Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/epl7T1IXZt3qSsody6OZIMJy-Qc.mft
File:                     epl7T1IXZt3qSsody6OZIMJy-Qc.mft (raw, json)
Hash identifier:          WvceYqule31bQhpGJgzOlO2wBENflc4kA9fiDarcxw8=
Subject key identifier:   57:D1:B2:54:54:96:EF:91:D6:7D:7F:7B:4A:2E:5C:B9:49:9B:01:66
Authority key identifier: 7A:99:7B:4F:52:17:66:DD:EA:4A:CA:1D:CB:A3:99:20:C2:72:F9:07
Certificate issuer:       /CN=A918C287/serialNumber=7A997B4F521766DDEA4ACA1DCBA39920C272F907
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epl7T1IXZt3qSsody6OZIMJy-Qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/epl7T1IXZt3qSsody6OZIMJy-Qc.mft
Manifest number:          05
Signing time:             Wed 06 Apr 2022 17:06:42 +0000
Manifest this update:     Wed 06 Apr 2022 17:06:41 +0000
Manifest next update:     Fri 08 Apr 2022 17:06:41 +0000
Files and hashes:         1: epl7T1IXZt3qSsody6OZIMJy-Qc.crl (hash: J3E+v0Wo6LsmTu4wrd5B/3/OeT+r5ituUYCSPa2lFT0=)
                          2: 7BB3148AB48011ECB2D05431C4F9AE02.roa (hash: T72FE86ZhujcJho5unPacU8rwtfm/teOj1tvJOwkDEE=)
                          3: 7C66069EB48011ECB2D05431C4F9AE02.roa (hash: yfbOykuBTu8DKCwLyLRjOOHhHuE2x3//y8+TVH2Qy4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C287/serialNumber=7A997B4F521766DDEA4ACA1DCBA39920C272F907
        Validity
            Not Before: Apr  6 17:06:41 2022 GMT
            Not After : Apr  8 17:06:41 2022 GMT
        Subject: CN=624dc8a2-3b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e4:c6:24:d5:62:4f:95:af:08:87:9e:83:ab:
                    80:4a:a9:54:52:ba:ad:be:d3:b8:bf:40:9c:68:c9:
                    02:b2:38:1b:21:a9:51:5c:66:61:9e:17:ec:09:8e:
                    32:a8:0c:71:46:60:46:06:4e:e2:5a:fb:19:ca:ea:
                    db:c2:e8:2b:7a:73:7a:d6:ae:b4:d2:d3:0e:51:1f:
                    42:dd:0e:ee:86:ec:8c:13:7f:71:90:00:c5:fd:df:
                    0d:27:27:bb:60:2b:67:7d:c3:10:93:7b:4a:1f:d3:
                    4e:41:05:07:95:30:f6:aa:ea:c5:86:9e:c9:46:1e:
                    cf:92:41:c6:8a:d4:c5:b1:a8:8f:81:73:63:66:d2:
                    5c:82:53:07:e4:c3:73:d6:6e:86:20:b8:35:00:62:
                    bc:07:75:a7:48:4e:71:b2:cd:0f:bb:d8:82:dd:fd:
                    b3:d9:41:72:d9:17:29:8f:2d:c8:ec:3d:cb:c2:42:
                    84:d1:1c:37:4d:63:e0:94:a9:60:d9:74:65:28:0c:
                    ea:d0:de:2e:d2:39:cb:f4:40:ae:b6:07:90:13:0b:
                    d2:1c:46:9c:fa:92:56:e1:04:95:20:ae:d9:43:f6:
                    a6:72:a7:83:88:11:b8:af:e5:7d:08:d7:e3:75:96:
                    e3:b2:0e:c3:8b:6c:56:c5:2b:b6:4b:49:d2:aa:77:
                    eb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D1:B2:54:54:96:EF:91:D6:7D:7F:7B:4A:2E:5C:B9:49:9B:01:66
            X509v3 Authority Key Identifier:
                keyid:7A:99:7B:4F:52:17:66:DD:EA:4A:CA:1D:CB:A3:99:20:C2:72:F9:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/epl7T1IXZt3qSsody6OZIMJy-Qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epl7T1IXZt3qSsody6OZIMJy-Qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/5C39C70EB47E11EC9219D230C4F9AE02/epl7T1IXZt3qSsody6OZIMJy-Qc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e8:31:1f:86:2d:c1:2b:33:a7:06:6d:30:ea:c7:9b:a1:17:
         57:2f:63:35:2f:9a:02:dd:a5:e6:8c:60:cc:ab:63:9e:96:96:
         13:75:7c:c5:2d:4a:be:74:b6:72:06:c5:eb:84:98:e8:29:b0:
         32:15:bd:15:c0:df:06:a4:4c:ac:47:27:20:fc:a5:39:76:cb:
         09:e5:7d:cc:28:d7:84:c0:4e:c1:b1:0a:e6:6c:d7:25:3b:9d:
         49:7c:af:70:3b:d5:6d:8b:f9:da:d8:d2:89:da:86:71:2e:54:
         8c:48:45:9b:c9:c0:aa:92:fd:0f:c8:16:c6:85:52:1d:eb:d3:
         89:fa:8a:fe:ab:b4:c0:39:2e:6b:78:85:75:6f:bf:0f:72:a5:
         96:c0:6e:8e:3f:13:13:a7:17:07:dd:74:0f:e7:e3:99:47:fc:
         e6:6d:31:e8:c0:6e:a4:7c:77:ce:a2:a5:94:cf:30:4c:a0:a9:
         5d:d6:3f:74:f8:e4:27:e9:21:48:29:c3:21:f8:47:b4:99:0f:
         a9:2c:a5:05:ef:4f:4d:11:01:ad:6a:89:d6:c1:c9:e4:07:ab:
         41:43:a2:80:1b:fe:c4:96:16:82:2e:ac:52:eb:9d:ca:e6:39:
         c1:3d:c3:bd:54:a0:ed:ec:4f:b0:6a:0f:2b:46:31:85:c1:c5:
         a5:ca:9e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:15 2024 by rpki-client on console-fra.rpki-client.org