Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342FD/00FDE94690EB11EAAADE477DC4F9AE02/oiyFGsPEKVuBSrGco14gWTqeWXo.mft
File:                     oiyFGsPEKVuBSrGco14gWTqeWXo.mft (raw, json)
Hash identifier:          jf47Hyx6RaaI9KWZgxUK9Xu8XsPsAKA1JkBYwBplJwQ=
Subject key identifier:   66:CA:EF:61:23:14:FB:D2:63:4F:E6:A0:D8:AE:97:40:DB:36:EC:F1
Authority key identifier: A2:2C:85:1A:C3:C4:29:5B:81:4A:B1:9C:A3:5E:20:59:3A:9E:59:7A
Certificate issuer:       /CN=A91342FD/serialNumber=A22C851AC3C4295B814AB19CA35E20593A9E597A
Certificate serial:       083B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiyFGsPEKVuBSrGco14gWTqeWXo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91342FD/00FDE94690EB11EAAADE477DC4F9AE02/oiyFGsPEKVuBSrGco14gWTqeWXo.mft
Manifest number:          0836
Signing time:             Wed 13 Sep 2023 08:38:31 +0000
Manifest this update:     Wed 13 Sep 2023 08:38:31 +0000
Manifest next update:     Wed 20 Sep 2023 08:38:31 +0000
Files and hashes:         1: oiyFGsPEKVuBSrGco14gWTqeWXo.crl (hash: /l0czsYP3lq3XcEWBvnD8j6v3wWZkt6yl87xxQeRH+U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107 (0x83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91342FD/serialNumber=A22C851AC3C4295B814AB19CA35E20593A9E597A
        Validity
            Not Before: Sep 13 08:38:31 2023 GMT
            Not After : Sep 20 08:38:31 2023 GMT
        Subject: CN=65017507-63b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:83:ac:9e:aa:77:32:1a:f7:17:fe:c5:d6:d8:
                    5f:15:9e:ba:70:13:e1:3c:df:1b:da:ec:ae:57:6d:
                    7d:3a:a9:56:62:c0:ff:5b:85:08:34:fe:3c:a7:7f:
                    2b:db:84:7f:b6:21:c0:a8:22:e6:d0:37:bc:57:a0:
                    fa:6e:ee:65:b3:c3:09:80:ab:c0:01:4a:42:e8:51:
                    0f:25:e6:fe:7f:a2:b0:a3:58:8b:18:c8:bd:da:e5:
                    a4:ff:c9:05:ce:3c:de:49:b6:08:6c:d5:2d:05:c7:
                    61:11:e8:95:37:8b:f0:10:47:38:16:8b:e4:70:a0:
                    ca:11:6a:32:b0:9a:ba:96:51:e2:d2:7d:18:f9:78:
                    be:bc:dc:d4:35:3f:72:fe:8e:69:14:5b:f8:13:7d:
                    84:ac:18:a0:7a:06:b4:2c:8a:5f:5a:1f:2c:39:7e:
                    d6:5d:6f:cb:8d:0c:8a:fa:5d:ab:86:84:13:ae:02:
                    5d:02:6b:64:75:72:34:a3:09:5c:a0:92:99:04:ec:
                    f2:01:2e:81:5b:70:d4:c7:2d:26:5a:1e:01:66:97:
                    ab:5b:31:a4:6b:da:8f:0b:9a:f8:a7:3c:51:06:d2:
                    fb:96:06:4b:83:84:8e:bb:a6:3b:da:cb:a6:dd:c0:
                    3a:a2:7b:08:21:fe:8c:e3:da:39:5f:41:19:a2:11:
                    7f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CA:EF:61:23:14:FB:D2:63:4F:E6:A0:D8:AE:97:40:DB:36:EC:F1
            X509v3 Authority Key Identifier:
                keyid:A2:2C:85:1A:C3:C4:29:5B:81:4A:B1:9C:A3:5E:20:59:3A:9E:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91342FD/00FDE94690EB11EAAADE477DC4F9AE02/oiyFGsPEKVuBSrGco14gWTqeWXo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oiyFGsPEKVuBSrGco14gWTqeWXo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342FD/00FDE94690EB11EAAADE477DC4F9AE02/oiyFGsPEKVuBSrGco14gWTqeWXo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:92:cf:57:f3:34:36:aa:34:20:7e:f9:b4:34:4c:b5:b7:0c:
         5c:5b:9c:5f:9e:8f:87:50:9f:7a:d9:af:20:6f:2e:f6:64:1d:
         ee:6f:3e:ad:35:74:6d:33:21:e5:76:ae:df:be:f6:1a:2f:59:
         6e:3e:c1:ce:0a:13:aa:a2:62:ff:32:c8:1e:9c:71:b4:97:72:
         46:a8:b9:91:68:04:09:28:28:bd:90:22:67:92:b4:4d:46:e1:
         22:7f:33:13:e1:df:49:39:d9:78:30:95:57:09:8e:72:1e:91:
         18:22:4e:67:85:21:12:57:35:58:34:21:6f:82:02:d2:5c:07:
         b3:ad:da:54:d7:88:2f:7e:16:f0:ad:ce:64:24:18:c8:94:c4:
         2f:e7:f6:c1:a3:28:62:e1:38:2d:fa:1e:c7:19:98:96:15:d2:
         c8:a0:f8:2f:c7:bb:2f:ea:41:8e:31:b6:90:fb:94:31:ac:d0:
         a0:ac:07:1d:31:5b:db:5a:a0:d4:05:2f:fd:bf:22:98:4f:68:
         0d:ab:86:02:43:bb:bf:16:be:ad:b7:1a:a0:b9:6a:e4:3a:6f:
         84:14:c6:8f:ba:32:ef:35:29:78:b8:c9:ef:ea:8c:e9:fa:c0:
         66:88:16:8a:78:38:48:0f:63:ff:b3:5d:e3:10:cd:6a:81:67:
         8d:31:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----