Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143BD2/D077C4A69B5011EB9B69B525C4F9AE02/pdvX2oBp8-PS0A_KQVoWQFO32qY.mft
File:                     pdvX2oBp8-PS0A_KQVoWQFO32qY.mft (raw, json)
Hash identifier:          HAcpcPca9zNl6jTn1AbouBtiqROLc3J9girB5fGePwc=
Subject key identifier:   3C:28:C0:01:48:2F:EF:B0:B0:29:EC:D7:F6:96:B8:B8:56:F6:DD:E0
Authority key identifier: A5:DB:D7:DA:80:69:F3:E3:D2:D0:0F:CA:41:5A:16:40:53:B7:DA:A6
Certificate issuer:       /CN=A9143BD2/serialNumber=A5DBD7DA8069F3E3D2D00FCA415A164053B7DAA6
Certificate serial:       0533
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdvX2oBp8-PS0A_KQVoWQFO32qY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143BD2/D077C4A69B5011EB9B69B525C4F9AE02/pdvX2oBp8-PS0A_KQVoWQFO32qY.mft
Manifest number:          052E
Signing time:             Wed 31 Jan 2024 00:51:09 +0000
Manifest this update:     Wed 31 Jan 2024 00:51:08 +0000
Manifest next update:     Wed 07 Feb 2024 00:51:08 +0000
Files and hashes:         1: pdvX2oBp8-PS0A_KQVoWQFO32qY.crl (hash: zaY7kMWcyAZe3SooqVHBsAKOT8ALI74ORhuEq27faSA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1331 (0x533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143BD2/serialNumber=A5DBD7DA8069F3E3D2D00FCA415A164053B7DAA6
        Validity
            Not Before: Jan 31 00:51:08 2024 GMT
            Not After : Feb  7 00:51:08 2024 GMT
        Subject: CN=65b9997d-2af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:ad:bc:cb:85:f8:58:34:d7:73:b9:62:73:
                    fb:64:78:89:9e:17:59:50:3f:12:71:bc:bf:ce:e5:
                    2e:88:f1:3f:33:e8:b2:6e:7d:31:8f:b1:6e:12:f3:
                    e1:5d:45:7d:dd:83:77:4b:28:ad:36:74:33:1e:c2:
                    f3:6f:af:2f:14:8a:c2:06:0b:bf:92:0c:69:28:9e:
                    f1:73:e1:42:ff:a4:98:09:a7:44:bf:10:c6:81:09:
                    e8:6a:ea:1d:99:53:83:81:1b:42:6d:45:d9:85:1a:
                    f5:a4:9c:e3:01:75:3e:1b:43:0e:02:b9:fa:50:74:
                    1a:44:99:3e:44:fb:3a:3b:73:74:d3:a5:22:12:ba:
                    d2:b5:4a:86:61:91:df:88:cb:97:cb:82:d8:d7:d5:
                    b5:19:d2:b9:1f:e4:f3:64:52:b9:f6:7b:2f:ed:57:
                    b1:0e:0c:45:13:e1:62:2e:9e:2b:c2:a8:ed:0b:e0:
                    23:a4:78:2e:66:3a:c5:50:0f:f7:8a:77:14:52:5a:
                    5d:e4:45:f3:71:a7:63:50:f2:64:40:bc:f8:01:db:
                    7d:36:38:8a:8f:f5:88:7b:9e:27:60:a3:5d:8f:e5:
                    ca:72:d1:53:ab:d6:27:79:56:f5:35:95:d4:14:51:
                    d1:40:b6:40:b2:97:a9:6e:1b:b7:ef:bb:4f:88:85:
                    14:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:28:C0:01:48:2F:EF:B0:B0:29:EC:D7:F6:96:B8:B8:56:F6:DD:E0
            X509v3 Authority Key Identifier:
                keyid:A5:DB:D7:DA:80:69:F3:E3:D2:D0:0F:CA:41:5A:16:40:53:B7:DA:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143BD2/D077C4A69B5011EB9B69B525C4F9AE02/pdvX2oBp8-PS0A_KQVoWQFO32qY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdvX2oBp8-PS0A_KQVoWQFO32qY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143BD2/D077C4A69B5011EB9B69B525C4F9AE02/pdvX2oBp8-PS0A_KQVoWQFO32qY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:bb:bf:b3:a0:3d:64:f2:19:f9:bc:79:03:37:64:dd:8f:6a:
         9f:89:35:34:0b:3d:17:4b:48:84:7a:57:bc:06:64:43:ba:b1:
         66:33:2f:e3:fe:ca:9a:67:10:6e:07:a5:f8:50:d8:15:39:03:
         b1:48:88:f6:51:0d:54:83:26:81:46:44:22:ac:5a:9e:85:10:
         a8:ef:e5:1a:d5:43:a2:6d:21:f1:af:2a:51:49:cb:44:ab:1a:
         e1:90:31:0f:99:10:6d:fc:76:4b:f9:7f:6f:20:78:66:f1:c5:
         6a:7a:94:52:e4:37:76:53:63:6d:66:47:85:8c:2e:f8:58:48:
         c8:66:64:49:ad:48:7c:cc:6f:78:4c:87:c3:c0:d7:be:dc:da:
         06:03:22:60:bc:b1:34:05:90:d3:30:ca:33:e1:05:08:b7:b9:
         9b:34:a2:10:ea:4c:ff:32:f5:e3:5b:67:97:81:d4:34:d6:27:
         81:8e:59:07:70:cf:27:31:02:a6:4a:96:58:18:de:7a:75:bc:
         2f:bb:b8:f4:54:d3:f7:ec:b8:ba:a2:cf:14:2d:68:06:d2:72:
         1c:f3:9d:72:c9:68:64:c5:9f:17:82:83:13:ed:70:1a:d2:03:
         e4:f3:86:19:dc:38:ca:01:ec:fa:67:85:2f:56:e9:7f:4f:a6:
         e4:d4:f7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----