Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/HcXnECl8UjHHsqVloUYFURjmUmQ.mft
File:                     HcXnECl8UjHHsqVloUYFURjmUmQ.mft (raw, json)
Hash identifier:          /Lyys62jop/Ewp2OHqf/XGFnO43zKxXPRFiysV7qSRY=
Subject key identifier:   5E:78:D5:9F:F3:1C:1B:48:57:E3:26:8E:FE:D6:AD:CB:69:C9:B7:4B
Authority key identifier: 1D:C5:E7:10:29:7C:52:31:C7:B2:A5:65:A1:46:05:51:18:E6:52:64
Certificate issuer:       /CN=A9197DC3/serialNumber=1DC5E710297C5231C7B2A565A146055118E65264
Certificate serial:       0907
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcXnECl8UjHHsqVloUYFURjmUmQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/HcXnECl8UjHHsqVloUYFURjmUmQ.mft
Manifest number:          09F4
Signing time:             Thu 16 May 2024 03:40:36 +0000
Manifest this update:     Thu 16 May 2024 03:40:36 +0000
Manifest next update:     Thu 23 May 2024 03:40:36 +0000
Files and hashes:         1: HcXnECl8UjHHsqVloUYFURjmUmQ.crl (hash: sgl+CtNX9HY/PoLXwPmHOEre9HILT41yGwWf2FWuRt4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2311 (0x907)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197DC3/serialNumber=1DC5E710297C5231C7B2A565A146055118E65264
        Validity
            Not Before: May 16 03:40:36 2024 GMT
            Not After : May 23 03:40:36 2024 GMT
        Subject: CN=66458034-0ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:08:f8:d2:9d:85:a6:47:2a:44:aa:a5:3b:
                    3e:23:7c:f6:17:10:bd:e3:cc:ff:4d:76:2f:16:28:
                    e8:0f:47:ee:91:96:84:88:9a:0f:67:24:6c:f1:c9:
                    0e:2b:4d:ff:8e:a1:18:b4:45:67:fa:f6:bb:39:b4:
                    be:ea:97:48:50:ba:70:e9:7d:a4:6a:dc:1a:fd:00:
                    69:45:9d:88:65:d3:b0:6c:77:0a:56:56:48:69:4d:
                    f1:b3:28:b0:09:bf:67:8b:e5:2b:30:e2:5f:28:85:
                    c0:9a:10:bc:80:63:fd:0f:a8:cb:37:5b:38:07:9a:
                    b0:cc:53:6f:0a:d1:15:de:a2:a6:ea:d7:f7:46:04:
                    db:0e:1f:38:ef:9c:93:f0:40:f4:91:07:9c:c5:d7:
                    a2:f2:26:a2:2b:64:39:06:10:c9:5d:a7:6e:17:6b:
                    80:be:53:0d:ab:55:2b:1a:33:6e:b8:70:37:59:92:
                    cf:3a:f8:07:51:32:3e:d7:41:8d:65:c4:09:26:e1:
                    f6:b1:b9:70:12:be:7d:ea:24:6d:ac:38:24:ea:44:
                    ce:ce:4b:8c:ef:86:9f:60:ef:23:5f:20:84:c6:15:
                    d7:e3:2d:22:3c:04:33:98:02:f2:36:5a:e5:f3:35:
                    e9:09:94:5b:40:d9:d1:70:31:40:82:19:d4:1f:80:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:78:D5:9F:F3:1C:1B:48:57:E3:26:8E:FE:D6:AD:CB:69:C9:B7:4B
            X509v3 Authority Key Identifier:
                keyid:1D:C5:E7:10:29:7C:52:31:C7:B2:A5:65:A1:46:05:51:18:E6:52:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/HcXnECl8UjHHsqVloUYFURjmUmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HcXnECl8UjHHsqVloUYFURjmUmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197DC3/E65118A284A611EAAC51421FC4F9AE02/HcXnECl8UjHHsqVloUYFURjmUmQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f7:e6:49:2c:a3:cc:b4:8d:b9:fa:a1:66:fb:98:04:c2:26:
         01:59:89:1e:76:91:18:c7:0f:e4:c7:a5:de:ac:9f:d2:45:2d:
         3b:23:1a:16:48:b0:6d:23:a3:fe:0d:b4:1a:fd:3a:a4:f6:1f:
         1e:af:bf:e3:9c:df:1b:f2:76:f5:c0:eb:f7:6c:5e:d5:75:c3:
         82:c5:0e:cc:fd:88:cc:a6:f5:57:17:04:b7:02:55:6c:10:4e:
         12:cc:e0:56:07:05:fd:2a:ed:89:af:f9:7b:c7:ca:de:9f:18:
         88:1d:17:47:4b:d0:68:8e:08:0b:07:52:66:4f:47:f0:f0:36:
         85:65:4d:8f:05:14:40:f7:4c:80:4a:4c:70:3b:cc:90:ab:f7:
         97:2d:3f:d4:a5:47:45:a2:ad:7e:f2:30:c9:1c:7a:f4:d6:fd:
         31:16:27:d6:09:a7:a6:d0:4b:c8:c1:7f:a8:c1:f4:86:8d:e7:
         9d:f1:05:f9:38:11:35:c3:12:2b:0e:2e:45:ec:7c:4f:d5:db:
         ee:f0:b9:92:c7:02:78:74:7a:88:3a:a1:cd:d3:5e:3e:22:55:
         fc:f1:b9:7c:27:fb:13:19:2f:05:4d:f2:7c:b7:ba:95:bb:64:
         c1:ca:82:b3:fa:fb:d5:80:46:10:01:3d:10:c6:84:06:29:b4:
         30:be:c0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----