Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121EE5/65F29DB0F52F11E280728A615911EA32/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.mft
File:                     c3NFKlfJcXBlCBbiNuYsTwTtQ4o.mft (raw, json)
Hash identifier:          q15uN2AlOL2AkjOrkX2DmuFCiNzz//nFtRklExWRpS0=
Subject key identifier:   27:0B:71:75:2A:3B:DE:8D:B7:37:A4:64:63:F1:00:96:4A:59:37:C3
Authority key identifier: 73:73:45:2A:57:C9:71:70:65:08:16:E2:36:E6:2C:4F:04:ED:43:8A
Certificate issuer:       /CN=A9121EE5/serialNumber=7373452A57C97170650816E236E62C4F04ED438A
Certificate serial:       2FB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121EE5/65F29DB0F52F11E280728A615911EA32/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.mft
Manifest number:          2FB7
Signing time:             Tue 17 Sep 2024 22:51:57 +0000
Manifest this update:     Tue 17 Sep 2024 22:51:56 +0000
Manifest next update:     Tue 24 Sep 2024 22:51:56 +0000
Files and hashes:         1: c3NFKlfJcXBlCBbiNuYsTwTtQ4o.crl (hash: dfkL2Ft77wgb7QsbCsrCa1rlCQqZgAZgIVZ9NT00F1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12215 (0x2fb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121EE5/serialNumber=7373452A57C97170650816E236E62C4F04ED438A
        Validity
            Not Before: Sep 17 22:51:56 2024 GMT
            Not After : Sep 24 22:51:56 2024 GMT
        Subject: CN=66ea080c-18d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:58:e0:27:6a:b3:d5:ef:98:95:ae:31:24:
                    93:78:91:4e:3b:8e:3d:67:ff:9c:02:ba:04:6c:a7:
                    21:db:1d:24:0d:a5:a4:c4:25:26:df:b1:45:d4:d5:
                    d5:38:28:e3:5f:f5:72:c0:c3:0f:b2:8f:e7:5e:c1:
                    08:eb:20:73:41:df:e3:2e:88:f8:5e:d9:5c:b3:e7:
                    14:57:a6:25:5d:ef:b0:1a:a4:67:82:12:c9:f9:ae:
                    64:e6:0d:cc:8a:1c:9e:ba:20:b1:bb:fc:7a:0c:eb:
                    47:20:7f:f4:3f:c8:8b:35:52:55:33:46:6c:df:7a:
                    4f:e2:6e:e1:80:1a:bf:ca:1c:15:95:c6:04:ca:d5:
                    7f:3b:c8:43:dc:0a:9a:8f:05:0a:a4:2d:6b:d2:a4:
                    61:88:73:4b:1d:e5:e7:70:6c:7b:ea:1c:06:57:60:
                    c2:dc:40:37:03:c9:f2:f5:64:9f:f5:e9:15:37:b0:
                    08:20:1c:0f:1c:54:4a:1d:19:f6:86:b5:7c:fc:67:
                    e7:63:1c:df:5e:a3:5b:47:c8:e1:16:22:92:ad:03:
                    9f:7b:9c:8b:19:81:0a:1e:ee:a2:28:ec:ff:42:73:
                    38:15:b8:cf:af:c0:05:e9:34:43:94:1c:3f:68:ef:
                    91:3a:b6:31:a1:5e:11:9a:a2:f9:c9:d3:83:96:27:
                    36:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0B:71:75:2A:3B:DE:8D:B7:37:A4:64:63:F1:00:96:4A:59:37:C3
            X509v3 Authority Key Identifier:
                keyid:73:73:45:2A:57:C9:71:70:65:08:16:E2:36:E6:2C:4F:04:ED:43:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121EE5/65F29DB0F52F11E280728A615911EA32/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121EE5/65F29DB0F52F11E280728A615911EA32/c3NFKlfJcXBlCBbiNuYsTwTtQ4o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:65:f1:a0:e2:c8:62:95:49:4f:e5:74:dc:d3:ee:47:3e:d4:
         88:d0:6f:14:b0:6c:34:8c:f5:41:9f:be:5e:b0:b0:5c:33:3a:
         d9:95:e7:42:c1:00:75:7d:89:b7:dd:19:82:cc:09:00:fe:f3:
         c6:40:77:8c:b9:29:c5:41:b9:67:e0:32:aa:02:96:a0:e1:f8:
         40:8d:01:d6:ef:77:dd:da:95:8e:e9:a3:fb:46:b4:04:e8:10:
         cb:a2:dc:16:1f:78:cf:d4:81:d6:74:f3:b8:48:fd:21:eb:2b:
         93:bc:37:1e:f8:59:7d:54:0b:1f:91:8b:b5:2a:c9:ec:2f:44:
         71:ea:36:ab:b3:56:29:31:92:f3:b5:bc:f8:d4:16:ea:3d:ee:
         9f:98:61:24:02:1b:95:d4:b8:d6:73:1c:19:2b:36:af:a6:18:
         e7:a6:70:00:61:fe:2b:97:95:7b:6f:0b:6e:1c:3c:4a:e3:fc:
         94:57:13:68:8a:85:75:47:51:77:66:29:b0:48:a6:68:cc:75:
         3d:30:0b:a8:9b:23:8f:d6:94:67:41:b2:93:70:41:8a:40:10:
         da:84:09:c2:94:50:08:21:0f:ff:af:24:56:ec:01:6b:64:7d:
         31:8e:6a:75:b0:ee:8a:41:61:c8:94:ac:cb:9a:13:be:da:01:
         1c:4e:6f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----