Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91209D3/6540C95A724811EDB2260477C4F9AE02/CxWx_aO3alHDJyRBQEvpyYw9YQ8.mft
File:                     CxWx_aO3alHDJyRBQEvpyYw9YQ8.mft (raw, json)
Hash identifier:          H+W1953zZ542yHa2du6duYJc/gOK4fze8dZHImltSqU=
Subject key identifier:   8C:48:D3:7C:94:12:C8:FB:21:92:9F:9D:1B:21:EF:56:8D:DA:6D:8E
Authority key identifier: 0B:15:B1:FD:A3:B7:6A:51:C3:27:24:41:40:4B:E9:C9:8C:3D:61:0F
Certificate issuer:       /CN=A91209D3/serialNumber=0B15B1FDA3B76A51C3272441404BE9C98C3D610F
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxWx_aO3alHDJyRBQEvpyYw9YQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91209D3/6540C95A724811EDB2260477C4F9AE02/CxWx_aO3alHDJyRBQEvpyYw9YQ8.mft
Manifest number:          DD
Signing time:             Thu 01 Feb 2024 05:23:41 +0000
Manifest this update:     Thu 01 Feb 2024 05:23:41 +0000
Manifest next update:     Thu 08 Feb 2024 05:23:41 +0000
Files and hashes:         1: CxWx_aO3alHDJyRBQEvpyYw9YQ8.crl (hash: 4s2m0hoJDGBTfwm4EKEnj4dNgwl4rRm5aLZnoDzzU54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91209D3/serialNumber=0B15B1FDA3B76A51C3272441404BE9C98C3D610F
        Validity
            Not Before: Feb  1 05:23:41 2024 GMT
            Not After : Feb  8 05:23:41 2024 GMT
        Subject: CN=65bb2add-8510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:a6:6f:88:2c:41:01:c5:0f:23:6f:18:c0:
                    c5:9f:36:79:81:b3:a1:58:6e:f1:fc:b4:34:33:03:
                    18:16:fe:ca:9a:e1:c3:0c:28:71:33:cd:a7:e4:4d:
                    df:a6:5c:d0:5b:78:72:63:20:cb:0b:a4:d1:da:2a:
                    a4:e8:bd:ce:c2:88:22:b1:93:b1:a0:1c:93:94:8b:
                    1c:f9:93:a1:6f:9f:55:8c:c6:bd:99:e8:8a:5d:74:
                    23:e8:55:4b:a1:80:e5:3f:dd:31:7a:29:51:cc:cf:
                    79:7d:3a:fb:7c:0f:e9:fa:32:60:85:47:59:58:89:
                    dd:c1:8e:9e:bc:5f:7e:9c:0d:d3:d5:e6:ce:24:65:
                    61:b7:92:a6:c3:7f:b5:ef:a8:ac:95:d9:ca:0f:db:
                    93:ad:3c:4b:c1:9f:a0:22:29:70:9b:9f:63:0d:1c:
                    6b:be:58:74:92:dc:52:80:0e:f7:7c:a0:17:c6:49:
                    5e:65:8f:85:c6:1a:20:ca:25:1c:c1:e4:09:53:db:
                    9a:a5:ef:49:d4:14:15:76:5c:dc:fb:7c:f3:a2:7a:
                    5e:14:49:bd:c2:bd:98:e3:6f:f1:1c:92:9c:95:5b:
                    42:f4:de:8e:88:ea:0e:1e:b8:3a:2e:80:a8:26:b4:
                    4d:44:d4:55:31:ee:97:b4:46:ed:9f:24:96:da:3c:
                    47:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:48:D3:7C:94:12:C8:FB:21:92:9F:9D:1B:21:EF:56:8D:DA:6D:8E
            X509v3 Authority Key Identifier:
                keyid:0B:15:B1:FD:A3:B7:6A:51:C3:27:24:41:40:4B:E9:C9:8C:3D:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91209D3/6540C95A724811EDB2260477C4F9AE02/CxWx_aO3alHDJyRBQEvpyYw9YQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CxWx_aO3alHDJyRBQEvpyYw9YQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91209D3/6540C95A724811EDB2260477C4F9AE02/CxWx_aO3alHDJyRBQEvpyYw9YQ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3b:c5:2a:a9:d2:9f:ff:87:93:2e:7c:e5:2a:65:55:83:3a:
         eb:51:9a:50:fb:71:f6:07:49:ac:8f:d3:08:63:4b:52:00:2e:
         25:9d:f2:47:9e:2f:60:90:cc:97:09:ea:d4:00:ac:bc:a9:53:
         1a:3f:fd:97:68:8e:a3:a0:ee:52:a0:c4:0b:29:89:d2:dc:b7:
         ca:85:0b:54:35:2b:0c:32:14:3d:0c:d5:e5:17:68:ac:8b:49:
         a1:7c:3b:9c:d6:72:7a:1b:57:83:a0:99:88:cf:ce:a3:92:6b:
         fe:3f:83:69:2d:26:ae:11:6b:31:35:94:4d:5b:96:88:ff:9d:
         cc:a7:55:2b:76:3f:b4:d3:06:cf:30:91:9c:7d:0e:dd:e0:58:
         c9:c7:87:c5:fe:a9:fb:cd:b1:aa:0b:89:16:1d:dd:7f:3b:04:
         7f:54:27:08:79:71:b9:17:fa:ff:33:29:69:ee:4d:e0:c9:dc:
         8a:99:7b:a9:2f:62:30:23:b6:af:c7:29:b4:8c:a4:a6:29:b9:
         ea:6d:46:e7:cc:28:f2:27:b9:b7:a5:9f:fe:0d:97:f6:d8:eb:
         13:e2:d5:1c:93:2b:a1:6b:80:6c:ec:a2:0a:5b:c6:3e:bf:2d:
         c0:7c:64:e9:bc:15:ad:2b:0a:2c:6c:2a:c6:f5:4a:db:14:69:
         9d:54:36:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:56 2024 by rpki-client on console-fra.rpki-client.org