Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/NRzvlFCU03pERx4cCnt6tzrruZw.mft
File:                     NRzvlFCU03pERx4cCnt6tzrruZw.mft (raw, json)
Hash identifier:          yI+JwJfwu1rTWQKtBDvT1bH1V0gMTK8dvRdyGUbIgO8=
Subject key identifier:   EA:3C:F0:C6:FF:C8:F0:B5:D6:2C:17:18:FA:56:FB:5C:97:53:17:96
Authority key identifier: 35:1C:EF:94:50:94:D3:7A:44:47:1E:1C:0A:7B:7A:B7:3A:EB:B9:9C
Certificate issuer:       /CN=A91E2337/serialNumber=351CEF945094D37A44471E1C0A7B7AB73AEBB99C
Certificate serial:       0892
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzvlFCU03pERx4cCnt6tzrruZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/NRzvlFCU03pERx4cCnt6tzrruZw.mft
Manifest number:          0881
Signing time:             Wed 06 Apr 2022 20:37:53 +0000
Manifest this update:     Wed 06 Apr 2022 20:37:52 +0000
Manifest next update:     Fri 08 Apr 2022 20:37:52 +0000
Files and hashes:         1: NRzvlFCU03pERx4cCnt6tzrruZw.crl (hash: OcObr0QhTUue8a1qxB1RPsonZTv/CYizXo0TYGKVEbk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194 (0x892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2337/serialNumber=351CEF945094D37A44471E1C0A7B7AB73AEBB99C
        Validity
            Not Before: Apr  6 20:37:52 2022 GMT
            Not After : Apr  8 20:37:52 2022 GMT
        Subject: CN=624dfa20-75c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:38:a8:19:21:83:d2:bd:e8:f7:ca:1a:10:78:
                    27:0a:15:04:6b:39:c1:34:f5:67:0e:aa:3f:4b:a6:
                    36:5c:c5:e7:28:be:f4:97:6a:1f:af:c2:ce:a2:cb:
                    8a:85:76:53:11:63:04:31:96:ce:7f:73:80:82:06:
                    df:38:54:48:56:9d:ec:b9:38:29:e8:7c:eb:ac:f9:
                    72:60:30:94:9b:21:a7:83:17:91:4c:88:5f:ae:30:
                    67:9e:8e:22:8e:53:30:ca:f7:be:95:af:1d:5b:b9:
                    f3:4e:e3:3c:b9:21:61:a7:c2:45:79:4d:a9:40:2c:
                    48:02:e8:75:2a:81:48:4e:8d:2d:10:27:df:b9:a2:
                    45:52:76:eb:ac:7b:be:72:86:a9:63:5c:1c:a3:e7:
                    25:02:b5:e4:fa:13:97:d8:ac:b0:c6:fb:e9:ad:d9:
                    92:65:4f:3e:2f:ce:f7:e6:f7:0d:b8:9a:35:e7:69:
                    92:47:74:b5:48:b2:cf:7e:33:70:32:6f:82:4d:98:
                    dc:9e:b2:63:2a:10:9d:c6:81:21:fe:f8:5f:11:4d:
                    c5:39:83:1e:71:9d:db:22:93:b1:ea:55:fc:7b:31:
                    fb:56:f7:cc:8f:15:24:f7:43:ff:79:e1:f0:76:6b:
                    e6:8e:9f:c4:ee:6d:d0:ae:d0:8c:01:6b:89:32:76:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3C:F0:C6:FF:C8:F0:B5:D6:2C:17:18:FA:56:FB:5C:97:53:17:96
            X509v3 Authority Key Identifier:
                keyid:35:1C:EF:94:50:94:D3:7A:44:47:1E:1C:0A:7B:7A:B7:3A:EB:B9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/NRzvlFCU03pERx4cCnt6tzrruZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NRzvlFCU03pERx4cCnt6tzrruZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2337/4F48F8F81B3311EAAD922842C4F9AE02/NRzvlFCU03pERx4cCnt6tzrruZw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:bb:3d:42:5c:c0:9e:cb:20:41:80:84:ea:b6:43:89:83:68:
         0d:83:ca:f0:4b:ca:5c:dd:4e:6b:d1:e9:b2:d4:6b:21:3c:7c:
         24:e3:b9:e9:c9:b9:18:60:e8:91:ca:4c:93:1e:11:d2:59:1f:
         c7:03:0f:03:c4:15:ba:66:d2:2b:9f:36:b1:6e:fb:8d:1f:cd:
         45:15:8a:4a:df:ef:47:e4:98:bc:10:7e:83:c1:30:f1:c7:67:
         8d:35:3c:a2:74:f9:e8:3b:00:4b:cb:8d:f8:cb:fa:19:74:47:
         17:3b:b1:69:47:b0:f8:17:e9:fc:2c:7d:c9:2c:64:46:27:ad:
         99:1f:b6:dd:63:e9:fe:c8:58:02:d7:9b:51:58:f7:d4:38:0a:
         53:1c:d4:11:00:16:56:37:0c:da:7f:35:c9:97:e1:2b:db:97:
         8e:fb:8a:57:c5:bd:aa:dc:56:b7:b0:f1:1b:a2:ea:5a:03:4f:
         5e:41:05:99:a2:dd:07:0d:66:bb:e8:45:7e:8f:4f:e3:73:4a:
         9f:1b:5c:fa:e7:5b:6c:db:be:1b:be:c8:4f:22:9f:6d:9c:55:
         ed:b9:05:da:cd:48:6f:83:2b:8a:85:af:e0:af:05:0d:e7:26:
         31:84:2a:86:e7:da:73:06:87:08:fe:60:dc:f0:d8:a3:49:07:
         86:f4:d8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----