Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
File:                     enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json)
Hash identifier:          0jVHnwkpKXpTw9JAv0l8HI+23erftcalMSV4SlssvXk=
Subject key identifier:   12:25:B1:17:15:7E:4D:75:8A:9F:87:87:ED:2D:EE:F0:52:BE:35:31
Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0
Certificate issuer:       /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
Manifest number:          06AA
Signing time:             Fri 21 Jun 2024 05:28:23 +0000
Manifest this update:     Fri 21 Jun 2024 05:28:23 +0000
Manifest next update:     Fri 28 Jun 2024 05:28:23 +0000
Files and hashes:         1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: p0wavOMCYvEu8r1UOTMD/w2hHG8R3/HiavHJNBB2ALA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0
        Validity
            Not Before: Jun 21 05:28:23 2024 GMT
            Not After : Jun 28 05:28:23 2024 GMT
        Subject: CN=66750f77-a03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0c:57:95:6a:06:46:4c:75:14:39:10:3d:36:
                    7a:0b:83:96:0b:c9:43:4f:a7:51:eb:d9:53:9f:13:
                    e4:a4:e1:44:b7:48:9a:91:b4:fe:78:7b:de:fd:04:
                    97:2d:8a:59:5d:bf:a1:29:d3:1c:ad:30:5f:10:05:
                    11:af:18:9e:75:f8:ad:f4:c4:09:a1:b9:dd:94:52:
                    5d:30:39:3b:ed:4b:0e:57:4c:cf:c0:01:ce:55:d2:
                    0d:15:45:df:8c:21:de:cc:5d:63:64:26:cf:f7:12:
                    80:41:6c:68:59:b2:6f:c3:49:cf:ed:7c:4f:9c:96:
                    c2:8e:59:3a:b3:7b:86:b0:5b:55:24:99:e5:e1:22:
                    42:7c:d3:53:62:fb:53:ff:2a:51:0b:d5:1c:23:da:
                    ae:ca:aa:25:37:bf:e1:29:c4:e1:ee:b6:41:07:3c:
                    4e:8b:4f:04:65:b4:7c:e5:47:56:a7:10:fe:6b:f5:
                    7b:55:66:04:e2:92:15:28:9f:f9:d6:c9:a2:76:2d:
                    b5:3f:16:a8:d4:fe:f5:3a:9d:ac:23:6f:25:82:f9:
                    93:72:bb:8f:9c:8c:28:90:e3:ec:e5:dc:fb:d2:6a:
                    c8:a1:8c:56:66:ef:e4:80:a1:55:5e:44:7d:da:84:
                    b4:d1:1b:b6:06:ec:bf:c7:32:a9:1b:67:fe:a8:87:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:25:B1:17:15:7E:4D:75:8A:9F:87:87:ED:2D:EE:F0:52:BE:35:31
            X509v3 Authority Key Identifier:
                keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:67:39:0a:58:25:8b:b6:46:4d:62:e9:c2:7c:fa:79:1b:93:
         c2:60:e4:12:60:ad:f5:58:d1:c7:8f:ac:be:0e:7b:fe:6c:bf:
         01:18:f5:13:1d:5a:26:a0:27:71:ab:4b:5d:38:65:b4:60:7c:
         27:ee:6a:14:7c:69:48:c3:79:0b:b3:72:7b:34:75:f1:07:db:
         e9:71:2d:4f:e5:e6:ec:39:c2:6e:f2:b6:db:9b:59:d3:09:f1:
         e1:d1:f2:11:87:13:d8:81:f4:86:ba:48:dd:60:c3:bd:a5:3a:
         5a:09:2e:a7:82:51:83:31:a6:3c:51:e6:1e:18:ae:ba:1a:4d:
         3c:b5:ed:39:53:c3:35:f5:c2:0d:a9:b6:fb:bc:e0:15:4a:22:
         4a:62:fe:6a:2f:2f:53:a4:0a:85:1e:3d:55:b1:fa:82:b4:68:
         ec:16:da:91:fe:3f:61:f5:79:3d:f5:58:d7:ab:aa:24:81:78:
         04:5b:40:81:5a:b4:c8:76:9d:c1:28:eb:46:80:d0:e7:4d:9c:
         96:a0:d6:34:b2:bf:72:75:b0:ab:c5:c3:29:20:56:c8:cf:77:
         06:0d:86:a1:49:35:92:79:91:11:e4:f1:31:4d:c5:26:a3:e8:
         ab:13:13:3b:87:ae:2f:4e:a7:a3:94:1e:ea:e6:a1:cb:be:ad:
         8f:3f:a1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----