Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91134BB/877575501D9111E2B9C5D2F308B02CD2/Cg_u24ly0pISj5wzAv0WPZ19Z3o.mft
File:                     Cg_u24ly0pISj5wzAv0WPZ19Z3o.mft (raw, json)
Hash identifier:          /2GndjgEMnJmzEbVQaCG9r9bxwQ8/Yh7vWcaU6hXPfk=
Subject key identifier:   A4:4B:DA:AA:0A:B7:DF:84:D0:C7:62:C8:64:EE:FC:00:BE:B7:69:D1
Authority key identifier: 0A:0F:EE:DB:89:72:D2:92:12:8F:9C:33:02:FD:16:3D:9D:7D:67:7A
Certificate issuer:       /CN=A91134BB/serialNumber=0A0FEEDB8972D292128F9C3302FD163D9D7D677A
Certificate serial:       3295
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cg_u24ly0pISj5wzAv0WPZ19Z3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91134BB/877575501D9111E2B9C5D2F308B02CD2/Cg_u24ly0pISj5wzAv0WPZ19Z3o.mft
Manifest number:          3295
Signing time:             Tue 04 Oct 2022 14:53:02 +0000
Manifest this update:     Tue 04 Oct 2022 14:53:02 +0000
Manifest next update:     Tue 11 Oct 2022 14:53:02 +0000
Files and hashes:         1: Cg_u24ly0pISj5wzAv0WPZ19Z3o.crl (hash: PQ/cIpUVMCYklUpmMBuRyOIY4CU5eZ1giWgtywsv6VM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12949 (0x3295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91134BB/serialNumber=0A0FEEDB8972D292128F9C3302FD163D9D7D677A
        Validity
            Not Before: Oct  4 14:53:02 2022 GMT
            Not After : Oct 11 14:53:02 2022 GMT
        Subject: CN=633c48ce-0da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:83:0d:59:10:02:da:6a:ab:7e:d9:b0:b0:
                    fa:30:02:5d:d6:eb:88:6e:06:99:5d:fb:69:53:6a:
                    41:db:18:a0:87:38:ad:08:97:d9:8a:81:1f:f4:d5:
                    1e:dc:22:42:52:47:eb:28:8e:f1:f3:41:75:a4:38:
                    af:2c:cd:94:5d:9a:77:67:3c:7e:0b:3c:67:8f:65:
                    d7:27:3b:35:d0:b2:32:f9:7a:fb:bf:1a:e3:0a:9c:
                    38:f2:70:5a:96:b6:32:e8:63:8e:f9:0b:02:c6:18:
                    57:70:01:5d:84:20:bf:f8:ae:73:8d:18:b5:52:22:
                    5f:fd:3e:d3:3c:d9:2a:7c:6f:c2:9c:82:c0:35:f4:
                    4d:80:e6:7a:9d:6d:6e:39:00:a3:7d:1f:3e:aa:00:
                    8f:65:41:23:eb:a9:5e:c8:49:d0:6c:72:c6:2e:83:
                    e2:b0:9e:a2:50:23:d2:11:19:e7:0f:ff:1a:22:47:
                    e0:93:1d:9d:c1:3e:e5:2b:fb:a3:88:31:f7:84:59:
                    71:1e:85:fd:93:f7:e6:24:9e:e2:e7:41:ef:9f:55:
                    d3:72:c6:bb:52:7f:b8:88:af:02:70:7c:b3:33:1b:
                    ea:8e:03:b6:cb:c8:32:62:3d:8c:a8:f5:ca:c0:27:
                    2a:de:9b:9a:85:62:d1:55:49:f7:3d:64:2c:0b:e7:
                    8b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4B:DA:AA:0A:B7:DF:84:D0:C7:62:C8:64:EE:FC:00:BE:B7:69:D1
            X509v3 Authority Key Identifier:
                keyid:0A:0F:EE:DB:89:72:D2:92:12:8F:9C:33:02:FD:16:3D:9D:7D:67:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91134BB/877575501D9111E2B9C5D2F308B02CD2/Cg_u24ly0pISj5wzAv0WPZ19Z3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cg_u24ly0pISj5wzAv0WPZ19Z3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91134BB/877575501D9111E2B9C5D2F308B02CD2/Cg_u24ly0pISj5wzAv0WPZ19Z3o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:b0:c6:79:d4:3a:74:41:23:9d:21:40:37:ba:b9:5c:22:fc:
         34:3e:c6:fc:2c:87:b5:70:48:d1:2e:ed:10:7d:ac:c4:0e:e2:
         7e:b5:cc:4c:0a:a7:77:3b:98:a0:66:cf:ff:2d:bc:b8:0a:e0:
         a1:bd:62:a6:4e:39:59:05:4d:15:37:38:7d:ff:a4:cb:71:90:
         ca:8c:da:6c:83:f0:3b:ab:bd:56:14:ec:62:42:74:eb:a2:46:
         12:c4:1d:52:f1:8e:48:6c:1a:98:bc:75:2c:92:8f:f3:29:17:
         b8:21:a6:2f:c3:3f:a0:24:66:c0:01:a2:f3:01:56:a5:d9:c8:
         77:d8:1d:b8:04:15:b2:69:42:e4:f6:db:09:2a:c3:d9:38:2c:
         07:03:fc:e7:b8:9d:e7:64:f5:c3:84:78:03:94:c0:6c:55:86:
         39:de:9d:88:23:96:08:3e:c4:7d:95:d9:06:4e:08:07:d5:ef:
         d2:45:4e:f9:39:60:4e:0e:fc:e3:bf:12:a4:24:5e:cf:70:92:
         b2:6c:4d:f1:ec:25:f7:fb:a5:f4:c9:68:b5:d3:8b:d1:fb:bd:
         89:0d:90:7a:f3:03:8a:2c:71:09:88:23:3a:fd:26:ea:a1:92:
         a4:ff:4a:15:06:94:9b:6a:9b:e9:20:e3:90:e5:72:42:09:d1:
         89:99:30:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----