Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.mft
File:                     TLgV1pdFW8swK3TXnapq5Bu3t4k.mft (raw, json)
Hash identifier:          x+rp3Q+P0nTJntwoYyICT0rhUY20tzrPT6UBoDK517M=
Subject key identifier:   33:6C:57:86:17:CD:4E:92:7C:78:55:5A:BD:FE:03:02:27:11:6A:53
Authority key identifier: 4C:B8:15:D6:97:45:5B:CB:30:2B:74:D7:9D:AA:6A:E4:1B:B7:B7:89
Certificate issuer:       /CN=A91395A9/serialNumber=4CB815D697455BCB302B74D79DAA6AE41BB7B789
Certificate serial:       074B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLgV1pdFW8swK3TXnapq5Bu3t4k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.mft
Manifest number:          1B5F
Signing time:             Fri 09 Aug 2024 08:34:10 +0000
Manifest this update:     Fri 09 Aug 2024 08:34:10 +0000
Manifest next update:     Fri 16 Aug 2024 08:34:10 +0000
Files and hashes:         1: TLgV1pdFW8swK3TXnapq5Bu3t4k.crl (hash: PC8ujgW+ZHIslag3O1lQY/TO9dKeLb5cnkSCMgqfw2w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867 (0x74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91395A9/serialNumber=4CB815D697455BCB302B74D79DAA6AE41BB7B789
        Validity
            Not Before: Aug  9 08:34:10 2024 GMT
            Not After : Aug 16 08:34:10 2024 GMT
        Subject: CN=66b5d482-3564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:bb:03:06:fb:df:22:15:f8:6f:b9:20:74:
                    b7:76:30:0e:26:61:3b:f3:31:c0:45:fa:1c:32:bd:
                    30:09:d0:9d:c1:61:5b:ac:72:1c:25:64:e6:79:3f:
                    10:60:a1:4f:88:90:5d:e8:00:30:da:0d:2c:2d:d8:
                    0a:0d:46:0f:15:ae:42:93:0d:65:23:92:18:65:5e:
                    0b:a8:0d:bc:75:65:b7:02:59:fa:fc:50:74:e0:0c:
                    da:7a:9e:84:f0:91:0b:91:68:91:f2:d7:31:fd:6c:
                    ed:31:5a:73:0f:f4:af:ac:fc:57:27:79:fb:27:41:
                    3f:83:5c:3e:ba:68:3a:49:73:b4:c8:91:b3:7e:07:
                    56:50:cf:26:a4:d8:89:37:1a:3d:c8:d6:ec:0d:7c:
                    e2:bf:d8:46:99:44:ac:b0:28:a9:15:c5:58:b9:dd:
                    28:2b:42:28:50:eb:54:3d:44:ce:25:38:43:0b:2f:
                    2f:98:ef:e2:fb:18:aa:1b:cc:cc:e5:7b:92:69:f1:
                    bd:8f:2d:3d:f7:ef:a8:a9:29:ed:f4:25:fb:b5:a0:
                    94:77:0f:53:1b:9b:c7:a4:6c:ac:92:70:d9:08:06:
                    6d:9f:ff:eb:06:46:3c:f3:36:45:57:d5:3d:c2:4e:
                    eb:dc:88:64:ec:31:87:c0:96:7d:1f:56:dc:cb:d1:
                    ce:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6C:57:86:17:CD:4E:92:7C:78:55:5A:BD:FE:03:02:27:11:6A:53
            X509v3 Authority Key Identifier:
                keyid:4C:B8:15:D6:97:45:5B:CB:30:2B:74:D7:9D:AA:6A:E4:1B:B7:B7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLgV1pdFW8swK3TXnapq5Bu3t4k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91395A9/67AEDE8C5D1911E88DDE393EC4F9AE02/TLgV1pdFW8swK3TXnapq5Bu3t4k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:93:0a:fc:d8:57:76:d3:59:87:51:80:be:dc:5c:75:15:3a:
         8d:12:97:e2:18:dd:17:87:5a:39:d6:2c:01:3f:42:61:f6:71:
         3b:5e:b5:51:8c:db:d8:14:be:57:15:02:df:26:8c:02:ae:eb:
         81:e4:9a:a0:56:95:9f:eb:70:e6:1b:a7:dc:a4:9a:d9:68:98:
         47:2c:a5:02:f3:cb:c6:22:4d:95:8c:a9:02:79:05:ce:89:1b:
         ae:70:94:ae:cc:83:1a:b2:31:7d:ff:66:2e:92:d9:87:2a:4e:
         a0:e5:78:84:5c:96:04:97:2f:b5:00:73:e8:e5:5e:3f:94:c5:
         86:ba:83:6a:b8:c0:bf:26:18:3c:4b:69:43:20:05:48:26:4e:
         75:57:80:7a:eb:e7:cc:35:96:20:e1:d5:5e:0c:15:c8:3f:9f:
         d2:2f:a3:92:39:b4:c9:12:09:28:55:21:dd:84:19:c1:57:5f:
         5b:05:20:ca:9d:d4:41:79:93:40:08:2e:a1:6c:88:c6:b4:d5:
         02:e9:57:30:b6:ff:18:73:0d:4f:af:06:97:7b:96:3d:33:88:
         75:53:6d:56:32:68:60:e9:1b:73:05:58:6b:a2:d0:07:52:a5:
         dc:11:8f:f8:5c:1b:72:47:94:1a:c5:10:67:74:5e:97:32:5c:
         a2:fe:d7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----