Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/nPXCdbezFi0VcUEx4lSTsJON9vw.mft
File:                     nPXCdbezFi0VcUEx4lSTsJON9vw.mft (raw, json)
Hash identifier:          9MzfBMn8DcodKrztCRggmOI379XuQSd89wrK/LOnJDc=
Subject key identifier:   33:56:96:3C:2E:05:9E:32:4C:4D:E3:C6:26:20:4E:3C:CB:AB:00:78
Authority key identifier: 9C:F5:C2:75:B7:B3:16:2D:15:71:41:31:E2:54:93:B0:93:8D:F6:FC
Certificate issuer:       /CN=A911CE40/serialNumber=9CF5C275B7B3162D15714131E25493B0938DF6FC
Certificate serial:       0BF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPXCdbezFi0VcUEx4lSTsJON9vw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/nPXCdbezFi0VcUEx4lSTsJON9vw.mft
Manifest number:          0BD1
Signing time:             Tue 16 Jul 2024 02:46:35 +0000
Manifest this update:     Tue 16 Jul 2024 02:46:35 +0000
Manifest next update:     Tue 23 Jul 2024 02:46:35 +0000
Files and hashes:         1: nPXCdbezFi0VcUEx4lSTsJON9vw.crl (hash: dUr0lYk6gwEQogjJjI2gxF4o1mR5dx8F+UhYop4PBJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3058 (0xbf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE40/serialNumber=9CF5C275B7B3162D15714131E25493B0938DF6FC
        Validity
            Not Before: Jul 16 02:46:35 2024 GMT
            Not After : Jul 23 02:46:35 2024 GMT
        Subject: CN=6695df0b-23d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fd:bb:f8:d7:2c:01:ab:d3:3d:a1:74:89:f4:
                    22:87:0b:51:6e:c7:41:15:c5:8a:cc:22:a3:8a:6e:
                    9c:96:c0:fa:21:c8:6d:8c:74:b6:57:8f:a4:67:ec:
                    34:e3:83:bb:63:78:32:bf:bc:a8:0e:65:60:96:f3:
                    7c:60:17:e4:8e:85:1a:ac:37:8d:cd:36:76:b7:56:
                    31:3c:d5:ee:5d:82:4c:6f:bb:93:1c:66:13:a7:d1:
                    63:5e:56:06:17:8a:2b:65:0c:24:d8:d2:0b:ac:41:
                    20:70:38:2f:63:64:ad:2f:6f:13:5c:46:f3:61:59:
                    e9:6c:67:d2:91:b5:3a:d3:9c:d8:38:99:c9:1b:db:
                    a0:d5:e1:b5:38:b6:e3:d5:1b:8d:00:cf:fb:0c:ce:
                    b0:f6:9a:ad:81:4a:fa:b4:e4:75:74:2b:88:b0:fa:
                    41:9d:ce:71:a8:5b:a6:7d:48:53:0a:c9:46:07:11:
                    0e:f9:41:50:83:80:dd:ab:cb:11:5c:27:37:68:dd:
                    40:c0:81:d4:62:e7:a2:71:47:e2:7c:31:2b:06:06:
                    2f:1a:90:8c:8c:73:a5:7f:fc:60:8d:d3:77:63:b1:
                    c1:d2:35:1b:22:02:15:52:5c:8b:32:e5:f6:e5:f0:
                    62:e0:33:f2:85:92:45:55:e2:c7:c4:17:30:74:87:
                    14:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:56:96:3C:2E:05:9E:32:4C:4D:E3:C6:26:20:4E:3C:CB:AB:00:78
            X509v3 Authority Key Identifier:
                keyid:9C:F5:C2:75:B7:B3:16:2D:15:71:41:31:E2:54:93:B0:93:8D:F6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/nPXCdbezFi0VcUEx4lSTsJON9vw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPXCdbezFi0VcUEx4lSTsJON9vw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/nPXCdbezFi0VcUEx4lSTsJON9vw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:46:08:8f:71:d8:46:63:27:8c:bb:56:04:be:c7:7f:60:fb:
         76:f1:aa:87:47:26:c9:18:20:22:f9:b3:50:d1:01:b7:10:58:
         7d:91:1b:4d:78:c2:9e:20:2e:92:e7:ac:eb:52:3b:89:58:fa:
         65:6d:0b:0d:bb:57:66:f1:e8:c3:8a:93:11:2a:7d:a3:56:d2:
         21:90:9f:0e:30:82:6e:c6:cb:f8:b9:a5:2a:a4:58:8e:da:55:
         d7:a0:48:da:01:f7:ec:ed:c2:22:ca:da:65:2a:89:d3:c6:3c:
         aa:80:a5:59:d1:3b:9b:f7:a2:19:ec:71:07:ee:cd:cf:11:6d:
         3f:d1:53:60:80:17:c3:0a:11:37:fa:ba:40:0e:f3:c4:90:67:
         f3:2a:fe:49:9b:c7:73:06:ef:f3:d6:0e:8d:9f:6d:6f:35:ce:
         0c:75:01:84:b6:6e:ef:29:0f:48:a4:03:1d:40:64:80:fd:ef:
         2f:3d:c4:d9:04:73:95:8c:7f:b3:39:c0:ca:11:df:36:aa:75:
         ef:db:12:b3:31:b9:61:52:d9:84:70:b5:42:3f:04:0e:0b:79:
         29:91:42:8c:32:bf:cc:ba:ea:dc:2b:6a:52:22:66:d5:51:09:
         43:5c:60:df:b0:cc:4c:55:2b:83:70:2c:6c:aa:cb:93:3c:33:
         03:88:70:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----