Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D968/A71A030655AF11E8A710E976C4F9AE02/o5H7bdqIYoEpBUrF2rptQQ9-mvM.mft
File:                     o5H7bdqIYoEpBUrF2rptQQ9-mvM.mft (raw, json)
Hash identifier:          Yl+SIdgdbjXmgeTM/jrP8UU2BX+HHaOHbLJIk5xdHXQ=
Subject key identifier:   9A:0A:21:98:75:E3:6F:4A:36:2F:70:32:CE:DD:09:08:D9:C9:2E:80
Authority key identifier: A3:91:FB:6D:DA:88:62:81:29:05:4A:C5:DA:BA:6D:41:0F:7E:9A:F3
Certificate issuer:       /CN=A911D968/serialNumber=A391FB6DDA88628129054AC5DABA6D410F7E9AF3
Certificate serial:       1312
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5H7bdqIYoEpBUrF2rptQQ9-mvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D968/A71A030655AF11E8A710E976C4F9AE02/o5H7bdqIYoEpBUrF2rptQQ9-mvM.mft
Manifest number:          1312
Signing time:             Tue 17 Jan 2023 07:26:18 +0000
Manifest this update:     Tue 17 Jan 2023 07:26:18 +0000
Manifest next update:     Tue 24 Jan 2023 07:26:18 +0000
Files and hashes:         1: o5H7bdqIYoEpBUrF2rptQQ9-mvM.crl (hash: IWmZ1Xgqk0qWmjjoG19TFJPlYlrW3VBV0aC3N1f7SB8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4882 (0x1312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D968/serialNumber=A391FB6DDA88628129054AC5DABA6D410F7E9AF3
        Validity
            Not Before: Jan 17 07:26:18 2023 GMT
            Not After : Jan 24 07:26:18 2023 GMT
        Subject: CN=63c64d9a-9184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:75:b8:9f:11:38:fa:e1:59:29:4c:58:ff:
                    f7:cc:96:85:d9:18:9f:e8:e6:87:90:d2:7e:f2:c6:
                    96:55:93:fa:e7:8c:59:92:2c:4c:3c:32:c2:c0:92:
                    35:3f:69:0c:d4:4c:8e:62:f0:de:ed:f3:73:16:85:
                    bb:ae:c4:cb:83:79:7b:c9:78:a7:a4:3c:2a:03:df:
                    6a:ca:9d:07:73:d9:10:8b:ac:21:81:d6:c0:c6:8c:
                    43:a6:0c:27:1c:63:ab:ca:0b:17:d8:60:7b:bb:7d:
                    71:93:de:4a:bf:31:14:db:5c:4b:fd:bf:73:31:70:
                    89:86:5d:58:c0:bc:de:70:d5:32:96:26:12:f6:a8:
                    02:1b:8a:1e:ad:67:12:ed:f8:c6:84:77:32:86:3b:
                    14:45:89:8c:4a:3b:f3:c8:f5:23:d7:7b:4c:69:5f:
                    87:70:9b:ec:d2:4c:af:c4:c3:c0:3b:6e:57:12:46:
                    64:01:58:61:48:4e:7e:63:f4:f0:78:85:10:64:38:
                    fe:3d:26:5a:fe:37:98:09:02:0d:87:e1:e3:18:4d:
                    28:b1:83:08:90:8d:e2:ff:ff:73:eb:49:1b:52:45:
                    22:94:62:10:75:8c:4c:da:59:a8:26:e4:b4:dd:30:
                    e4:97:a3:f5:43:96:26:b3:ff:97:70:78:7d:3a:7a:
                    12:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0A:21:98:75:E3:6F:4A:36:2F:70:32:CE:DD:09:08:D9:C9:2E:80
            X509v3 Authority Key Identifier:
                keyid:A3:91:FB:6D:DA:88:62:81:29:05:4A:C5:DA:BA:6D:41:0F:7E:9A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D968/A71A030655AF11E8A710E976C4F9AE02/o5H7bdqIYoEpBUrF2rptQQ9-mvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5H7bdqIYoEpBUrF2rptQQ9-mvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D968/A71A030655AF11E8A710E976C4F9AE02/o5H7bdqIYoEpBUrF2rptQQ9-mvM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:87:bd:46:5f:10:fb:1b:32:42:10:7f:0d:1c:21:76:2c:a0:
         6f:43:92:3b:60:bf:30:1a:f5:d4:78:37:aa:ed:4d:da:b4:5d:
         59:db:3c:c3:ad:ba:08:99:fa:07:26:f5:ca:ae:b6:8e:d6:d8:
         d5:26:97:01:bf:db:fa:35:f5:ee:4c:77:d6:ef:e8:68:39:da:
         2b:0f:12:f5:79:52:ab:85:33:8b:a6:00:9e:66:5c:be:50:f8:
         24:fa:05:04:75:cf:e9:62:e2:a9:db:be:52:3c:98:27:7b:34:
         af:76:bd:c1:d0:db:99:2b:1e:b6:d9:8c:d7:7a:f0:5e:d3:3a:
         47:fe:61:48:47:8c:8a:87:b3:a4:6a:c7:18:91:f7:d0:f1:7d:
         c3:f8:c5:e6:07:c0:b2:2b:32:62:23:27:32:6a:45:bd:37:d4:
         29:7a:1a:62:60:a4:6c:63:c7:c9:e3:34:07:e8:0e:07:f6:bb:
         b4:d9:06:1e:88:a2:8f:85:27:a2:86:b0:ae:0c:fc:1b:47:c4:
         78:57:21:e9:dc:a1:9c:d4:e1:16:9a:b9:be:93:e9:93:e4:14:
         07:76:a0:2e:c6:7d:43:2f:2b:5c:6d:73:f5:5f:6c:dd:c6:17:
         00:8b:b8:48:eb:b0:21:7b:3a:a1:f0:2c:05:0a:f0:15:a4:d5:
         9f:b3:d2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----