Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/vfR3_mnBmwLvWrQBVpIGtCST4iU.mft
File:                     vfR3_mnBmwLvWrQBVpIGtCST4iU.mft (raw, json)
Hash identifier:          gbLcpoacS+qDibJgs6yUG4XbmUYWCNGxoXmdPbClZ9k=
Subject key identifier:   AA:E0:EF:40:35:8F:B3:55:CF:03:40:E3:2B:CA:86:0F:C5:5D:6E:81
Authority key identifier: BD:F4:77:FE:69:C1:9B:02:EF:5A:B4:01:56:92:06:B4:24:93:E2:25
Certificate issuer:       /CN=F3640DFDAF/serialNumber=BDF477FE69C19B02EF5AB401569206B42493E225
Certificate serial:       0D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vfR3_mnBmwLvWrQBVpIGtCST4iU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/vfR3_mnBmwLvWrQBVpIGtCST4iU.mft
Manifest number:          22
Signing time:             Mon 21 Oct 2024 12:58:39 +0000
Manifest this update:     Mon 21 Oct 2024 12:58:38 +0000
Manifest next update:     Wed 23 Oct 2024 12:58:38 +0000
Files and hashes:         1: vfR3_mnBmwLvWrQBVpIGtCST4iU.crl (hash: /Rf9rF5Du8Xrk9/kiyjMDAcGRJCz7zGym+YUGjvJJwU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640DFDAF/serialNumber=BDF477FE69C19B02EF5AB401569206B42493E225
        Validity
            Not Before: Oct 21 12:58:38 2024 GMT
            Not After : Oct 23 12:58:38 2024 GMT
        Subject: CN=67164fff-2eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ba:9f:a7:5e:41:aa:6e:5e:2a:da:0e:43:d8:
                    3c:a7:97:d4:d6:e0:1e:a6:c1:5f:94:16:09:68:9f:
                    c9:61:23:1c:3a:09:1b:af:6e:6b:20:dc:97:6f:c3:
                    f7:6b:57:7a:bd:e8:51:a6:26:f5:f3:2a:1a:15:60:
                    77:42:7b:ab:03:bf:2a:db:11:d6:9c:e8:3e:6d:42:
                    75:f6:43:01:44:00:e8:68:a3:9e:da:64:bf:8d:b5:
                    36:21:c0:d2:ce:d0:50:2c:cf:94:cd:21:bd:ae:6a:
                    a6:9f:01:62:91:82:89:ec:97:6a:29:c1:26:ad:c0:
                    07:75:e8:f9:a6:d0:98:18:58:e4:07:5b:07:17:34:
                    86:8d:bc:e7:e2:45:90:7a:73:51:82:dd:48:c7:ee:
                    05:d8:26:95:7f:20:35:db:ec:89:e2:5d:e8:51:b4:
                    f7:8d:af:55:5e:01:65:3f:0a:05:67:d4:a0:7b:24:
                    12:ec:54:ba:9c:fa:52:39:19:74:e5:4f:dc:ce:11:
                    4a:d3:fe:d0:87:fe:ff:d1:44:19:12:cd:19:1d:5b:
                    ce:56:c2:36:0d:e6:c7:13:57:cb:85:4e:e6:58:38:
                    8c:29:b3:da:56:ca:b6:99:71:b5:35:16:2d:8f:e5:
                    bc:68:07:f2:21:8b:f9:ae:df:a5:29:3e:b7:38:1b:
                    b4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E0:EF:40:35:8F:B3:55:CF:03:40:E3:2B:CA:86:0F:C5:5D:6E:81
            X509v3 Authority Key Identifier:
                keyid:BD:F4:77:FE:69:C1:9B:02:EF:5A:B4:01:56:92:06:B4:24:93:E2:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/vfR3_mnBmwLvWrQBVpIGtCST4iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vfR3_mnBmwLvWrQBVpIGtCST4iU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/AE0987D2896E11EF8242EE77762E951A/vfR3_mnBmwLvWrQBVpIGtCST4iU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b6:75:b6:51:77:d7:2f:39:05:53:ce:76:34:43:98:29:e7:
         3b:0e:43:f4:ae:1b:6d:7f:43:75:3c:66:53:9b:f6:a0:c5:1e:
         a9:15:7b:3b:75:1c:e1:13:4b:99:d6:45:cd:cf:d9:6f:4b:52:
         31:d4:80:08:94:32:2f:58:6c:5b:f8:c9:89:29:ec:b9:68:2a:
         50:87:dc:92:c8:97:9a:7a:bb:27:78:97:34:4e:c5:84:fd:ab:
         5a:aa:8a:64:88:5c:94:cf:c7:6f:73:0e:55:bb:9e:b6:db:0f:
         44:ef:52:5f:57:4e:e4:b0:e9:6d:4b:88:1d:84:35:48:63:99:
         c3:81:70:50:af:a6:ca:a6:a7:dc:6f:14:84:0a:cf:48:ce:4e:
         b2:bc:3e:f5:5c:e3:de:c3:0e:e6:49:3c:7d:4f:45:7a:2b:01:
         60:21:41:bd:02:5c:f6:33:3e:8b:c3:2b:01:f5:92:c9:29:61:
         92:83:c1:a7:02:61:b5:ea:c5:55:12:7f:aa:c2:5b:99:b8:cd:
         1d:4f:95:47:27:d3:0e:6d:50:b2:6b:d3:7c:33:5d:0a:11:51:
         5a:3e:23:e7:04:1f:84:23:b6:3c:b9:4b:1e:1b:85:f4:34:a3:
         b3:3c:4c:9f:83:fa:9d:86:3a:18:11:06:ad:1f:48:fe:82:52:
         5f:35:34:81
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBDTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MERGREFGMTEwLwYDVQQFEyhCREY0NzdGRTY5QzE5QjAyRUY1QUI0MDE1NjkyMDZC
NDI0OTNFMjI1MB4XDTI0MTAyMTEyNTgzOFoXDTI0MTAyMzEyNTgzOFowGDEWMBQG
A1UEAxMNNjcxNjRmZmYtMmViMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN26n6deQapuXiraDkPYPKeX1NbgHqbBX5QWCWifyWEjHDoJG69uayDcl2/D
92tXer3oUaYm9fMqGhVgd0J7qwO/KtsR1pzoPm1CdfZDAUQA6Gijntpkv421NiHA
0s7QUCzPlM0hva5qpp8BYpGCieyXainBJq3AB3Xo+abQmBhY5AdbBxc0ho285+JF
kHpzUYLdSMfuBdgmlX8gNdvsieJd6FG0942vVV4BZT8KBWfUoHskEuxUupz6UjkZ
dOVP3M4RStP+0If+/9FEGRLNGR1bzlbCNg3mxxNXy4VO5lg4jCmz2lbKtplxtTUW
LY/lvGgH8iGL+a7fpSk+tzgbtPcCAwEAAaOCArgwggK0MB0GA1UdDgQWBBSq4O9A
NY+zVc8DQOMryoYPxV1ugTAfBgNVHSMEGDAWgBS99Hf+acGbAu9atAFWkga0JJPi
JTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDBERkQvQUUwOTg3RDI4OTZFMTFFRjgyNDJFRTc3NzYyRTk1MUEvdmZSM19t
bkJtd0x2V3JRQlZwSUd0Q1NUNGlVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdmZSM19tbkJtd0x2V3JRQlZwSUd0Q1NUNGlVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY0MERGRC9BRTA5ODdEMjg5NkUxMUVGODI0MkVFNzc3NjJF
OTUxQS92ZlIzX21uQm13THZXclFCVnBJR3RDU1Q0aVUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKS2dbZRd9cvOQVTznY0Q5gp5zsOQ/Su
G21/Q3U8ZlOb9qDFHqkVezt1HOETS5nWRc3P2W9LUjHUgAiUMi9YbFv4yYkp7Llo
KlCH3JLIl5p6uyd4lzROxYT9q1qqimSIXJTPx29zDlW7nrbbD0TvUl9XTuSw6W1L
iB2ENUhjmcOBcFCvpsqmp9xvFIQKz0jOTrK8PvVc497DDuZJPH1PRXorAWAhQb0C
XPYzPovDKwH1kskpYZKDwacCYbXqxVUSf6rCW5m4zR1PlUcn0w5tULJr03wzXQoR
UVo+I+cEH4Qjtjy5Sx4bhfQ0o7M8TJ+D+p2GOhgRBq0fSP6CUl81NIE=
-----END CERTIFICATE-----