Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
File:                     yMJcY971ZwDWV_xDmUpVH-QMzcc.mft (raw, json)
Hash identifier:          Bg3j/r6rAcWkCt7d4cqm0656LKrdDaa/3sE85STBb5I=
Subject key identifier:   31:27:F0:79:42:DA:6A:BA:F7:99:D7:56:F7:AF:CA:43:60:6A:E4:CB
Authority key identifier: C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7
Certificate issuer:       /CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
Manifest number:          039E
Signing time:             Mon 19 Feb 2024 13:34:42 +0000
Manifest this update:     Mon 19 Feb 2024 13:34:41 +0000
Manifest next update:     Mon 26 Feb 2024 13:34:41 +0000
Files and hashes:         1: yMJcY971ZwDWV_xDmUpVH-QMzcc.crl (hash: ZDAYvSXx0WTnkzO07aDIaW8J8tl1vZcStGK4UB5hue8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
        Validity
            Not Before: Feb 19 13:34:41 2024 GMT
            Not After : Feb 26 13:34:41 2024 GMT
        Subject: CN=65d358f1-e81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:51:47:0e:59:a6:01:d9:78:be:92:e2:f9:
                    eb:f8:95:9f:55:73:a3:58:2e:b7:a7:82:be:04:7b:
                    13:65:08:6c:58:9f:8a:45:15:11:1d:d2:d8:f9:dc:
                    2b:d9:e2:96:78:51:5c:09:10:62:6d:84:61:27:00:
                    44:96:48:74:d1:2b:8f:0a:27:30:90:4e:cd:6f:a0:
                    a9:e8:89:de:e0:cd:e2:11:48:f1:49:8f:26:4b:e7:
                    e5:4a:18:23:04:0a:9c:8a:b1:69:fa:bb:f9:25:99:
                    50:e9:6b:65:f4:b0:a9:02:9a:1f:da:fd:00:a2:ee:
                    7f:c3:a5:cd:ef:6a:47:eb:03:33:6f:10:8c:ca:d9:
                    da:f9:e9:08:3a:bf:82:52:fb:53:9d:fe:86:9f:18:
                    6b:08:a2:16:d2:84:89:bc:30:b8:ca:84:b3:eb:74:
                    55:53:e7:26:50:75:07:c2:7a:dd:57:27:c6:8c:9d:
                    62:da:e0:6e:96:99:40:e8:e4:6a:4f:59:c1:67:1d:
                    88:af:98:b0:8e:cb:53:92:fd:be:12:cc:f4:90:de:
                    7e:d6:3c:4c:2b:89:67:a8:b4:43:a9:bf:7a:8e:89:
                    d3:8f:06:f2:8a:d8:59:c4:b1:bd:40:b4:35:39:e6:
                    b2:19:55:c2:6f:6e:23:f0:d8:7b:9e:a0:a3:0c:ec:
                    ef:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:27:F0:79:42:DA:6A:BA:F7:99:D7:56:F7:AF:CA:43:60:6A:E4:CB
            X509v3 Authority Key Identifier:
                keyid:C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:dc:23:5d:ed:4e:37:2b:5f:e7:3c:9e:7b:6b:08:ae:e9:64:
         a1:9b:58:d2:69:f9:41:65:71:4e:52:76:11:03:0c:40:56:e1:
         e3:19:8c:cd:51:61:ec:f6:e7:f4:47:8e:fc:ea:eb:79:f2:cf:
         e1:4a:e6:99:36:2b:8a:95:bf:24:b5:cb:2d:41:12:69:31:4e:
         a2:f0:a2:6c:70:e5:d6:8c:54:27:63:49:68:e0:aa:01:f7:79:
         75:30:85:f4:02:ba:23:8d:65:95:13:f3:fb:98:37:9f:de:4b:
         5e:be:50:66:64:ba:b4:27:d2:52:a9:16:09:5a:cd:06:cc:e3:
         8b:2f:9b:60:52:93:ce:6e:47:e5:8a:b5:8f:f9:6e:0c:0c:0c:
         c0:18:91:69:6d:1d:7a:aa:3c:b8:88:8e:53:ba:44:6d:42:22:
         0c:ab:90:b0:7b:88:c4:d0:62:55:80:52:21:0a:23:6b:da:41:
         47:65:02:47:37:20:40:e9:9d:58:ea:eb:73:47:21:65:61:ff:
         b5:0b:0e:57:23:5d:d1:23:9a:07:8c:fc:a9:23:13:67:0f:9c:
         c9:ac:a6:89:dd:54:3d:11:c2:a2:25:6f:fd:16:9f:94:9f:26:
         66:4f:03:63:ba:ec:fa:60:70:3f:cd:dd:9b:50:eb:ad:64:4d:
         9f:8a:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 17:51:11 2024 by rpki-client on console-fra.rpki-client.org