Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E94/9A0F8854AA0B11EA94461B25C4F9AE02/FFzrebDV25_E539RL2cjCF8-0bk.mft
File:                     FFzrebDV25_E539RL2cjCF8-0bk.mft (raw, json)
Hash identifier:          AgP57Wxca1bO99ka127+d6jqJuvOeQCl0UBMUOIieS0=
Subject key identifier:   56:AA:C9:6D:D9:95:96:E0:34:5B:74:6F:41:F9:1F:A9:CC:FA:8E:AA
Authority key identifier: 14:5C:EB:79:B0:D5:DB:9F:C4:E7:7F:51:2F:67:23:08:5F:3E:D1:B9
Certificate issuer:       /CN=A9149E94/serialNumber=145CEB79B0D5DB9FC4E77F512F6723085F3ED1B9
Certificate serial:       0739
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFzrebDV25_E539RL2cjCF8-0bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149E94/9A0F8854AA0B11EA94461B25C4F9AE02/FFzrebDV25_E539RL2cjCF8-0bk.mft
Manifest number:          0733
Signing time:             Sat 31 Dec 2022 22:31:51 +0000
Manifest this update:     Sat 31 Dec 2022 22:31:51 +0000
Manifest next update:     Sat 07 Jan 2023 22:31:51 +0000
Files and hashes:         1: FFzrebDV25_E539RL2cjCF8-0bk.crl (hash: yvnQndBhaoqY1cAKpv7XJdNpBXVYHo2P5aZIo7QIEXw=)
                          2: 4DA0DCC8AA0D11EA9746F027C4F9AE02.roa (hash: 8LDJb7TOoAJoQPnm4JdROPHfDod5w7Y5eEvSrYvuT5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1849 (0x739)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149E94/serialNumber=145CEB79B0D5DB9FC4E77F512F6723085F3ED1B9
        Validity
            Not Before: Dec 31 22:31:51 2022 GMT
            Not After : Jan  7 22:31:51 2023 GMT
        Subject: CN=63b0b857-f90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ea:22:46:0b:18:b5:20:11:69:f7:fe:ea:d9:
                    93:08:b4:82:e5:38:c1:09:cd:3e:f1:7d:b6:cd:f0:
                    b7:43:91:ea:40:91:ff:8d:27:3f:55:35:58:ee:fe:
                    04:27:10:3c:40:7e:8d:f8:43:a4:fd:53:b3:6a:d3:
                    16:cf:4e:6c:6b:6d:f6:57:5f:bd:1a:c0:1d:b4:9b:
                    36:5e:7c:a2:fe:86:52:ea:9e:76:8b:48:81:4a:57:
                    94:53:fe:a1:9a:44:0a:2f:a9:ca:a2:ed:0a:e6:66:
                    2b:ce:f7:38:2d:8a:2c:0d:fe:2f:43:af:2d:41:9b:
                    ac:5f:e1:96:e9:06:52:5c:38:32:0b:4b:cb:a6:ab:
                    18:a9:9c:90:89:40:a3:8f:1f:2c:61:cb:ae:66:64:
                    dd:04:b1:ae:ed:41:0a:71:ca:6e:7e:a3:ca:84:8b:
                    6d:fc:9e:33:eb:70:11:b6:91:e1:14:b0:5b:60:80:
                    3b:79:c5:49:4a:d0:df:08:d0:f6:bf:f1:cf:75:d0:
                    e4:cb:b6:04:dc:ba:01:4d:2a:22:e6:c7:ec:e8:19:
                    e5:dd:06:8d:2b:2a:1d:87:b4:e6:86:6c:4f:75:64:
                    c6:ad:45:26:83:d9:f2:97:49:ee:f1:64:11:d6:78:
                    d6:8c:e3:ec:06:86:f0:d5:82:c9:3b:33:b8:00:76:
                    87:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AA:C9:6D:D9:95:96:E0:34:5B:74:6F:41:F9:1F:A9:CC:FA:8E:AA
            X509v3 Authority Key Identifier:
                keyid:14:5C:EB:79:B0:D5:DB:9F:C4:E7:7F:51:2F:67:23:08:5F:3E:D1:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149E94/9A0F8854AA0B11EA94461B25C4F9AE02/FFzrebDV25_E539RL2cjCF8-0bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFzrebDV25_E539RL2cjCF8-0bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E94/9A0F8854AA0B11EA94461B25C4F9AE02/FFzrebDV25_E539RL2cjCF8-0bk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:67:ee:d2:15:4d:fd:42:60:a7:05:6a:c8:d9:69:e6:c6:94:
         5e:8f:ca:ae:00:12:49:91:85:ff:85:0c:c1:59:68:d1:6e:79:
         62:e8:ff:57:61:63:1e:b1:7a:3e:d1:ec:83:26:b7:ea:f9:5e:
         c0:8c:6c:f3:d7:9f:0e:05:2e:ce:2e:2f:36:cd:fa:4d:0c:bf:
         48:31:bd:62:92:0a:41:f9:25:45:7f:bd:f5:94:c1:81:d9:9c:
         13:f2:be:c0:a7:e0:cc:da:56:f1:40:34:bd:f4:dc:2f:c4:8c:
         fa:08:71:98:17:f3:bb:e8:09:ea:90:cc:8e:59:ee:0a:2c:1d:
         7a:6a:65:3c:4c:cb:07:51:41:5e:7e:3c:62:ac:54:8d:4f:05:
         6b:ac:87:92:21:82:50:42:87:57:5f:ad:61:b3:fa:35:80:07:
         f6:fc:ef:f3:75:85:09:d7:13:6e:70:24:28:b1:60:7c:54:48:
         6a:09:4e:77:5e:4f:00:24:a3:7a:54:3d:db:0d:ef:37:3f:06:
         2d:91:8b:ed:20:49:6e:f0:d3:ff:aa:bd:2a:69:fa:1e:1d:dc:
         d9:54:ce:97:2f:be:e8:3a:d8:5e:c3:91:29:a5:27:5b:1b:37:
         46:c2:01:d7:71:8b:1f:b9:53:0b:50:f9:f6:41:44:6e:b0:3c:
         5f:d5:59:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org