Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167200/E62983D28D8311EB8D8BD60BC4F9AE02/_ggaScBVppx6-cRZchPph0qOouo.mft
File:                     _ggaScBVppx6-cRZchPph0qOouo.mft (raw, json)
Hash identifier:          V89+Wqd3G33DZGWhMhXlxhM4wg71IfJ5c4wkZeoYBl8=
Subject key identifier:   E4:86:97:D1:9F:55:15:BA:10:17:F2:03:32:5E:1B:21:40:FE:84:A1
Authority key identifier: FE:08:1A:49:C0:55:A6:9C:7A:F9:C4:59:72:13:E9:87:4A:8E:A2:EA
Certificate issuer:       /CN=A9167200/serialNumber=FE081A49C055A69C7AF9C4597213E9874A8EA2EA
Certificate serial:       047A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ggaScBVppx6-cRZchPph0qOouo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167200/E62983D28D8311EB8D8BD60BC4F9AE02/_ggaScBVppx6-cRZchPph0qOouo.mft
Manifest number:          0478
Signing time:             Tue 29 Nov 2022 05:41:57 +0000
Manifest this update:     Tue 29 Nov 2022 05:41:56 +0000
Manifest next update:     Tue 06 Dec 2022 05:41:56 +0000
Files and hashes:         1: _ggaScBVppx6-cRZchPph0qOouo.crl (hash: oZr+RADWNUvmwF6kaU8FjVDry+rjkN37wC5eJVF3xpQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146 (0x47a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167200/serialNumber=FE081A49C055A69C7AF9C4597213E9874A8EA2EA
        Validity
            Not Before: Nov 29 05:41:56 2022 GMT
            Not After : Dec  6 05:41:56 2022 GMT
        Subject: CN=63859ba5-27c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:21:62:a8:9e:0a:85:d4:77:e9:ef:8b:9f:08:
                    0c:d5:ac:12:ed:3c:58:e9:ce:4f:60:de:d5:10:30:
                    6c:ce:62:58:ca:d6:a4:d1:05:55:b5:90:19:cb:f1:
                    1b:94:65:33:ad:60:32:27:ea:41:7a:2d:03:d2:67:
                    6d:97:b1:bf:a3:b9:56:0b:30:1c:a8:b1:df:f1:09:
                    fb:88:86:a6:5e:31:af:43:75:43:17:76:fe:af:b2:
                    45:49:82:8b:b5:55:c3:82:2d:2d:d9:68:73:78:5f:
                    12:6f:e4:80:59:a0:a9:b1:5d:00:f3:41:a0:d7:77:
                    61:3e:40:a8:a1:dc:b7:69:2a:12:f5:4a:18:35:ce:
                    f6:72:5f:19:cf:61:0f:bd:4b:54:63:5c:03:90:bd:
                    c8:b8:c3:89:2f:26:8f:b6:96:f0:af:19:51:b0:ce:
                    44:7e:51:58:ae:5c:87:6d:6d:d6:98:5d:19:cc:17:
                    4a:53:1e:28:eb:05:88:73:45:a4:8b:04:c6:cc:9b:
                    a0:59:31:1e:21:c8:3a:89:7a:ea:d8:49:fb:15:d6:
                    a1:c6:2a:b4:0c:e8:9f:8b:51:37:77:38:d2:91:b1:
                    33:91:28:71:85:85:58:8a:ee:ef:fd:95:f5:25:34:
                    2e:15:07:20:06:6f:1b:41:40:f2:fa:88:71:c6:0f:
                    7a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:86:97:D1:9F:55:15:BA:10:17:F2:03:32:5E:1B:21:40:FE:84:A1
            X509v3 Authority Key Identifier:
                keyid:FE:08:1A:49:C0:55:A6:9C:7A:F9:C4:59:72:13:E9:87:4A:8E:A2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167200/E62983D28D8311EB8D8BD60BC4F9AE02/_ggaScBVppx6-cRZchPph0qOouo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ggaScBVppx6-cRZchPph0qOouo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167200/E62983D28D8311EB8D8BD60BC4F9AE02/_ggaScBVppx6-cRZchPph0qOouo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c5:6f:4a:a0:24:af:f8:90:88:f7:cf:33:1a:92:08:f9:90:
         56:1d:1b:1c:0f:92:5f:6d:86:0a:49:4d:95:ea:a9:17:16:d2:
         7f:42:c5:07:08:4a:f7:4e:2d:f4:67:6f:f6:59:3f:dd:11:81:
         8c:97:30:ae:b0:42:03:8a:0d:75:be:bd:32:00:46:56:f2:5a:
         ae:e1:52:27:cb:51:63:d8:b9:ac:d3:5d:84:3e:bd:2c:df:67:
         01:ae:ed:d3:be:33:af:f5:3a:a2:9e:d9:92:d5:6f:56:d9:7d:
         28:31:4e:32:9c:e7:d5:b0:a5:d9:04:e1:bc:42:c6:85:6d:f0:
         21:5b:1a:66:cb:13:d1:b5:51:bb:3c:3a:c2:89:e3:7e:b5:d6:
         09:7d:54:b4:ee:b4:55:ca:23:61:66:c2:46:93:94:47:b3:a3:
         ba:43:03:54:e3:d3:26:a7:69:82:b4:cc:c4:49:45:6b:77:10:
         cc:98:42:c0:fa:19:4d:56:e7:46:00:25:bb:31:71:34:bc:98:
         1b:0f:f2:e7:ba:f5:16:cd:46:d1:d0:a8:1f:81:66:f7:5d:a4:
         f2:66:e2:e4:94:44:39:14:84:06:79:6e:d0:98:02:e2:39:cd:
         4d:a9:56:8f:75:df:d0:5e:e9:2e:42:75:69:93:bb:96:c2:fd:
         46:2d:77:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcyMDAxMTAvBgNVBAUTKEZFMDgxQTQ5QzA1NUE2OUM3QUY5QzQ1OTcyMTNFOTg3
NEE4RUEyRUEwHhcNMjIxMTI5MDU0MTU2WhcNMjIxMjA2MDU0MTU2WjAYMRYwFAYD
VQQDEw02Mzg1OWJhNS0yN2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkyFiqJ4KhdR36e+LnwgM1awS7TxY6c5PYN7VEDBszmJYytak0QVVtZAZy/Eb
lGUzrWAyJ+pBei0D0mdtl7G/o7lWCzAcqLHf8Qn7iIamXjGvQ3VDF3b+r7JFSYKL
tVXDgi0t2WhzeF8Sb+SAWaCpsV0A80Gg13dhPkCoody3aSoS9UoYNc72cl8Zz2EP
vUtUY1wDkL3IuMOJLyaPtpbwrxlRsM5EflFYrlyHbW3WmF0ZzBdKUx4o6wWIc0Wk
iwTGzJugWTEeIcg6iXrq2En7Fdahxiq0DOifi1E3dzjSkbEzkShxhYVYiu7v/ZX1
JTQuFQcgBm8bQUDy+ohxxg96TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSGl9Gf
VRW6EBfyAzJeGyFA/oShMB8GA1UdIwQYMBaAFP4IGknAVaacevnEWXIT6YdKjqLq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzIwMC9FNjI5ODNEMjhE
ODMxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9fZ2dhU2NCVnBweDYtY1JaY2hQcGgwcU9v
dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19nZ2FTY0JWcHB4Ni1jUlpjaFBwaDBxT291by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzIwMC9FNjI5ODNEMjhEODMxMUVCOEQ4QkQ2MEJDNEY5QUUwMi9fZ2dhU2NCVnBw
eDYtY1JaY2hQcGgwcU9vdW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsxW9KoCSv+JCI988zGpII+ZBWHRscD5JfbYYKSU2V6qkXFtJ/QsUH
CEr3Ti30Z2/2WT/dEYGMlzCusEIDig11vr0yAEZW8lqu4VIny1Fj2Lms012EPr0s
32cBru3TvjOv9TqintmS1W9W2X0oMU4ynOfVsKXZBOG8QsaFbfAhWxpmyxPRtVG7
PDrCieN+tdYJfVS07rRVyiNhZsJGk5RHs6O6QwNU49Mmp2mCtMzESUVrdxDMmELA
+hlNVudGACW7MXE0vJgbD/LnuvUWzUbR0KgfgWb3XaTyZuLklEQ5FIQGeW7QmALi
Oc1NqVaPdd/QXukuQnVpk7uWwv1GLXci
-----END CERTIFICATE-----