Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft
File:                     D4D0DTKGhSybn240W-HVvS-VSDI.mft (raw, json)
Hash identifier:          meiUNQH0Zbhn1iyQjNijHzG01AlB3+mzOQJCTT+ou5w=
Subject key identifier:   AC:33:5B:8B:6A:0C:96:FC:F8:6A:39:39:E3:AA:3A:0D:14:67:B1:89
Authority key identifier: 0F:80:F4:0D:32:86:85:2C:9B:9F:6E:34:5B:E1:D5:BD:2F:95:48:32
Certificate issuer:       /CN=A911DFB8/serialNumber=0F80F40D3286852C9B9F6E345BE1D5BD2F954832
Certificate serial:       0666
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D4D0DTKGhSybn240W-HVvS-VSDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft
Manifest number:          0661
Signing time:             Mon 22 Jul 2024 22:52:07 +0000
Manifest this update:     Mon 22 Jul 2024 22:52:07 +0000
Manifest next update:     Mon 29 Jul 2024 22:52:06 +0000
Files and hashes:         1: D4D0DTKGhSybn240W-HVvS-VSDI.crl (hash: ozB4I2yrmVcJQvaH8YZTDsxMFtYhgxT0V5m2QX/iQ9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638 (0x666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DFB8/serialNumber=0F80F40D3286852C9B9F6E345BE1D5BD2F954832
        Validity
            Not Before: Jul 22 22:52:07 2024 GMT
            Not After : Jul 29 22:52:06 2024 GMT
        Subject: CN=669ee297-1e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:24:d8:ae:ef:7a:3a:0c:57:17:82:88:61:99:
                    18:8d:9f:ec:7f:8f:eb:5a:82:70:79:df:5a:f6:39:
                    c6:80:4c:b2:89:6d:05:24:f6:38:4b:5e:d6:15:16:
                    b8:e9:00:c1:94:7d:63:59:2e:7f:b3:ce:7a:7f:ff:
                    8d:71:26:f8:c6:78:69:59:4f:49:53:90:c0:7f:44:
                    58:b2:f5:20:5b:11:9a:13:a2:68:8a:2e:46:5e:4f:
                    4b:1a:64:90:28:47:d2:c5:a7:64:7a:24:43:1b:5a:
                    b3:6a:89:90:51:23:a0:7b:b8:16:e0:24:d2:0d:30:
                    c7:fa:06:43:3d:16:91:b3:3a:0e:09:da:54:78:87:
                    dc:1b:a0:32:5a:f4:50:13:0d:e0:32:2f:31:c2:65:
                    1b:ed:e8:98:86:85:66:e4:ec:fc:77:bb:12:1b:12:
                    97:98:ff:73:71:e5:48:bd:7c:23:4f:cb:2d:7e:e6:
                    63:05:a3:e7:6a:1c:06:ea:40:a5:10:0d:16:fb:33:
                    1a:73:59:39:c1:9b:8a:d1:8a:fb:be:40:d7:4e:2d:
                    c9:4a:1e:9e:4c:27:03:6f:61:40:02:d4:de:63:55:
                    f7:2e:4f:f1:35:f6:ab:07:e9:94:cc:b0:b4:bd:67:
                    59:18:ef:54:8d:22:41:98:84:9a:69:e3:6b:a0:ff:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:33:5B:8B:6A:0C:96:FC:F8:6A:39:39:E3:AA:3A:0D:14:67:B1:89
            X509v3 Authority Key Identifier:
                keyid:0F:80:F4:0D:32:86:85:2C:9B:9F:6E:34:5B:E1:D5:BD:2F:95:48:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D4D0DTKGhSybn240W-HVvS-VSDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFB8/85A5D90E453D11EBB55A6225C4F9AE02/D4D0DTKGhSybn240W-HVvS-VSDI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:1a:fe:ef:40:97:09:c8:64:cd:eb:db:58:fd:bb:7b:fd:82:
         4a:50:0a:e8:ca:f3:bc:c3:04:f3:18:93:2d:41:ab:59:b9:f1:
         a4:b0:82:8c:b5:cf:cf:51:aa:88:9e:ae:ff:66:17:26:cd:8b:
         70:d4:f1:4b:a2:25:d5:93:92:cc:c4:d4:66:fe:af:af:af:92:
         94:0f:7a:82:87:e1:bb:f8:c9:d2:68:9b:69:b8:d2:e8:43:c2:
         cf:99:d6:bd:0b:ec:c6:6a:93:08:ba:39:2d:e1:8f:fc:87:80:
         6e:18:50:be:47:77:2e:99:42:b6:5a:95:20:aa:2b:64:2f:ac:
         79:ce:97:26:4e:b4:35:9f:77:d4:2a:51:2c:50:1d:3b:b2:0c:
         e7:94:ff:cf:c8:81:bf:e1:60:af:d3:c6:04:1b:a8:dd:35:14:
         93:95:b0:41:d2:9e:2a:3c:32:ca:09:b9:16:19:1d:dc:61:99:
         3f:9f:17:17:30:6c:e9:da:df:b1:dc:e0:e3:67:e3:a7:91:78:
         3b:da:03:e4:2c:6e:db:ef:dc:72:a8:62:a1:dc:93:5b:69:16:
         c8:14:13:32:14:b1:2a:b1:95:69:35:72:43:fc:2b:54:1b:f6:
         fc:64:da:c9:2c:f8:17:df:a1:a4:53:21:84:72:b9:a1:61:8b:
         d8:ba:e8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----