2f:c3:6f:5e:0a:d3:e2:1f:a9:a5:18:
         85:a9:fa:76:06:2d:97:7b:8b:bc:b0:da:37:85:01:c7:46:f8:
         51:67:4e:b5:0b:f5:82:67:12:e3:ac:91:5e:d1:44:26:71:20:
         14:7c:92:e3:04:98:97:27:a1:bb:89:5f:e4:e8:c6:b7:4f:12:
         2d:21:b2:4c:a6:d9:8f:f1:71:a8:c6:72:86:64:e5:58:a9:b6:
         2f:8d:29:98:26:93:94:ec:b9:06:49:26:31:17:e9:80:68:fb:
         bb:ce:36:6f:41:2c:c8:a5:fb:31:02:6f:52:68:d4:89:9a:da:
         5f:cf:70:ce:93:71:42:6f:37:fc:36:a3:2c:57:b4:92:33:0d:
         e5:aa:60:9c:a9:e3:50:d7:31:05:f0:89:e2:3f:62:6a:3c:3a:
         87:39:25:2c:d0:33:9c:80:ea:2b:5d:2a:ab:59:8a:8a:17:4a:
         78:87:f2:f2:0c:38:c6:68:10:94:45:6e:3e:bd:54:90:03:c0:
         ce:1e:a9:8b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkVBNkJBRjExMC8GA1UEBRMoOTNDMkM5OUFGMEVDNEQxQTQ2NDM0OTdGNUY4Q0JE
QzdFQzQ1NzQ4RjAeFw0yNTAzMjkwMTM5NTVaFw0yNTAzMzEwMTM5NTVaMBgxFjAU
BgNVBAMTDTY3ZTc0ZjZiLWQ3NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFGB8q1lqcXx2o3GZwnpBX9d1190ngB1v4xRCIO/Q9BV9C7bE6zimqjabg
zM8jgrs/MNVhQBw2h/HReLqkLOBYvdRKDuxTcGQym3vevuIN+bM3b8beDU9dapL9
ug2DuL4Op0dZNTf4xtDNzzbMwJWU2wromzWf/V7aRWxf0/zFiRXo1I6/bh7KEBSa
Kljuo5x0Mui6DPff+yJw+ucd96TPrDovKwRXPM+sybxXLWKPc2wzKlRSKeM8XyUe
BBPnW86kq/jxbhJn1w4f9K8EIdPRiHqZmDWkomDUCQ3SHBm89R0EmaESi2ybCnz8
KMgfktayyl/R2cvmIhfg78czTSZFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUm12w
KK27eD02FfLWeUogGvBSL3MwHwYDVR0jBBgwFoAUk8LJmvDsTRpGQ0l/X4y9x+xF
dI8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZFQTZCLzdCMjc5MjBFOEI4MjExRTk4ODhCNkY3M0Y4QUVBMjI4L2s4TEpt
dkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2s4TEptdkRzVFJwR1EwbF9YNHk5eC14RmRJOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkVBNkIvN0IyNzkyMEU4QjgyMTFFOTg4OEI2RjczRjhB
RUEyMjgvazhMSm12RHNUUnBHUTBsX1g0eTl4LXhGZEk4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApsRykN6bxaa5tNMSIAilOahaaCWhV
x/77OYGj/LpCG5byiCe8oFwJ2OPMG8iJLMa02o02u2lM34ZfIbASL8NvXgrT4h+p
pRiFqfp2Bi2Xe4u8sNo3hQHHRvhRZ061C/WCZxLjrJFe0UQmcSAUfJLjBJiXJ6G7
iV/k6Ma3TxItIbJMptmP8XGoxnKGZOVYqbYvjSmYJpOU7LkGSSYxF+mAaPu7zjZv
QSzIpfsxAm9SaNSJmtpfz3DOk3FCbzf8NqMsV7SSMw3lqmCcqeNQ1zEF8IniP2Jq
PDqHOSUs0DOcgOorXSqrWYqKF0p4h/LyDDjGaBCURW4+vVSQA8DOHqmL
-----END CERTIFICATE-----