Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.mft
File:                     TkRTsrZqhpWgPuo6m-H4WpIaLQk.mft (raw, json)
Hash identifier:          fVd2xHNk4cUbYzVyOlElCTj6AcG7dDVuOYumd+zZoXE=
Subject key identifier:   CA:E9:90:0B:9E:F6:00:F2:49:A7:A0:73:9A:1A:0F:7B:2F:25:51:88
Authority key identifier: 4E:44:53:B2:B6:6A:86:95:A0:3E:EA:3A:9B:E1:F8:5A:92:1A:2D:09
Certificate issuer:       /CN=A9167CAE/serialNumber=4E4453B2B66A8695A03EEA3A9BE1F85A921A2D09
Certificate serial:       034A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRTsrZqhpWgPuo6m-H4WpIaLQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.mft
Manifest number:          0344
Signing time:             Thu 24 Oct 2024 01:19:57 +0000
Manifest this update:     Thu 24 Oct 2024 01:19:56 +0000
Manifest next update:     Thu 31 Oct 2024 01:19:56 +0000
Files and hashes:         1: TkRTsrZqhpWgPuo6m-H4WpIaLQk.crl (hash: LAbsPpCltm1WKPA4HopT3ti9eiLAc1q27e6p1VqWje4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842 (0x34a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167CAE/serialNumber=4E4453B2B66A8695A03EEA3A9BE1F85A921A2D09
        Validity
            Not Before: Oct 24 01:19:56 2024 GMT
            Not After : Oct 31 01:19:56 2024 GMT
        Subject: CN=6719a0bd-f519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:df:4e:94:b7:64:1b:3a:c6:e3:0d:de:2b:bc:
                    2f:99:ca:92:c9:ad:3d:c6:c9:5b:60:ba:63:3d:0c:
                    9b:5d:0f:f1:f3:1f:65:b0:44:3a:4f:dd:f3:18:c1:
                    d3:86:5e:2c:88:6c:da:22:9d:3e:f3:64:16:cf:42:
                    ac:9a:6b:85:12:27:40:03:31:ac:97:b4:b6:2f:67:
                    8d:97:bc:12:25:21:f8:ee:f4:49:38:39:2d:35:c1:
                    c2:8c:80:ef:77:09:0a:af:25:dd:d4:2e:ef:1f:8a:
                    ba:4e:cf:71:b2:17:73:a2:18:7b:d7:c1:ad:75:db:
                    4c:57:8d:2a:d4:db:2b:e8:23:96:7f:64:b2:14:5f:
                    78:ff:cc:c3:e9:43:66:8e:69:ba:ee:10:e7:b2:d5:
                    d0:c3:38:2a:01:e8:e7:ce:7d:84:4a:07:cb:2c:a2:
                    e8:a4:42:bb:e0:c0:44:6d:f7:8b:0a:c1:f6:3e:dd:
                    6d:71:db:4f:0f:a1:3b:66:60:19:fb:a4:3b:a1:f8:
                    d6:f1:f9:a7:56:4b:e1:94:29:cd:c5:d7:db:52:37:
                    68:3a:51:e0:34:bd:ca:a7:a7:88:64:36:a6:a4:cb:
                    cb:5a:97:49:fd:31:9d:92:87:f2:f1:f4:ec:d1:9b:
                    ab:e2:af:be:93:c8:2d:df:b9:c5:ab:4b:b5:ba:fb:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E9:90:0B:9E:F6:00:F2:49:A7:A0:73:9A:1A:0F:7B:2F:25:51:88
            X509v3 Authority Key Identifier:
                keyid:4E:44:53:B2:B6:6A:86:95:A0:3E:EA:3A:9B:E1:F8:5A:92:1A:2D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TkRTsrZqhpWgPuo6m-H4WpIaLQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CAE/057A25EE953411EC90E97755C4F9AE02/TkRTsrZqhpWgPuo6m-H4WpIaLQk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a1:77:e2:48:9b:fc:f0:93:e9:07:30:77:e5:c3:d3:e8:db:
         cc:49:dd:58:4a:33:26:d0:fd:77:40:19:64:b9:7f:d4:cf:73:
         86:cb:00:06:7d:34:8c:79:8a:11:31:85:5a:40:49:0b:a2:95:
         a3:2b:13:6a:74:7d:97:f0:88:8d:36:1e:35:8f:52:dd:5f:aa:
         3a:34:b7:e3:19:8a:bc:7e:b4:ee:ca:7c:11:fb:5c:81:71:59:
         fa:61:d9:5d:10:56:1f:ab:fc:93:9b:a4:66:ea:6b:59:d7:04:
         e6:62:70:31:d0:02:5a:f5:ed:42:85:a3:85:44:c9:33:8d:9a:
         2e:fb:73:7f:43:4b:c2:58:05:6a:27:e7:2a:fe:07:e8:b7:d1:
         c2:b5:59:65:69:d0:74:95:ff:da:7c:4e:d4:97:04:91:f6:aa:
         2a:cf:2c:cc:56:29:c9:f2:69:60:8e:9d:1f:7e:11:03:0c:a8:
         0c:d7:59:99:16:fd:ca:05:30:35:c6:d2:25:1c:94:92:a6:c0:
         68:63:c7:5a:1a:33:a1:b2:9e:37:fb:ee:ef:14:19:72:29:d4:
         e6:63:4a:46:db:92:1f:96:02:7a:b1:5e:e7:22:5d:79:e5:72:
         00:9b:76:d5:0d:2a:54:7f:5b:a7:90:51:6f:16:64:3a:bd:f5:
         07:a3:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----