Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.mft
File:                     8ok6YpD-DtHmksvmZtcYD_hMi84.mft (raw, json)
Hash identifier:          /gVOFLJbqRoSPwCDWj9W/Ain51irs53PFeW1taiQlKs=
Subject key identifier:   D1:13:B1:2E:A7:59:B3:46:76:27:05:06:A9:8E:30:6B:6D:70:1F:B3
Authority key identifier: F2:89:3A:62:90:FE:0E:D1:E6:92:CB:E6:66:D7:18:0F:F8:4C:8B:CE
Certificate issuer:       /CN=A912A771/serialNumber=F2893A6290FE0ED1E692CBE666D7180FF84C8BCE
Certificate serial:       030E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ok6YpD-DtHmksvmZtcYD_hMi84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.mft
Manifest number:          030C
Signing time:             Thu 09 May 2024 04:05:36 +0000
Manifest this update:     Thu 09 May 2024 04:05:36 +0000
Manifest next update:     Thu 16 May 2024 04:05:36 +0000
Files and hashes:         1: 8ok6YpD-DtHmksvmZtcYD_hMi84.crl (hash: 2gHj1z5AJRP/EnRPdj+97TUfrY0dVsvnCkyL5kYkMGA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A771/serialNumber=F2893A6290FE0ED1E692CBE666D7180FF84C8BCE
        Validity
            Not Before: May  9 04:05:36 2024 GMT
            Not After : May 16 04:05:36 2024 GMT
        Subject: CN=663c4b90-ddef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:6f:3e:8b:b8:8c:3f:8b:63:3f:24:71:6c:
                    47:13:7d:20:d4:23:c5:49:a1:6a:73:eb:72:9b:5d:
                    3e:79:38:aa:d2:ce:b8:27:56:c1:78:6f:e8:05:8d:
                    6e:ed:a1:00:89:5b:0b:c2:4c:a1:a7:ec:09:1e:34:
                    0b:65:9e:ad:8f:45:47:6c:67:53:1b:7f:83:f5:ee:
                    94:23:86:66:2c:6a:4d:f7:b4:b2:d4:91:f4:2b:83:
                    76:e9:80:7c:7b:af:c0:7b:b3:19:51:53:49:04:2d:
                    b2:54:aa:9b:db:e6:6d:b0:89:37:ba:e6:13:95:b5:
                    03:00:46:ce:79:1f:16:56:a8:e5:a2:44:39:e2:f2:
                    6a:51:60:80:27:fd:96:82:0c:b7:8d:a4:9d:54:01:
                    1a:84:e4:7d:13:98:65:e2:e5:36:d7:ce:c6:67:90:
                    25:87:ab:33:e3:ff:74:3d:b8:e1:50:2c:3f:ab:d5:
                    78:7c:99:24:6a:f3:03:f9:23:ea:e3:df:fe:8e:bc:
                    37:59:ee:89:b5:d2:40:5c:25:15:95:06:c3:15:67:
                    68:06:32:c7:84:16:73:d4:07:7b:34:29:21:4f:7c:
                    03:bd:ee:f3:90:5f:ec:68:b2:db:57:72:36:3e:91:
                    11:44:bb:45:bd:e1:42:2c:a8:19:93:8e:63:1d:db:
                    66:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:13:B1:2E:A7:59:B3:46:76:27:05:06:A9:8E:30:6B:6D:70:1F:B3
            X509v3 Authority Key Identifier:
                keyid:F2:89:3A:62:90:FE:0E:D1:E6:92:CB:E6:66:D7:18:0F:F8:4C:8B:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ok6YpD-DtHmksvmZtcYD_hMi84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A771/672B4332883611EC89683B37C4F9AE02/8ok6YpD-DtHmksvmZtcYD_hMi84.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d3:2b:98:c0:a1:43:f0:61:66:df:4f:16:21:94:75:8a:d2:
         08:01:ea:0d:5a:ec:2c:77:bf:24:0e:14:05:31:80:4d:aa:9b:
         04:c0:a1:db:eb:f3:ce:f4:9e:71:87:5c:4e:ad:09:e6:07:95:
         a0:87:5e:92:f5:4c:21:90:69:1d:d9:7e:5d:c6:14:1f:65:17:
         1a:bc:5d:65:3e:d6:42:7d:ec:33:03:2b:64:d6:92:d0:d6:77:
         e1:94:8c:49:f0:f5:83:64:e5:e6:d8:65:8a:27:56:f1:a2:da:
         6c:89:5b:f0:47:79:97:25:c0:1c:0f:a2:8f:6c:03:2c:1b:25:
         ad:e2:9f:23:01:f9:e5:69:75:50:bd:42:a6:5f:27:bc:be:a9:
         db:87:56:5f:e6:e2:e8:46:af:fd:f8:ca:15:f7:dc:8b:da:3f:
         71:55:54:f5:8f:c7:9f:d6:74:1b:e5:c8:b5:c7:2c:e0:30:89:
         8e:7e:77:0b:12:4f:96:7d:63:47:61:8d:10:6a:e7:af:75:38:
         be:b2:16:91:d8:c3:78:5b:96:d3:5e:d7:8c:66:9e:45:e1:2a:
         4a:0c:e5:79:dc:2d:5f:d1:cc:92:d2:b6:41:f3:ef:59:62:81:
         e4:08:af:d4:47:52:37:aa:aa:af:c2:9a:81:bf:6c:90:89:21:
         01:e6:a5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-ams.rpki-client.org