Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EFCC/7537F2D0BB2211EC94C40B24C4F9AE02/Jsjy8PLqRZY6xKkA7ETKurMZN5k.mft
File:                     Jsjy8PLqRZY6xKkA7ETKurMZN5k.mft (raw, json)
Hash identifier:          6nM0cmRwgBRvziQkmSiskGOMV6w7ak4qnhOpVbO4jBg=
Subject key identifier:   F9:8B:7F:01:33:28:72:97:AC:04:D5:D5:40:FD:E5:F1:93:BE:73:22
Authority key identifier: 26:C8:F2:F0:F2:EA:45:96:3A:C4:A9:00:EC:44:CA:BA:B3:19:37:99
Certificate issuer:       /CN=A911EFCC/serialNumber=26C8F2F0F2EA45963AC4A900EC44CABAB3193799
Certificate serial:       0248
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsjy8PLqRZY6xKkA7ETKurMZN5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EFCC/7537F2D0BB2211EC94C40B24C4F9AE02/Jsjy8PLqRZY6xKkA7ETKurMZN5k.mft
Manifest number:          0248
Signing time:             Fri 19 Jan 2024 03:12:57 +0000
Manifest this update:     Fri 19 Jan 2024 03:12:57 +0000
Manifest next update:     Fri 26 Jan 2024 03:12:57 +0000
Files and hashes:         1: Jsjy8PLqRZY6xKkA7ETKurMZN5k.crl (hash: L/lN5TnTOoBKuqcMJVVzoEgVzk3GCSzXTs6RsVdaajY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EFCC/serialNumber=26C8F2F0F2EA45963AC4A900EC44CABAB3193799
        Validity
            Not Before: Jan 19 03:12:57 2024 GMT
            Not After : Jan 26 03:12:57 2024 GMT
        Subject: CN=65a9e8b9-f3a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:a0:b8:d6:a7:1c:91:9d:d8:48:34:de:4c:
                    e0:50:b7:21:7f:a8:f8:db:fd:3f:d9:20:f4:53:94:
                    cc:96:28:a7:6a:16:bf:e8:5d:f4:eb:7e:74:b8:a0:
                    57:9d:b7:e1:2c:9d:75:bc:f9:59:5b:d6:d6:0c:61:
                    f7:c6:55:50:da:c5:5a:6f:c7:8c:31:74:b4:28:34:
                    6a:bc:0d:40:26:ad:21:9b:f8:93:ad:31:98:db:99:
                    16:32:e7:d0:fc:9f:c1:24:15:83:82:d2:05:1e:c8:
                    dd:84:44:6a:2e:54:13:51:d5:a8:0b:94:95:a9:54:
                    7b:7f:d0:64:af:da:9d:48:4c:34:82:97:a0:a3:2f:
                    d7:f7:19:5e:d8:38:24:4f:9b:f6:5d:7a:35:d8:52:
                    8a:90:bb:c0:59:7f:ec:15:7c:20:2c:b9:ff:b9:28:
                    fb:67:e7:64:78:3e:63:72:62:66:c2:a5:11:21:03:
                    5d:9a:f7:d4:d7:05:d5:e8:90:b6:a4:a2:b3:84:42:
                    6a:97:14:e1:02:31:40:1d:8f:60:66:8f:f3:bc:44:
                    09:dd:c6:b3:67:dc:50:c2:42:dc:2e:7c:19:d1:b9:
                    98:91:6a:95:7b:ae:7d:d9:41:15:0a:13:18:ae:41:
                    e5:68:91:21:bb:f0:17:4d:55:8f:a5:d8:c5:ce:b9:
                    a8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8B:7F:01:33:28:72:97:AC:04:D5:D5:40:FD:E5:F1:93:BE:73:22
            X509v3 Authority Key Identifier:
                keyid:26:C8:F2:F0:F2:EA:45:96:3A:C4:A9:00:EC:44:CA:BA:B3:19:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EFCC/7537F2D0BB2211EC94C40B24C4F9AE02/Jsjy8PLqRZY6xKkA7ETKurMZN5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsjy8PLqRZY6xKkA7ETKurMZN5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EFCC/7537F2D0BB2211EC94C40B24C4F9AE02/Jsjy8PLqRZY6xKkA7ETKurMZN5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e8:23:ac:0f:73:f1:e6:c7:2d:07:e1:e6:f9:3b:f5:00:ad:
         a9:06:93:ef:b7:73:6e:c6:6b:12:e9:52:0c:b2:9e:5b:44:54:
         a8:9d:87:61:98:4e:e8:fe:aa:02:79:e4:7b:b4:ca:2e:f8:ca:
         3e:80:b6:69:ba:69:75:f9:6f:71:a1:07:4a:39:b8:14:9e:0a:
         f8:43:ee:25:83:16:71:1a:3b:2f:83:09:2e:2f:3d:17:0e:7a:
         35:8f:92:b9:8e:38:70:55:27:67:d0:0a:6d:c1:3a:0c:c6:8a:
         28:a1:74:12:07:73:7b:2a:69:a2:81:e1:10:e0:59:d5:a1:7a:
         30:81:af:b2:30:44:9c:63:d1:63:1f:d9:2e:3a:66:4b:93:4e:
         ff:07:1c:49:52:f1:38:ad:12:cf:e2:80:20:1b:f5:fc:a6:d0:
         c6:87:6f:e8:0c:1a:8e:0e:3a:ab:18:44:34:c0:fb:79:9e:7b:
         f8:89:59:fc:e7:31:33:54:9a:21:c1:72:17:08:32:2f:b8:3b:
         dc:b3:87:e8:d5:ab:e9:75:14:ba:f3:f7:4e:09:07:9e:bc:26:
         9a:10:bc:00:c2:0d:23:82:9c:81:c5:46:af:18:25:02:6e:51:
         67:16:de:8d:9f:ce:b0:fb:6b:98:a2:92:60:de:6a:b3:65:87:
         fd:7e:9b:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUVGQ0MxMTAvBgNVBAUTKDI2QzhGMkYwRjJFQTQ1OTYzQUM0QTkwMEVDNDRDQUJB
QjMxOTM3OTkwHhcNMjQwMTE5MDMxMjU3WhcNMjQwMTI2MDMxMjU3WjAYMRYwFAYD
VQQDEw02NWE5ZThiOS1mM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm6yguNanHJGd2Eg03kzgULchf6j42/0/2SD0U5TMliinaha/6F306350uKBX
nbfhLJ11vPlZW9bWDGH3xlVQ2sVab8eMMXS0KDRqvA1AJq0hm/iTrTGY25kWMufQ
/J/BJBWDgtIFHsjdhERqLlQTUdWoC5SVqVR7f9Bkr9qdSEw0gpegoy/X9xle2Dgk
T5v2XXo12FKKkLvAWX/sFXwgLLn/uSj7Z+dkeD5jcmJmwqURIQNdmvfU1wXV6JC2
pKKzhEJqlxThAjFAHY9gZo/zvEQJ3cazZ9xQwkLcLnwZ0bmYkWqVe6592UEVChMY
rkHlaJEhu/AXTVWPpdjFzrmoQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmLfwEz
KHKXrATV1UD95fGTvnMiMB8GA1UdIwQYMBaAFCbI8vDy6kWWOsSpAOxEyrqzGTeZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUZDQy83NTM3RjJEMEJC
MjIxMUVDOTRDNDBCMjRDNEY5QUUwMi9Kc2p5OFBMcVJaWTZ4S2tBN0VUS3VyTVpO
NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pzank4UExxUlpZNnhLa0E3RVRLdXJNWk41ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RUZDQy83NTM3RjJEMEJCMjIxMUVDOTRDNDBCMjRDNEY5QUUwMi9Kc2p5OFBMcVJa
WTZ4S2tBN0VUS3VyTVpONWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAj6COsD3Px5sctB+Hm+Tv1AK2pBpPvt3NuxmsS6VIMsp5bRFSonYdh
mE7o/qoCeeR7tMou+Mo+gLZpuml1+W9xoQdKObgUngr4Q+4lgxZxGjsvgwkuLz0X
Dno1j5K5jjhwVSdn0AptwToMxooooXQSB3N7KmmigeEQ4FnVoXowga+yMEScY9Fj
H9kuOmZLk07/BxxJUvE4rRLP4oAgG/X8ptDGh2/oDBqODjqrGEQ0wPt5nnv4iVn8
5zEzVJohwXIXCDIvuDvcs4fo1avpdRS68/dOCQeevCaaELwAwg0jgpyBxUavGCUC
blFnFt6Nn86w+2uYopJg3mqzZYf9fpsB
-----END CERTIFICATE-----