Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166261/6ADE1930CD2511E2B550BECD7E676211/TichBtT-H2-FQk_eJwqx2im6Ha4.mft
File:                     TichBtT-H2-FQk_eJwqx2im6Ha4.mft (raw, json)
Hash identifier:          im+TjldWNoVNEc905wKjQiCGNqCGwPOX/tedpLeJZck=
Subject key identifier:   BF:34:C8:18:EB:61:E9:DB:5F:27:0C:5B:06:E3:61:44:18:3F:C9:7D
Authority key identifier: 4E:27:21:06:D4:FE:1F:6F:85:42:4F:DE:27:0A:B1:DA:29:BA:1D:AE
Certificate issuer:       /CN=A9166261/serialNumber=4E272106D4FE1F6F85424FDE270AB1DA29BA1DAE
Certificate serial:       305D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TichBtT-H2-FQk_eJwqx2im6Ha4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166261/6ADE1930CD2511E2B550BECD7E676211/TichBtT-H2-FQk_eJwqx2im6Ha4.mft
Manifest number:          304D
Signing time:             Wed 24 Apr 2024 15:43:46 +0000
Manifest this update:     Wed 24 Apr 2024 15:43:46 +0000
Manifest next update:     Wed 01 May 2024 15:43:46 +0000
Files and hashes:         1: TichBtT-H2-FQk_eJwqx2im6Ha4.crl (hash: sq54HDAvIAXRC1yCPulu0CwpaKdQElgREd8LeZXKW3I=)
                          2: F7BF6A5AB13B11E5B2D80087C4F9AE02.roa (hash: PJ3woOICYo9SOfsBYq2mVEPdf08CFCuXqfW+sxB9Lnk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12381 (0x305d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166261/serialNumber=4E272106D4FE1F6F85424FDE270AB1DA29BA1DAE
        Validity
            Not Before: Apr 24 15:43:46 2024 GMT
            Not After : May  1 15:43:46 2024 GMT
        Subject: CN=662928b2-6fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:a5:ed:84:36:1d:44:b1:e4:1b:92:c3:bf:
                    a1:2e:58:83:ca:33:05:fb:60:5a:94:d3:16:2e:ea:
                    18:32:28:2d:86:ff:60:45:df:32:a1:78:2c:bd:46:
                    97:2b:db:f4:50:58:75:e9:15:36:98:21:9a:bc:6d:
                    42:ce:ad:5c:0b:96:d4:e3:0c:35:66:9a:81:09:bf:
                    d8:33:a4:76:ea:db:52:88:32:ae:6d:1c:34:27:ce:
                    52:ff:47:b0:6e:94:f1:1f:d0:76:ac:ce:35:7a:40:
                    8e:93:34:bb:80:7b:e9:5a:cc:1d:ec:ac:f6:44:b1:
                    37:e9:cb:f8:c0:88:98:21:82:6e:0c:9c:ff:d8:6f:
                    4b:f5:9b:33:65:03:ea:0f:d3:00:48:46:2e:53:e6:
                    05:1d:3d:18:d2:01:94:fa:4a:cd:0e:a6:6f:3d:ea:
                    b9:1c:91:17:3e:1a:f4:3f:74:a5:c0:74:f5:42:4d:
                    2a:74:2a:d5:09:dd:30:4d:b8:0e:63:91:10:5f:c7:
                    c3:15:e8:c0:c7:ff:b9:4b:46:29:c8:31:c8:77:4e:
                    27:03:bd:2a:1f:85:ee:a2:30:1b:83:f8:50:83:f3:
                    1e:3b:a7:c7:0c:72:15:e5:a1:3c:cb:7d:ee:53:f6:
                    3d:76:81:cc:08:79:da:e9:1e:b7:be:ef:5b:ec:02:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:34:C8:18:EB:61:E9:DB:5F:27:0C:5B:06:E3:61:44:18:3F:C9:7D
            X509v3 Authority Key Identifier:
                keyid:4E:27:21:06:D4:FE:1F:6F:85:42:4F:DE:27:0A:B1:DA:29:BA:1D:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166261/6ADE1930CD2511E2B550BECD7E676211/TichBtT-H2-FQk_eJwqx2im6Ha4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TichBtT-H2-FQk_eJwqx2im6Ha4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166261/6ADE1930CD2511E2B550BECD7E676211/TichBtT-H2-FQk_eJwqx2im6Ha4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1d:e4:af:45:8f:4d:70:a6:01:1f:ae:ac:e8:1a:0b:82:a6:
         f4:6a:0a:38:38:da:2d:33:21:c0:7b:2d:36:1f:77:46:ef:da:
         81:74:63:aa:ab:f2:fd:5b:3a:e9:9a:bf:98:4e:46:b4:d7:31:
         77:83:2b:bb:6f:cc:db:6d:e5:92:b0:d4:62:24:69:1d:b8:d7:
         f0:dc:ee:3d:b1:3c:ac:36:8b:d9:f8:40:a4:e2:3f:ab:af:4a:
         7c:7e:17:c8:5e:6d:60:f4:98:8c:8d:09:8d:ee:1b:10:2f:4a:
         48:05:63:d5:73:1e:ba:07:d9:1b:d4:7f:8a:c0:13:05:b8:d3:
         2d:e3:52:42:6c:3a:cb:34:63:7c:7b:67:b3:32:95:ce:c5:14:
         06:04:b2:4a:9c:e8:69:52:6c:c0:76:79:21:2a:b3:bc:5b:05:
         f2:80:1e:81:82:ea:6b:6a:ff:36:c8:45:0d:11:fe:f7:19:64:
         f0:6a:24:e7:6d:3e:d2:77:59:1b:0d:01:ed:c3:01:e1:35:00:
         a4:c5:f2:a1:73:a0:36:81:39:3a:47:bf:ca:5f:f8:e8:96:6b:
         cf:55:1a:8a:2c:9b:2e:1c:05:e8:af:f2:ce:b9:5c:c2:5e:04:
         39:2a:36:31:c2:a4:19:19:eb:b5:d7:01:8e:30:80:26:94:1e:
         a6:4d:eb:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICMF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYyNjExMTAvBgNVBAUTKDRFMjcyMTA2RDRGRTFGNkY4NTQyNEZERTI3MEFCMURB
MjlCQTFEQUUwHhcNMjQwNDI0MTU0MzQ2WhcNMjQwNTAxMTU0MzQ2WjAYMRYwFAYD
VQQDEw02NjI5MjhiMi02ZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm5il7YQ2HUSx5BuSw7+hLliDyjMF+2BalNMWLuoYMigthv9gRd8yoXgsvUaX
K9v0UFh16RU2mCGavG1Czq1cC5bU4ww1ZpqBCb/YM6R26ttSiDKubRw0J85S/0ew
bpTxH9B2rM41ekCOkzS7gHvpWswd7Kz2RLE36cv4wIiYIYJuDJz/2G9L9ZszZQPq
D9MASEYuU+YFHT0Y0gGU+krNDqZvPeq5HJEXPhr0P3SlwHT1Qk0qdCrVCd0wTbgO
Y5EQX8fDFejAx/+5S0YpyDHId04nA70qH4XuojAbg/hQg/MeO6fHDHIV5aE8y33u
U/Y9doHMCHna6R63vu9b7AIa/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL80yBjr
YenbXycMWwbjYUQYP8l9MB8GA1UdIwQYMBaAFE4nIQbU/h9vhUJP3icKsdopuh2u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjI2MS82QURFMTkzMENE
MjUxMUUyQjU1MEJFQ0Q3RTY3NjIxMS9UaWNoQnRULUgyLUZRa19lSndxeDJpbTZI
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RpY2hCdFQtSDItRlFrX2VKd3F4MmltNkhhNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NjI2MS82QURFMTkzMENEMjUxMUUyQjU1MEJFQ0Q3RTY3NjIxMS9UaWNoQnRULUgy
LUZRa19lSndxeDJpbTZIYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsHeSvRY9NcKYBH66s6BoLgqb0ago4ONotMyHAey02H3dG79qBdGOq
q/L9Wzrpmr+YTka01zF3gyu7b8zbbeWSsNRiJGkduNfw3O49sTysNovZ+ECk4j+r
r0p8fhfIXm1g9JiMjQmN7hsQL0pIBWPVcx66B9kb1H+KwBMFuNMt41JCbDrLNGN8
e2ezMpXOxRQGBLJKnOhpUmzAdnkhKrO8WwXygB6Bguprav82yEUNEf73GWTwaiTn
bT7Sd1kbDQHtwwHhNQCkxfKhc6A2gTk6R7/KX/jolmvPVRqKLJsuHAXor/LOuVzC
XgQ5KjYxwqQZGeu11wGOMIAmlB6mTetL
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org