Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/CI8D5lLYS8azmzSOgBApu5qhYNE.mft
File:                     CI8D5lLYS8azmzSOgBApu5qhYNE.mft (raw, json)
Hash identifier:          mC72iYXPb0frJIGB8Mc4Ys3R348+XehXw02Ruzzcb4E=
Subject key identifier:   89:47:7C:AB:7E:B0:CB:3C:85:44:AF:2C:32:7F:74:14:88:8D:37:B3
Authority key identifier: 08:8F:03:E6:52:D8:4B:C6:B3:9B:34:8E:80:10:29:BB:9A:A1:60:D1
Certificate issuer:       /CN=A91E6E3D/serialNumber=088F03E652D84BC6B39B348E801029BB9AA160D1
Certificate serial:       3367
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CI8D5lLYS8azmzSOgBApu5qhYNE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/CI8D5lLYS8azmzSOgBApu5qhYNE.mft
Manifest number:          3356
Signing time:             Sun 12 Nov 2023 15:29:55 +0000
Manifest this update:     Sun 12 Nov 2023 15:29:54 +0000
Manifest next update:     Sun 19 Nov 2023 15:29:54 +0000
Files and hashes:         1: CI8D5lLYS8azmzSOgBApu5qhYNE.crl (hash: eeZjzjr9YAAO+Smclk2Vezum4YwTMaHLon7e7SvcYqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13159 (0x3367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6E3D/serialNumber=088F03E652D84BC6B39B348E801029BB9AA160D1
        Validity
            Not Before: Nov 12 15:29:54 2023 GMT
            Not After : Nov 19 15:29:54 2023 GMT
        Subject: CN=6550ef73-b61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:61:04:a1:15:64:03:69:1e:aa:d7:c9:82:
                    1c:b0:37:a5:8c:05:c7:da:2c:21:2a:d1:6e:e5:c0:
                    1c:0c:3e:8d:ca:f4:80:5a:a8:1e:d3:de:74:37:56:
                    3f:09:00:66:db:e8:8c:08:4e:af:00:1d:90:3f:e9:
                    d6:d7:d7:34:7d:19:65:74:f4:72:9a:df:6a:46:64:
                    b5:84:63:2e:02:e8:5f:9a:94:a8:14:a3:0e:f3:12:
                    5e:6a:a9:da:fa:64:3e:85:df:34:7b:14:9c:70:f3:
                    43:4b:4a:71:9d:53:a5:e5:57:7c:74:24:07:fb:b8:
                    b3:d2:a3:ae:29:a1:23:bf:a8:ce:25:38:41:3d:ad:
                    68:d9:27:f2:3c:28:49:6d:19:bb:e8:a4:92:a9:61:
                    68:5f:da:d8:34:04:19:cd:52:b2:98:37:ea:68:5a:
                    fc:23:f4:01:65:6e:5e:32:63:e9:25:10:6e:3d:9f:
                    29:cb:98:c8:c8:d3:dd:ac:96:bf:0e:26:1e:b1:eb:
                    da:27:eb:9d:bf:c4:68:87:93:68:81:61:9e:c6:92:
                    df:6f:ab:bc:9e:4c:46:3a:c2:74:35:93:12:90:dc:
                    a1:31:49:92:eb:51:8f:33:93:df:36:64:cd:61:b7:
                    59:87:13:9f:4e:c9:2f:59:eb:7e:ab:82:aa:3c:6e:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:47:7C:AB:7E:B0:CB:3C:85:44:AF:2C:32:7F:74:14:88:8D:37:B3
            X509v3 Authority Key Identifier:
                keyid:08:8F:03:E6:52:D8:4B:C6:B3:9B:34:8E:80:10:29:BB:9A:A1:60:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/CI8D5lLYS8azmzSOgBApu5qhYNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CI8D5lLYS8azmzSOgBApu5qhYNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E3D/F5B37EEE225B11E2B3438FBC08B02CD2/CI8D5lLYS8azmzSOgBApu5qhYNE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:97:00:78:5f:af:4a:b7:fe:30:80:88:ff:7f:f6:96:f3:3e:
         18:96:23:9e:20:85:00:a0:f1:0f:b7:6e:e3:59:7a:e6:e7:b7:
         7f:3a:23:1e:a0:e6:18:db:05:09:a8:61:a3:08:68:1d:6c:b1:
         1a:2b:be:8f:dc:8c:a5:62:ff:1d:5a:9b:c7:09:0d:25:be:79:
         f0:06:c9:fd:3f:12:4d:de:ac:df:7a:9d:05:36:f8:20:84:e0:
         0a:9e:20:3d:92:ef:63:d0:2a:75:29:e0:80:58:d2:91:37:67:
         f1:6b:19:e6:90:e3:bd:44:a0:86:99:8b:da:d8:54:73:ca:ff:
         d0:22:2f:7f:5b:6a:15:51:f4:99:f4:e2:14:38:fc:9e:aa:f2:
         78:31:cc:0e:8d:46:63:98:41:86:ef:04:17:31:b7:f5:3e:68:
         6a:0f:f1:78:af:81:84:fc:47:f5:19:bd:fe:90:b4:b0:2e:01:
         69:38:09:2a:1f:8d:d7:56:c8:93:4f:73:c7:2b:2f:93:65:a6:
         e9:6c:2a:b4:bb:f3:82:eb:7e:2c:72:f0:fe:9f:03:3c:1e:09:
         3d:f7:60:c4:f4:eb:34:21:cd:11:21:cc:81:cc:b5:48:28:58:
         eb:7e:de:cc:ad:1a:bd:6f:47:ef:0e:12:13:b6:46:17:4a:67:
         cf:76:06:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----