Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DBA5/6C64C9DAB1F411EC80AB4866C4F9AE02/fNyLDj5VcRaznCpy-FcS_BSW_2Q.mft
File:                     fNyLDj5VcRaznCpy-FcS_BSW_2Q.mft (raw, json)
Hash identifier:          Dtou8+JtpkWmuT2JMa+NsOu9QWDb1I7/vEP96oczVms=
Subject key identifier:   87:12:04:E6:42:FE:86:9E:D1:6E:67:DE:FB:66:0D:E3:8C:8C:94:B4
Authority key identifier: 7C:DC:8B:0E:3E:55:71:16:B3:9C:2A:72:F8:57:12:FC:14:96:FF:64
Certificate issuer:       /CN=A911DBA5/serialNumber=7CDC8B0E3E557116B39C2A72F85712FC1496FF64
Certificate serial:       0211
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNyLDj5VcRaznCpy-FcS_BSW_2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DBA5/6C64C9DAB1F411EC80AB4866C4F9AE02/fNyLDj5VcRaznCpy-FcS_BSW_2Q.mft
Manifest number:          020E
Signing time:             Sun 13 Aug 2023 02:28:01 +0000
Manifest this update:     Sun 13 Aug 2023 02:28:00 +0000
Manifest next update:     Sun 20 Aug 2023 02:28:00 +0000
Files and hashes:         1: fNyLDj5VcRaznCpy-FcS_BSW_2Q.crl (hash: /kg+bmRxULIEwqeApse4aGdYcin7CxW7HsmKwoU4Obo=)
                          2: 40C7328CB1F811EC862C476DC4F9AE02.roa (hash: NBmXXTdPc+KL107FM1SDMxoL/S+v9el9UgeogxGlU7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DBA5/serialNumber=7CDC8B0E3E557116B39C2A72F85712FC1496FF64
        Validity
            Not Before: Aug 13 02:28:00 2023 GMT
            Not After : Aug 20 02:28:00 2023 GMT
        Subject: CN=64d83fb0-34d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e6:dd:7b:b1:71:e0:90:a1:10:a8:72:48:e1:
                    c0:22:94:f8:a9:32:b1:3f:6e:e5:ce:d1:55:40:ce:
                    55:9f:c4:f7:c9:ee:73:19:40:76:ce:44:34:ce:d3:
                    1f:7f:93:f7:d5:bf:37:e7:33:a4:2b:b6:bb:b6:8b:
                    4d:55:d7:8e:64:c5:fb:e7:9e:0a:18:4b:3c:c2:62:
                    1f:18:a3:01:af:44:20:88:8c:e9:91:4f:55:fa:40:
                    87:ba:28:b7:da:ad:73:1d:61:cc:2d:9b:11:5d:e9:
                    5a:6d:b2:72:af:c7:78:0e:24:85:29:e1:12:e9:03:
                    92:98:d8:8f:2e:c6:b5:02:3a:f2:15:b2:83:e1:2e:
                    9c:b3:b7:58:78:2a:48:cb:6c:fa:19:d4:0b:87:9c:
                    d1:c0:a3:2c:f1:bd:09:36:bf:bc:cd:03:f9:e8:d1:
                    ca:3d:9e:51:8e:19:c3:eb:be:ea:9b:fb:0e:04:73:
                    07:fb:3a:f2:64:aa:67:56:73:ad:fe:0a:48:6d:aa:
                    8a:6e:88:e3:60:f8:9c:24:c4:de:52:67:e5:0a:8e:
                    96:fe:a7:11:47:31:9a:20:63:22:cf:9a:88:b1:7c:
                    72:d6:1b:a6:7f:27:bc:c3:54:7e:04:d7:13:1d:dd:
                    80:dc:f2:86:ac:de:00:fb:d3:88:6b:7e:11:09:47:
                    9b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:12:04:E6:42:FE:86:9E:D1:6E:67:DE:FB:66:0D:E3:8C:8C:94:B4
            X509v3 Authority Key Identifier:
                keyid:7C:DC:8B:0E:3E:55:71:16:B3:9C:2A:72:F8:57:12:FC:14:96:FF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DBA5/6C64C9DAB1F411EC80AB4866C4F9AE02/fNyLDj5VcRaznCpy-FcS_BSW_2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNyLDj5VcRaznCpy-FcS_BSW_2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DBA5/6C64C9DAB1F411EC80AB4866C4F9AE02/fNyLDj5VcRaznCpy-FcS_BSW_2Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ff:28:fa:64:9a:ec:a6:23:b3:fa:60:b1:bb:fd:bf:05:46:
         91:02:95:31:59:72:62:77:28:3f:31:c1:81:50:64:6f:fc:21:
         59:17:b3:1e:de:33:5e:46:ed:ec:1a:cd:35:9c:4e:12:ac:90:
         36:52:aa:bb:ca:36:84:bd:62:ca:a2:a4:e3:f6:7d:3e:b9:57:
         2a:95:7c:48:5a:c2:07:52:83:16:d8:f1:c9:f0:33:72:f3:a4:
         71:3a:87:18:c7:f1:16:19:ef:68:9d:6e:ac:30:15:72:c5:9f:
         ed:73:05:86:7c:44:89:22:cc:1b:96:23:12:35:d5:97:2b:49:
         a8:4b:4c:a1:a5:21:38:c5:a6:0e:fd:71:ba:77:22:ce:de:92:
         44:14:ef:be:9b:33:c2:df:b9:2b:3f:e6:67:c9:a1:40:15:41:
         75:67:60:c4:e5:36:ef:98:89:45:70:c7:f5:80:52:d6:ef:31:
         bf:f3:5c:99:2f:ce:e9:f1:a1:41:be:56:dc:f3:38:dd:3a:dd:
         fe:de:01:76:36:62:63:ee:95:61:3f:0b:8f:e4:c7:17:71:91:
         a5:cb:61:3a:ad:ee:32:fd:c9:c5:63:c8:46:f6:22:7a:d5:4a:
         5e:68:b2:b9:b1:b2:fa:19:44:46:bb:6f:6d:a9:45:f1:01:14:
         1a:d9:97:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----