Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919813C/51087752913B11EB9599B974C4F9AE02/SxrR1F0TAKCvIW2bcZVX57RRsPU.mft
File:                     SxrR1F0TAKCvIW2bcZVX57RRsPU.mft (raw, json)
Hash identifier:          WGa6dDRTTjgGvjSunEpLjdAqNqtpwlOH1xGQQmLDtEw=
Subject key identifier:   78:5A:07:C1:1F:88:A0:3A:74:13:C7:C8:B2:5C:EC:C6:39:47:29:E4
Authority key identifier: 4B:1A:D1:D4:5D:13:00:A0:AF:21:6D:9B:71:95:57:E7:B4:51:B0:F5
Certificate issuer:       /CN=A919813C/serialNumber=4B1AD1D45D1300A0AF216D9B719557E7B451B0F5
Certificate serial:       04E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxrR1F0TAKCvIW2bcZVX57RRsPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919813C/51087752913B11EB9599B974C4F9AE02/SxrR1F0TAKCvIW2bcZVX57RRsPU.mft
Manifest number:          04E0
Signing time:             Sun 16 Jul 2023 23:33:32 +0000
Manifest this update:     Sun 16 Jul 2023 23:33:32 +0000
Manifest next update:     Sun 23 Jul 2023 23:33:32 +0000
Files and hashes:         1: SxrR1F0TAKCvIW2bcZVX57RRsPU.crl (hash: Uypn6TOnA/+CPyqH+XIheAjQzG6/7CC5nOURPK4jRhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252 (0x4e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919813C/serialNumber=4B1AD1D45D1300A0AF216D9B719557E7B451B0F5
        Validity
            Not Before: Jul 16 23:33:32 2023 GMT
            Not After : Jul 23 23:33:32 2023 GMT
        Subject: CN=64b47e4c-4225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:93:64:ca:8d:4b:68:6b:b7:33:78:11:1e:
                    b0:23:f9:ff:68:d9:76:ba:c4:b9:22:ff:86:84:1a:
                    46:d2:74:5f:ee:2a:02:dc:4d:ac:1c:37:6c:5f:ab:
                    14:b8:9e:b6:c1:70:80:80:e7:c3:2e:c1:76:ad:7a:
                    36:28:f9:c5:e6:89:be:2b:d6:c4:88:e6:05:2b:3c:
                    49:84:68:0d:69:f8:1e:fe:10:e2:5f:ec:b9:f5:02:
                    ca:01:5f:bc:82:41:bb:95:67:0a:a3:ab:c8:09:f2:
                    d4:fe:d7:3b:e9:50:12:08:32:4d:5a:5e:58:f2:0c:
                    ed:8f:19:80:ed:b0:ae:0c:48:75:cf:fb:61:5c:9c:
                    7d:6c:c3:74:83:81:56:84:43:00:c6:fa:da:bb:7a:
                    c5:f0:0c:54:50:f3:b2:40:75:5c:3c:01:a9:68:df:
                    f1:dd:9d:e1:c8:51:b4:05:dc:d4:a4:9c:fa:3c:a5:
                    8a:d4:7c:8c:bd:2b:14:23:86:d5:8a:66:b1:79:f0:
                    39:fc:1a:bc:10:ba:bb:b8:a9:3d:9f:42:01:10:ea:
                    12:2c:9e:95:c7:1f:f8:aa:34:79:51:c0:77:be:eb:
                    3f:1f:83:b7:35:42:91:ce:df:8d:1d:b5:fe:a5:cf:
                    3c:c1:53:0c:e2:a8:74:c5:c2:1c:08:6f:c4:dd:4a:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5A:07:C1:1F:88:A0:3A:74:13:C7:C8:B2:5C:EC:C6:39:47:29:E4
            X509v3 Authority Key Identifier:
                keyid:4B:1A:D1:D4:5D:13:00:A0:AF:21:6D:9B:71:95:57:E7:B4:51:B0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919813C/51087752913B11EB9599B974C4F9AE02/SxrR1F0TAKCvIW2bcZVX57RRsPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxrR1F0TAKCvIW2bcZVX57RRsPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919813C/51087752913B11EB9599B974C4F9AE02/SxrR1F0TAKCvIW2bcZVX57RRsPU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4d:4a:14:18:84:db:33:66:ae:a2:0b:bf:5b:f7:fc:72:18:
         7f:64:7b:2a:39:fe:97:80:69:3e:19:4e:89:7c:af:ae:58:41:
         84:3a:15:51:c7:3e:d0:0b:05:60:95:d1:8d:c4:40:7b:31:ab:
         38:d1:21:69:d6:ae:90:58:a1:ba:85:c9:fa:fc:ca:f3:d2:cf:
         2c:b3:32:e6:dc:25:f6:ed:52:f5:aa:e9:96:a1:53:09:90:36:
         40:0a:c7:77:fd:0c:db:b1:e6:05:d9:c0:45:10:f7:e4:a2:7a:
         93:fc:9a:2a:a9:03:32:72:c8:ee:89:3c:3e:42:c2:d4:bc:2c:
         96:63:71:1f:71:1b:a7:60:bc:6c:b3:c3:b8:05:12:c3:50:cd:
         99:00:10:a3:87:c0:a3:96:4a:07:f9:0c:38:17:5c:ea:4e:ff:
         38:2c:44:80:ac:76:28:2a:a4:fb:d6:45:cb:0c:c2:8d:d7:ac:
         88:5f:90:4f:78:e5:fe:f4:cd:d5:19:3b:f3:32:7a:60:3a:c0:
         41:20:d9:77:6e:7a:4b:f4:9a:66:45:c6:10:53:5f:54:0e:ae:
         09:c0:43:44:dd:26:51:49:65:44:b3:c6:46:1c:65:9a:6b:51:
         10:e9:26:0f:f4:2c:b7:d4:b1:a5:17:2e:6d:95:09:ae:e3:01:
         8d:19:19:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----