Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142FB1/C38E255A6BBA11ED9CCCA211C4F9AE02/AVKKhMu1YZDhLiat_I45RJUdY8o.mft
File:                     AVKKhMu1YZDhLiat_I45RJUdY8o.mft (raw, json)
Hash identifier:          DPZMMjkJPG0w8NasO1NOMHvacxCBkfOfDRDUcPgp7z4=
Subject key identifier:   94:5A:B6:C0:71:2B:B2:00:B6:EB:41:46:D2:8B:11:E6:0E:73:95:08
Authority key identifier: 01:52:8A:84:CB:B5:61:90:E1:2E:26:AD:FC:8E:39:44:95:1D:63:CA
Certificate issuer:       /CN=A9142FB1/serialNumber=01528A84CBB56190E12E26ADFC8E3944951D63CA
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AVKKhMu1YZDhLiat_I45RJUdY8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142FB1/C38E255A6BBA11ED9CCCA211C4F9AE02/AVKKhMu1YZDhLiat_I45RJUdY8o.mft
Manifest number:          55
Signing time:             Sun 07 May 2023 07:13:40 +0000
Manifest this update:     Sun 07 May 2023 07:13:39 +0000
Manifest next update:     Sun 14 May 2023 07:13:39 +0000
Files and hashes:         1: AVKKhMu1YZDhLiat_I45RJUdY8o.crl (hash: Eemv7zh76LFvEq5z3GkDH8jVjEuvduSK1fX2M4Exnuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142FB1/serialNumber=01528A84CBB56190E12E26ADFC8E3944951D63CA
        Validity
            Not Before: May  7 07:13:39 2023 GMT
            Not After : May 14 07:13:39 2023 GMT
        Subject: CN=64574fa3-a14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a5:62:84:28:13:b2:38:0c:40:c6:6a:84:21:
                    91:6b:50:f4:a4:6b:13:4e:5a:bb:d8:9a:9e:14:e5:
                    87:cf:d9:b1:a0:10:ce:0d:99:fd:08:d9:79:13:84:
                    a7:6a:d5:42:6f:4f:5e:1c:76:04:dd:72:df:f3:5b:
                    35:18:a3:9c:a4:b4:70:7b:18:4a:4b:b9:1c:2b:14:
                    b7:6a:7e:99:23:95:74:dc:b6:01:60:05:7a:11:5b:
                    af:40:a1:a4:13:ef:d9:e6:a4:27:1a:5b:a8:8b:57:
                    76:f4:7d:a4:d3:cf:87:0b:2e:7e:ce:6d:ba:b3:ae:
                    7d:99:3d:83:21:19:32:c3:a9:bf:49:a7:1a:96:e4:
                    2d:39:15:f1:91:16:24:bc:36:b8:5e:d8:28:78:3b:
                    6e:f7:0b:e6:cf:09:be:6a:db:22:ed:fe:24:fc:a8:
                    8f:51:43:a3:19:5f:f6:9c:97:55:fd:fa:6b:a1:6b:
                    9a:f4:d2:57:4c:6d:5b:03:90:ae:06:86:4d:66:00:
                    eb:87:bb:b1:ac:43:c2:21:0f:79:03:5b:30:74:0e:
                    92:3f:92:d5:5d:f5:c8:44:cf:aa:bd:ff:42:ee:f1:
                    c9:99:03:91:3a:83:9d:ac:09:56:6d:c0:4a:91:2f:
                    32:75:09:ab:95:b5:9f:09:36:7a:68:0d:ff:38:0e:
                    99:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5A:B6:C0:71:2B:B2:00:B6:EB:41:46:D2:8B:11:E6:0E:73:95:08
            X509v3 Authority Key Identifier:
                keyid:01:52:8A:84:CB:B5:61:90:E1:2E:26:AD:FC:8E:39:44:95:1D:63:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142FB1/C38E255A6BBA11ED9CCCA211C4F9AE02/AVKKhMu1YZDhLiat_I45RJUdY8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AVKKhMu1YZDhLiat_I45RJUdY8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142FB1/C38E255A6BBA11ED9CCCA211C4F9AE02/AVKKhMu1YZDhLiat_I45RJUdY8o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a0:c6:d4:eb:bf:00:5b:d3:35:cb:71:8e:c2:15:0b:3b:73:
         25:cb:87:66:96:9a:c0:b5:7d:fb:42:ac:0c:b0:35:85:5c:f0:
         04:9a:15:62:10:55:a6:c7:b8:51:1e:1a:eb:c5:c5:28:d7:9d:
         ef:03:5e:e7:4f:df:75:ed:c1:bb:50:78:d8:16:a3:5a:bf:8a:
         7e:14:2a:92:3b:0d:59:47:b1:ec:7c:81:a7:c0:a6:96:e8:9b:
         a1:b0:57:de:90:ba:9d:4d:46:1d:40:7b:71:2e:8b:36:53:5a:
         ee:e7:0f:08:42:a0:3f:22:3d:38:a4:9d:12:7c:42:2c:af:b7:
         76:3f:dc:d8:29:3f:6e:7a:12:72:fc:12:2a:e4:cf:c4:7c:95:
         db:39:1a:d9:70:1d:7b:4d:33:98:67:d7:e4:1f:2d:75:a5:35:
         b3:f8:52:51:58:11:fc:69:f9:17:4d:c9:f9:bd:a2:91:07:e9:
         49:f0:06:17:0d:bc:55:43:eb:7d:13:54:d9:89:f1:15:73:98:
         da:09:e9:6b:07:92:a0:2c:00:62:e9:24:33:79:01:e2:2c:bf:
         d8:ed:3c:40:60:d6:75:d0:d8:4e:01:30:b7:4e:75:70:a4:5a:
         82:86:b3:c9:14:39:3d:93:3b:23:58:f3:6e:ca:de:b4:ca:b5:
         7b:f6:73:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org