Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C00F/C47AA68E5D8511E89B87527FC4F9AE02/rRuwanK-OQjUMvrwg2NXqkTfFrg.mft
File:                     rRuwanK-OQjUMvrwg2NXqkTfFrg.mft (raw, json)
Hash identifier:          w+X5da4IDWGDTafeXVLR6JY+dWd0psvVU4V87LSjvOw=
Subject key identifier:   3A:BC:FD:37:C9:B8:B1:31:2E:4A:B7:91:5B:25:FE:AE:66:54:8F:7B
Authority key identifier: AD:1B:B0:6A:72:BE:39:08:D4:32:FA:F0:83:63:57:AA:44:DF:16:B8
Certificate issuer:       /CN=A913C00F/serialNumber=AD1BB06A72BE3908D432FAF0836357AA44DF16B8
Certificate serial:       13BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRuwanK-OQjUMvrwg2NXqkTfFrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C00F/C47AA68E5D8511E89B87527FC4F9AE02/rRuwanK-OQjUMvrwg2NXqkTfFrg.mft
Manifest number:          13A9
Signing time:             Sat 02 Dec 2023 17:27:05 +0000
Manifest this update:     Sat 02 Dec 2023 17:27:04 +0000
Manifest next update:     Sat 09 Dec 2023 17:27:04 +0000
Files and hashes:         1: rRuwanK-OQjUMvrwg2NXqkTfFrg.crl (hash: PGo0W2RUWlKIVvH7mvQT/4vxwO6GUk1VTvIPBd/niFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5050 (0x13ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C00F/serialNumber=AD1BB06A72BE3908D432FAF0836357AA44DF16B8
        Validity
            Not Before: Dec  2 17:27:04 2023 GMT
            Not After : Dec  9 17:27:04 2023 GMT
        Subject: CN=656b68e8-0fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7a:dc:b1:23:66:bb:cd:12:d4:6a:e5:1c:ba:
                    0a:a0:72:9b:b8:3d:87:fe:31:b4:e0:a3:b0:72:95:
                    d4:62:44:87:9e:07:0d:36:09:48:cf:c8:77:73:cc:
                    13:e9:1c:79:a9:1f:2a:9b:8f:5c:8d:c8:07:aa:fe:
                    f5:44:46:4a:28:bf:a4:6e:51:bf:e8:71:63:63:fa:
                    d2:02:1b:58:05:fd:4f:ec:56:db:78:23:2c:3c:aa:
                    e7:2c:43:9f:dd:07:95:29:95:db:a7:98:6c:67:a9:
                    d7:13:65:22:04:f2:7b:70:fc:8c:ec:52:42:8f:49:
                    d3:c1:d6:d1:fb:c8:11:2e:40:3e:45:4d:0f:5d:7b:
                    fb:12:63:73:02:86:5c:c0:8c:0d:e5:75:16:d8:59:
                    58:45:05:05:68:72:67:dc:9e:fe:b6:88:8b:b1:09:
                    6d:ea:cb:8a:b0:f1:ef:73:00:0c:4a:08:09:a0:7c:
                    93:68:7c:00:69:8a:63:80:4b:83:36:74:79:67:9e:
                    59:9d:61:8e:6d:89:20:6f:f5:a5:9c:09:47:a2:61:
                    4b:88:1e:fa:1d:81:5d:7d:c2:31:cb:93:44:21:b3:
                    02:2f:ab:41:bd:0e:45:f3:5f:d3:7a:d2:f1:89:87:
                    fe:1b:a5:1f:8b:fc:5c:ff:d7:f0:d0:bc:df:c1:90:
                    18:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BC:FD:37:C9:B8:B1:31:2E:4A:B7:91:5B:25:FE:AE:66:54:8F:7B
            X509v3 Authority Key Identifier:
                keyid:AD:1B:B0:6A:72:BE:39:08:D4:32:FA:F0:83:63:57:AA:44:DF:16:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C00F/C47AA68E5D8511E89B87527FC4F9AE02/rRuwanK-OQjUMvrwg2NXqkTfFrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRuwanK-OQjUMvrwg2NXqkTfFrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C00F/C47AA68E5D8511E89B87527FC4F9AE02/rRuwanK-OQjUMvrwg2NXqkTfFrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f7:e5:03:23:43:43:a2:b3:d3:e5:c3:1f:f2:39:cb:97:ff:
         15:4f:0a:20:19:67:42:17:12:49:15:fe:09:3d:58:43:0c:a6:
         92:3f:2f:71:7f:83:b6:0f:58:c3:4b:53:16:4b:9a:3e:bb:22:
         aa:af:1b:d6:08:7e:64:d8:f0:26:bd:a8:b5:6a:e3:0c:04:16:
         d2:cd:08:38:3f:2d:fd:3f:c6:9e:e8:5b:5c:e1:b6:d9:97:45:
         97:fd:91:79:df:cf:a9:3c:f6:bf:26:4f:99:57:44:eb:c2:ee:
         e1:77:5c:75:d8:45:89:92:a8:6b:ad:92:ec:2e:c2:83:51:f8:
         87:56:de:7e:8a:ec:b8:9d:ba:32:63:a7:7f:08:6e:18:79:d5:
         0b:4c:32:b5:95:f4:fb:ab:06:92:c3:57:e5:b1:b4:53:fa:69:
         a1:b9:4f:d5:a5:2f:f4:39:fc:70:b1:65:a9:47:8c:33:81:de:
         90:c7:1b:ec:9f:89:49:73:de:5b:df:72:1a:f5:0d:7c:51:87:
         8c:9a:f3:de:bf:cc:4a:27:d2:03:fb:6f:bf:44:17:c9:b6:d3:
         2d:cf:79:07:a4:d0:b4:59:89:8a:4b:a1:87:4b:25:1e:4b:01:
         92:a2:60:68:f2:f5:e0:83:ed:ed:7a:9a:bc:54:56:76:8e:b6:
         3e:36:8f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----