Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155CA4/7B2578D8C1A111EA94735C31C4F9AE02/4PLqY0OvRNmepEKWs5EP2oNlKXM.mft
File:                     4PLqY0OvRNmepEKWs5EP2oNlKXM.mft (raw, json)
Hash identifier:          sCAyyHDSLZrtCY65TDTO2LyQIBQ7FBelW8QXPYGb+g0=
Subject key identifier:   54:6D:77:F6:4B:04:BE:AA:97:B0:B6:FF:12:E2:F8:B2:7F:DF:F9:8C
Authority key identifier: E0:F2:EA:63:43:AF:44:D9:9E:A4:42:96:B3:91:0F:DA:83:65:29:73
Certificate issuer:       /CN=A9155CA4/serialNumber=E0F2EA6343AF44D99EA44296B3910FDA83652973
Certificate serial:       07C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PLqY0OvRNmepEKWs5EP2oNlKXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155CA4/7B2578D8C1A111EA94735C31C4F9AE02/4PLqY0OvRNmepEKWs5EP2oNlKXM.mft
Manifest number:          07BA
Signing time:             Sun 12 May 2024 22:04:26 +0000
Manifest this update:     Sun 12 May 2024 22:04:25 +0000
Manifest next update:     Sun 19 May 2024 22:04:25 +0000
Files and hashes:         1: 4PLqY0OvRNmepEKWs5EP2oNlKXM.crl (hash: 543UVG5QD7ZypCo0c5LcPbRhg87d8gXSno05Ip3Dpq8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1984 (0x7c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155CA4/serialNumber=E0F2EA6343AF44D99EA44296B3910FDA83652973
        Validity
            Not Before: May 12 22:04:25 2024 GMT
            Not After : May 19 22:04:25 2024 GMT
        Subject: CN=66413ce9-272d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:c8:39:ba:47:33:8b:93:de:e7:7f:d5:10:
                    ad:1f:75:cc:32:25:04:93:32:f1:99:90:9e:5b:cc:
                    4a:64:c0:5a:6f:37:c1:3a:73:9d:b2:5d:06:ce:e5:
                    e1:7e:7b:1c:4a:13:4d:4b:bb:96:46:27:1c:19:aa:
                    04:e6:9d:92:96:04:84:ed:46:8e:0f:0a:e3:3a:1e:
                    b7:42:48:19:2e:a6:e2:32:19:8c:70:08:7d:21:4d:
                    d6:6a:cd:c0:96:2c:aa:67:cf:82:4d:17:a6:fa:61:
                    c5:c9:3b:46:4f:2d:ef:64:93:04:00:6d:aa:ec:f1:
                    28:5a:0c:05:e1:19:87:be:76:78:33:14:df:a2:f2:
                    ec:bf:08:1b:13:ea:8a:ff:f0:55:b7:a9:93:77:22:
                    75:31:86:9a:b2:f7:25:16:b1:87:e7:d0:20:49:18:
                    50:22:2c:06:7c:85:fe:a1:eb:b0:b3:84:36:96:bf:
                    20:1f:ec:0c:ed:9e:df:c5:41:f7:1b:70:5b:0b:c9:
                    e5:d1:1e:f2:cd:8d:5c:87:00:7c:de:7d:91:c2:9d:
                    5a:83:44:30:36:c6:57:47:40:21:ab:d5:0e:34:71:
                    28:af:75:34:7b:fa:1e:c6:cb:ce:f7:82:a2:fb:58:
                    7e:9c:60:1a:8b:1f:11:2b:43:3b:89:26:c2:c0:20:
                    4d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6D:77:F6:4B:04:BE:AA:97:B0:B6:FF:12:E2:F8:B2:7F:DF:F9:8C
            X509v3 Authority Key Identifier:
                keyid:E0:F2:EA:63:43:AF:44:D9:9E:A4:42:96:B3:91:0F:DA:83:65:29:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155CA4/7B2578D8C1A111EA94735C31C4F9AE02/4PLqY0OvRNmepEKWs5EP2oNlKXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PLqY0OvRNmepEKWs5EP2oNlKXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155CA4/7B2578D8C1A111EA94735C31C4F9AE02/4PLqY0OvRNmepEKWs5EP2oNlKXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:57:58:1f:b6:ac:16:e8:29:cb:b1:c6:d1:5e:8e:00:10:6f:
         13:d7:3c:fe:82:f0:64:b7:07:35:d8:84:37:0a:cf:1e:46:5f:
         0a:36:13:4c:79:bf:7c:b2:55:20:c9:c4:01:ae:73:79:bc:5d:
         d8:93:ed:a7:52:82:e9:ee:44:ce:bd:57:ce:01:9c:25:8a:8e:
         b8:e1:77:12:4e:c4:b9:5c:e7:35:eb:6b:32:65:c9:d0:76:84:
         e7:2c:c6:5b:75:50:f4:c7:32:4f:fd:14:57:05:8a:38:df:bd:
         8f:74:7f:8a:20:5b:d8:b4:52:4f:15:64:ac:d4:de:01:ea:7b:
         30:a3:9e:1a:b5:d1:53:bd:1e:07:f0:7c:d9:65:ff:e2:d8:5c:
         cf:1f:10:c1:09:31:d4:54:2c:b6:1b:5b:97:e0:e7:ac:96:f3:
         87:1c:ee:56:42:63:ce:6b:68:5d:b3:9d:67:5a:a0:cc:0d:09:
         58:5e:ca:76:b4:68:b1:6b:22:bd:7a:85:65:4f:37:34:b3:c1:
         da:6d:1d:04:74:93:65:15:ea:41:d2:54:84:3e:df:ed:a2:03:
         66:6d:0b:61:f7:95:05:13:cc:a9:b1:00:94:87:ae:f8:92:cb:
         7f:f4:4c:ab:24:7b:bf:69:df:1d:2e:0d:fe:66:97:8c:2d:e0:
         93:90:4e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----