Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B5D/923079DE629811ED834FB528C4F9AE02/LHutYvqxCWb89CjdNre6j1Kqpc8.mft
File:                     LHutYvqxCWb89CjdNre6j1Kqpc8.mft (raw, json)
Hash identifier:          uuJ3OsKvCUFGDaxl+1xdmuQp4OwmIYBCSxJos9FO94k=
Subject key identifier:   24:0E:02:14:79:63:9F:6F:CF:34:60:E6:33:82:0B:57:F8:51:BE:D7
Authority key identifier: 2C:7B:AD:62:FA:B1:09:66:FC:F4:28:DD:36:B7:BA:8F:52:AA:A5:CF
Certificate issuer:       /CN=A9161B5D/serialNumber=2C7BAD62FAB10966FCF428DD36B7BA8F52AAA5CF
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHutYvqxCWb89CjdNre6j1Kqpc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161B5D/923079DE629811ED834FB528C4F9AE02/LHutYvqxCWb89CjdNre6j1Kqpc8.mft
Manifest number:          F9
Signing time:             Tue 20 Feb 2024 04:16:20 +0000
Manifest this update:     Tue 20 Feb 2024 04:16:19 +0000
Manifest next update:     Tue 27 Feb 2024 04:16:19 +0000
Files and hashes:         1: LHutYvqxCWb89CjdNre6j1Kqpc8.crl (hash: EObO5rtMFf6ZNaatqYBdlMK9WaEQNBU/1LBjsZQLl2E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161B5D/serialNumber=2C7BAD62FAB10966FCF428DD36B7BA8F52AAA5CF
        Validity
            Not Before: Feb 20 04:16:19 2024 GMT
            Not After : Feb 27 04:16:19 2024 GMT
        Subject: CN=65d42794-cc53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:6f:2b:74:5d:b0:b8:b0:61:68:10:b7:0e:
                    d1:8c:98:9a:99:62:1c:37:97:7a:34:fc:b4:7f:cd:
                    d1:d9:4a:85:ea:f6:df:ae:52:92:44:91:fe:de:4e:
                    f0:18:54:0e:47:c4:43:90:18:d8:8d:11:2c:9b:24:
                    ae:30:3f:84:02:4f:df:17:a9:d2:93:89:e7:53:57:
                    2f:12:c1:19:cc:9f:4f:c6:b9:81:9b:bd:8a:87:5c:
                    d1:65:94:b0:c8:7c:de:cc:ef:d5:cc:08:18:b7:c8:
                    d8:ac:0d:b1:d5:3f:b8:1b:47:db:6e:fd:47:6e:18:
                    e9:6b:fe:c0:17:59:00:27:bf:79:3f:9c:6b:d7:73:
                    b4:86:d4:74:33:53:b5:8a:2e:12:59:4b:26:bd:1e:
                    97:88:0e:21:f5:6e:ab:12:8c:73:ce:62:f7:b3:01:
                    7b:80:93:7f:b1:28:11:10:14:a5:cd:8b:af:29:27:
                    7f:ac:ae:34:2a:56:a5:4b:d8:7f:cd:ca:ad:9c:0b:
                    54:67:2d:26:e6:5c:5b:db:13:8a:74:dc:90:4c:e0:
                    5f:9e:5a:46:a2:42:d8:de:84:24:02:3f:dc:f7:94:
                    26:01:0b:cf:c7:19:0c:04:e8:21:01:d8:c1:57:1d:
                    f3:40:e0:28:5e:fe:8a:33:e8:df:7e:77:56:84:5e:
                    54:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0E:02:14:79:63:9F:6F:CF:34:60:E6:33:82:0B:57:F8:51:BE:D7
            X509v3 Authority Key Identifier:
                keyid:2C:7B:AD:62:FA:B1:09:66:FC:F4:28:DD:36:B7:BA:8F:52:AA:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161B5D/923079DE629811ED834FB528C4F9AE02/LHutYvqxCWb89CjdNre6j1Kqpc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHutYvqxCWb89CjdNre6j1Kqpc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B5D/923079DE629811ED834FB528C4F9AE02/LHutYvqxCWb89CjdNre6j1Kqpc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3a:ca:21:31:fa:bc:4b:45:15:07:03:86:af:c8:81:e0:aa:
         3a:7b:62:a9:87:47:ea:66:dc:dd:a7:fa:e1:9a:0d:4b:d7:72:
         1d:12:75:41:e9:28:40:be:0b:b2:a7:74:9f:0b:77:5c:67:03:
         ac:1f:e0:60:76:8c:25:dd:0c:88:30:84:b1:5d:cc:cf:c4:4c:
         87:16:af:c4:ab:42:09:ff:ca:5b:f2:f0:44:b1:58:da:f5:f9:
         d9:c7:2a:c7:c3:4b:96:c5:fe:66:d8:d4:83:b8:97:9a:54:de:
         5d:10:8a:00:a6:ff:c2:a2:bc:eb:dc:55:c6:da:6c:7c:6a:9e:
         0c:83:15:8e:e9:1f:c2:ce:98:16:fc:46:29:8b:56:99:82:56:
         41:31:19:02:69:5e:b9:91:df:8d:3e:b7:c3:62:ee:0e:d8:38:
         09:5e:8f:cb:ae:bf:96:8f:5b:28:c0:79:54:07:85:6e:76:e4:
         4e:47:2f:2b:52:84:66:6b:c9:c5:3f:88:b8:65:f7:a6:56:42:
         a0:6d:3d:91:e5:6b:b9:81:64:b4:1b:9a:c0:6d:e0:3f:65:f0:
         e7:2e:76:f8:2d:94:13:86:0b:64:2c:d1:d6:59:c8:56:84:76:
         b4:86:8b:1d:17:1e:04:f5:1b:0d:e7:53:4b:a3:39:7f:bc:05:
         58:33:35:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----