Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.mft
File:                     z8AnvWbwidNpy1leBgJeLd0Z44I.mft (raw, json)
Hash identifier:          EetnRo66QivEaPNTrcXRDKUfSywelL416tQ408q2x4Y=
Subject key identifier:   A7:5C:C6:FD:D1:94:20:FD:CB:A3:F1:F3:CA:A5:C0:69:68:7D:89:97
Authority key identifier: CF:C0:27:BD:66:F0:89:D3:69:CB:59:5E:06:02:5E:2D:DD:19:E3:82
Certificate issuer:       /CN=A9155AE4/serialNumber=CFC027BD66F089D369CB595E06025E2DDD19E382
Certificate serial:       01FC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8AnvWbwidNpy1leBgJeLd0Z44I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.mft
Manifest number:          01EB
Signing time:             Wed 29 May 2024 04:50:54 +0000
Manifest this update:     Wed 29 May 2024 04:50:54 +0000
Manifest next update:     Wed 05 Jun 2024 04:50:53 +0000
Files and hashes:         1: z8AnvWbwidNpy1leBgJeLd0Z44I.crl (hash: 5pbsAyKMA6ZXPk221QaiFVcOD/qid9zvXOkxZskzWEc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155AE4/serialNumber=CFC027BD66F089D369CB595E06025E2DDD19E382
        Validity
            Not Before: May 29 04:50:54 2024 GMT
            Not After : Jun  5 04:50:53 2024 GMT
        Subject: CN=6656b42e-5bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:25:c1:ee:61:36:19:f5:47:b0:35:68:8f:26:
                    2d:eb:7b:64:ab:61:d5:71:67:42:16:f4:50:77:35:
                    a7:84:c5:d9:2a:a2:ce:cb:7f:cb:b4:01:a3:3f:d6:
                    4e:6e:73:cc:30:22:3e:9f:c4:c5:c4:81:ab:08:f4:
                    de:df:49:83:20:cd:2e:84:b8:a6:ea:da:3d:23:78:
                    4e:7e:fc:12:17:29:00:85:5a:aa:f6:64:87:9b:f6:
                    05:df:95:f7:d7:69:f6:39:08:9c:c5:95:89:ac:dd:
                    ee:ba:52:72:38:b4:d4:09:9a:83:6c:5d:63:82:1c:
                    56:01:a9:eb:ee:73:9b:4e:53:ad:db:aa:90:d0:a6:
                    0c:b8:cd:87:16:e3:59:05:29:38:54:ef:58:08:80:
                    8a:9e:8f:76:70:c9:2f:d5:8e:92:62:73:54:d4:3e:
                    f9:f2:a7:f9:8d:07:5d:bc:62:94:10:8a:63:1a:ad:
                    43:34:6b:55:42:5b:61:fa:bb:e4:fd:75:92:97:96:
                    c0:2f:9c:13:a5:c6:f5:04:49:ef:48:a1:5e:4d:16:
                    a0:6b:2b:70:cd:c4:99:15:e0:a8:1e:14:00:b2:7f:
                    b7:c2:04:2f:d9:0f:13:92:ef:ab:78:cf:6d:f2:5d:
                    a9:57:fd:00:2e:19:29:79:42:4b:7e:02:fe:da:67:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5C:C6:FD:D1:94:20:FD:CB:A3:F1:F3:CA:A5:C0:69:68:7D:89:97
            X509v3 Authority Key Identifier:
                keyid:CF:C0:27:BD:66:F0:89:D3:69:CB:59:5E:06:02:5E:2D:DD:19:E3:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8AnvWbwidNpy1leBgJeLd0Z44I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/DBEE4318065311ED827BEF54C4F9AE02/z8AnvWbwidNpy1leBgJeLd0Z44I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:24:68:1e:d8:5b:07:96:dc:ea:4f:42:ad:27:46:40:31:61:
         ea:7b:26:be:55:7d:92:da:3f:d7:da:57:c6:6c:ce:97:28:ff:
         7b:dc:0e:40:77:dc:dd:69:36:13:4e:8a:4b:4d:c6:19:ba:2c:
         8e:9f:c2:8b:8d:df:25:17:4f:26:1c:8a:30:3d:b3:8f:2f:0d:
         f8:65:42:65:d0:36:e5:b9:f3:91:fd:f5:1b:63:76:c4:6c:80:
         9f:37:7a:f5:c7:1f:34:1c:7b:fb:b5:6d:74:84:38:f0:f6:57:
         bc:34:f8:31:21:05:4a:6d:d7:73:7c:46:1f:bf:71:5b:ff:e3:
         c7:ff:4d:4c:4a:4d:fb:84:1e:5b:83:0c:6b:7a:c3:26:49:82:
         ca:cd:29:96:2b:55:bc:72:4f:1e:ce:64:17:e5:c6:d9:81:af:
         8f:94:ac:b5:ec:51:d5:ed:a0:d8:d7:56:86:d2:13:91:aa:25:
         4f:c5:ae:4d:7f:4b:2f:89:4d:0b:09:df:71:4e:fd:4c:81:48:
         c8:1a:ff:8d:fa:29:a7:10:b5:68:47:cd:3e:e2:a6:2c:0f:91:
         25:2c:04:72:ae:09:6d:85:32:e1:4f:e6:31:de:d7:56:3e:41:
         d6:fb:31:4c:5e:e3:58:52:07:6f:2b:ef:6c:37:27:18:a2:58:
         2a:60:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org