Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/PPSnQ7hi9HXpIh9I0juegVPVj2I.mft
File:                     PPSnQ7hi9HXpIh9I0juegVPVj2I.mft (raw, json)
Hash identifier:          zhLOeV+vTFv8K7ovgTahwIvYTMdz1nQECTsw2k64X2I=
Subject key identifier:   F0:4F:F0:72:DF:A8:EC:7F:1F:29:9E:E2:81:5A:AB:93:C8:7A:14:B9
Authority key identifier: 3C:F4:A7:43:B8:62:F4:75:E9:22:1F:48:D2:3B:9E:81:53:D5:8F:62
Certificate issuer:       /CN=A914993E/serialNumber=3CF4A743B862F475E9221F48D23B9E8153D58F62
Certificate serial:       0E10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPSnQ7hi9HXpIh9I0juegVPVj2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/PPSnQ7hi9HXpIh9I0juegVPVj2I.mft
Manifest number:          0DEE
Signing time:             Tue 09 May 2023 02:28:47 +0000
Manifest this update:     Tue 09 May 2023 02:28:46 +0000
Manifest next update:     Tue 16 May 2023 02:28:46 +0000
Files and hashes:         1: PPSnQ7hi9HXpIh9I0juegVPVj2I.crl (hash: mELvZAzcy9OigJ/i6PHROAWYh+uWsjg2LePfO+EWQ5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3600 (0xe10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914993E/serialNumber=3CF4A743B862F475E9221F48D23B9E8153D58F62
        Validity
            Not Before: May  9 02:28:46 2023 GMT
            Not After : May 16 02:28:46 2023 GMT
        Subject: CN=6459afdf-968c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:be:6f:5c:ff:5b:33:e9:88:59:dc:e3:cf:
                    20:99:26:08:d2:35:45:de:9c:35:cc:00:44:c2:23:
                    cd:76:dc:8d:f7:65:e0:3c:dc:58:cf:7d:26:a9:30:
                    54:92:07:e5:c7:4e:b6:18:86:d7:4f:09:bd:79:c6:
                    67:39:d6:e7:63:4f:d6:dd:aa:f7:73:e9:c1:3a:08:
                    f9:23:64:a3:11:7d:a2:e9:83:40:23:cd:70:c7:ed:
                    13:6c:b1:11:a8:a7:bf:13:f8:d0:ef:a8:0f:c5:a4:
                    7d:27:9f:a3:4d:d0:12:46:6b:f1:10:cb:aa:bb:e5:
                    46:d3:9e:f3:4f:15:07:1a:91:83:ac:f9:6b:3a:aa:
                    c9:01:77:70:c5:6c:34:26:be:cd:87:08:fd:7d:ec:
                    ba:df:02:f3:d1:ad:8c:ea:20:c5:c6:de:0f:16:0f:
                    37:bf:70:2c:b8:79:64:73:12:00:90:42:2a:72:ea:
                    7e:5f:2f:bb:3a:76:57:fb:fb:46:2e:44:03:6d:cc:
                    af:ca:fd:df:4b:e2:4c:fb:06:62:61:d2:be:93:34:
                    d7:e0:ed:95:5d:9d:5c:93:77:35:de:9f:23:ca:e7:
                    72:9f:c0:a1:ce:ba:5d:ae:fc:62:56:3d:7a:b9:8c:
                    46:63:29:1f:2e:7b:98:cb:2a:91:15:be:98:67:7c:
                    55:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:F0:72:DF:A8:EC:7F:1F:29:9E:E2:81:5A:AB:93:C8:7A:14:B9
            X509v3 Authority Key Identifier:
                keyid:3C:F4:A7:43:B8:62:F4:75:E9:22:1F:48:D2:3B:9E:81:53:D5:8F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/PPSnQ7hi9HXpIh9I0juegVPVj2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPSnQ7hi9HXpIh9I0juegVPVj2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914993E/3F216D4C6C1111E9A55A8D5FC4F9AE02/PPSnQ7hi9HXpIh9I0juegVPVj2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:bd:4c:28:fe:bb:b9:c3:53:ea:1d:53:4e:9c:00:97:cd:a2:
         e0:9e:4a:c8:87:86:ec:73:ff:12:f3:59:3c:03:86:cc:44:df:
         88:85:56:9e:bd:e1:16:8b:d2:68:a0:a0:7a:cd:a4:2b:c1:f6:
         e7:71:fa:e1:c2:6b:b0:e4:0a:10:b4:83:fd:64:68:55:af:f4:
         a0:92:a3:83:64:b1:d5:f4:f3:ba:1c:50:1e:fa:2f:de:33:58:
         20:27:6c:b6:0a:a0:57:a6:eb:cd:d2:6a:4b:49:f1:69:a3:84:
         e3:a5:ed:ed:11:de:ee:a8:fd:7b:7e:73:15:20:28:b3:84:48:
         63:ca:aa:52:42:5d:f9:71:90:43:d6:ed:de:eb:83:51:b6:25:
         3d:dc:43:a9:f8:3d:19:1e:36:b7:63:76:36:52:ee:ba:3b:b8:
         6d:a6:17:05:e7:cd:11:9c:a6:27:1b:16:fb:d6:24:bf:ab:5f:
         ab:61:9c:4f:46:1a:88:f3:0d:cc:71:2d:23:d5:14:76:eb:53:
         d3:7f:75:70:eb:e7:cb:1a:25:80:3b:6c:a8:13:c6:82:37:b2:
         b7:30:19:44:e5:98:43:96:20:55:54:22:d0:08:55:12:ac:f6:
         d4:94:7a:03:b7:3c:9b:36:a7:bd:b0:ff:e8:57:1d:9d:10:f3:
         dd:8d:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----