Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/rruT6novxp4sGczngu713bHKMr0.mft
File:                     rruT6novxp4sGczngu713bHKMr0.mft (raw, json)
Hash identifier:          t/jmeJHPoG4CaT3mdUI4PieyHesv8U24LEl3iPLorzE=
Subject key identifier:   7F:84:C8:E6:92:FE:91:1B:F7:AE:74:11:82:80:1A:33:E2:5E:24:4E
Authority key identifier: AE:BB:93:EA:7A:2F:C6:9E:2C:19:CC:E7:82:EE:F5:DD:B1:CA:32:BD
Certificate issuer:       /CN=A911DFB8/serialNumber=AEBB93EA7A2FC69E2C19CCE782EEF5DDB1CA32BD
Certificate serial:       0697
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rruT6novxp4sGczngu713bHKMr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/rruT6novxp4sGczngu713bHKMr0.mft
Manifest number:          0688
Signing time:             Fri 20 Sep 2024 04:01:22 +0000
Manifest this update:     Fri 20 Sep 2024 04:01:22 +0000
Manifest next update:     Fri 27 Sep 2024 04:01:22 +0000
Files and hashes:         1: rruT6novxp4sGczngu713bHKMr0.crl (hash: zJlxV/BawBdXPxm/4NLNGi++dKDe3Ikizck48DlE+ts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DFB8/serialNumber=AEBB93EA7A2FC69E2C19CCE782EEF5DDB1CA32BD
        Validity
            Not Before: Sep 20 04:01:22 2024 GMT
            Not After : Sep 27 04:01:22 2024 GMT
        Subject: CN=66ecf392-e35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:81:c1:48:30:21:02:0f:70:64:0a:73:53:
                    f4:1c:3c:9d:64:d0:ce:28:cb:2d:3a:06:a3:3c:6c:
                    bc:22:b8:e6:6f:51:01:4b:cd:d6:af:8f:52:18:0b:
                    9d:98:8c:be:b4:2f:64:09:1b:53:9a:ce:98:11:a4:
                    d4:94:d7:c1:61:8d:a6:3d:ca:87:cf:d7:bb:c6:d9:
                    c5:6f:15:54:41:51:de:b6:1e:ae:05:25:50:c2:73:
                    f5:9b:86:1b:71:20:be:a9:ac:c6:5a:5f:7e:57:5a:
                    22:90:74:e2:e1:b0:be:c5:a1:1e:7d:80:f8:1c:e0:
                    e0:3f:d8:ca:d3:be:63:c0:36:e9:ee:e0:3e:71:f9:
                    16:5b:46:78:3c:d2:51:14:6c:a4:db:2d:ae:94:0a:
                    e7:2c:f2:7d:1e:2f:35:91:3e:74:3b:f1:df:3f:9c:
                    63:fc:af:8e:c3:2f:3d:f0:93:48:e7:55:af:de:a6:
                    4e:b2:e0:f8:ae:24:6d:a7:02:5b:21:62:74:d6:e8:
                    98:3f:13:f8:5e:6e:a1:b8:b7:8c:5c:cb:e8:73:a8:
                    13:2e:eb:4d:80:62:0a:ff:d7:f0:05:16:bd:15:9d:
                    ea:33:c6:8b:c7:84:c1:ee:54:63:72:1a:9a:2f:55:
                    5f:16:75:18:09:b7:1d:a8:75:42:c8:58:f3:ca:c1:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:84:C8:E6:92:FE:91:1B:F7:AE:74:11:82:80:1A:33:E2:5E:24:4E
            X509v3 Authority Key Identifier:
                keyid:AE:BB:93:EA:7A:2F:C6:9E:2C:19:CC:E7:82:EE:F5:DD:B1:CA:32:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/rruT6novxp4sGczngu713bHKMr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rruT6novxp4sGczngu713bHKMr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFB8/900EAC54453D11EBB55A6225C4F9AE02/rruT6novxp4sGczngu713bHKMr0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:20:a6:ba:56:ad:16:08:3c:1a:c4:bb:df:33:9e:6b:1b:51:
         cd:fa:2e:7d:f6:72:6d:d4:8d:27:8f:c1:93:fc:25:a9:3c:20:
         e9:82:75:ac:e7:f9:1d:b2:a8:e6:5a:f7:75:24:f5:a8:12:bd:
         5e:bd:05:3b:ef:1b:7c:3a:4b:aa:d0:95:38:35:6a:0d:15:c5:
         af:9b:3c:4e:d2:75:d7:5a:82:bc:2d:f6:fa:0e:ad:ac:f1:c1:
         bf:da:2e:7b:9f:2f:c6:18:5f:59:da:5d:2c:2a:8a:29:ac:5b:
         03:c4:01:6b:1a:94:60:d6:58:f2:07:59:f5:83:14:4c:29:db:
         07:e3:84:80:f8:21:e7:3e:1b:4a:d3:d2:54:61:74:d6:f2:2f:
         9a:6a:5b:7e:9b:32:1c:d4:1c:88:59:cd:20:31:28:01:1a:19:
         af:5b:df:d6:68:f7:30:9d:ec:a6:98:5a:2f:d0:21:d3:be:67:
         29:4d:51:d9:f8:a3:4f:7c:22:69:11:c6:4d:66:3b:38:f5:ac:
         0b:aa:85:de:ca:91:af:c3:f8:94:b2:52:08:16:92:80:fc:bb:
         27:a7:42:e9:71:bb:11:12:d9:03:a9:04:f2:60:e1:4e:31:f6:
         f5:07:fe:c4:54:96:04:42:85:f1:c7:e7:76:45:92:37:77:a0:
         6f:24:46:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----