Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C10F/049747B8EFC111ED8982B716C4F9AE02/00ZZw5IYoS-oynmdnK3ASSSQWaI.mft
File:                     00ZZw5IYoS-oynmdnK3ASSSQWaI.mft (raw, json)
Hash identifier:          DUWatwV+yiURiJOPOs+fC4wP+V7rv03zXEaHHis2Ass=
Subject key identifier:   D1:90:87:C5:5F:70:36:92:DC:02:FC:EC:34:23:15:08:41:5B:2D:7F
Authority key identifier: D3:46:59:C3:92:18:A1:2F:A8:CA:79:9D:9C:AD:C0:49:24:90:59:A2
Certificate issuer:       /CN=A916C10F/serialNumber=D34659C39218A12FA8CA799D9CADC049249059A2
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/00ZZw5IYoS-oynmdnK3ASSSQWaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C10F/049747B8EFC111ED8982B716C4F9AE02/00ZZw5IYoS-oynmdnK3ASSSQWaI.mft
Manifest number:          AF
Signing time:             Tue 09 Apr 2024 06:14:54 +0000
Manifest this update:     Tue 09 Apr 2024 06:14:53 +0000
Manifest next update:     Tue 16 Apr 2024 06:14:53 +0000
Files and hashes:         1: 00ZZw5IYoS-oynmdnK3ASSSQWaI.crl (hash: 7hMRpkEgtwsO+iww/TIugpBbfXZOsZJdcsqdp5kHn8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C10F/serialNumber=D34659C39218A12FA8CA799D9CADC049249059A2
        Validity
            Not Before: Apr  9 06:14:53 2024 GMT
            Not After : Apr 16 06:14:53 2024 GMT
        Subject: CN=6614dcdd-6a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:05:70:05:eb:bd:3e:ed:30:71:93:de:18:
                    a1:23:a2:a1:b1:e6:00:1a:ac:7d:62:e0:bb:50:48:
                    c4:bf:2e:5f:4a:77:1d:7a:71:5e:49:c9:71:b6:ad:
                    78:e7:a2:16:87:0a:cc:ce:9b:05:8e:bc:12:22:8c:
                    ed:c0:62:6d:40:e1:6f:1e:f4:a6:b2:11:a5:c0:ce:
                    b2:73:91:e5:d9:cd:af:d4:d3:82:da:93:54:6d:a1:
                    3f:d9:d8:a9:0d:52:20:ce:1e:4e:52:05:9e:3d:d9:
                    81:2a:c9:e6:7d:1c:e7:95:93:ac:1c:01:9d:af:aa:
                    26:f6:03:b4:c4:e4:bf:25:5e:ae:ce:72:80:51:2c:
                    b6:7f:47:c0:b1:b3:93:28:48:06:cf:c4:28:d5:13:
                    52:51:c7:d0:a5:22:24:ec:e9:b6:59:a5:86:fb:0a:
                    38:cd:52:38:a6:ba:25:90:9d:43:f6:aa:2b:ff:de:
                    d9:df:2e:d3:b2:6c:8e:5e:31:df:1b:c5:65:2c:5b:
                    a0:12:cf:53:6c:eb:6a:eb:21:85:0e:38:04:7f:f1:
                    39:26:97:fb:5c:0a:73:ae:b2:a1:f1:f2:87:68:05:
                    e0:55:7d:6d:14:ec:f6:0b:06:ad:40:13:60:73:e6:
                    e9:ab:85:89:36:67:40:29:97:09:bf:a8:6f:0b:11:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:90:87:C5:5F:70:36:92:DC:02:FC:EC:34:23:15:08:41:5B:2D:7F
            X509v3 Authority Key Identifier:
                keyid:D3:46:59:C3:92:18:A1:2F:A8:CA:79:9D:9C:AD:C0:49:24:90:59:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C10F/049747B8EFC111ED8982B716C4F9AE02/00ZZw5IYoS-oynmdnK3ASSSQWaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/00ZZw5IYoS-oynmdnK3ASSSQWaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C10F/049747B8EFC111ED8982B716C4F9AE02/00ZZw5IYoS-oynmdnK3ASSSQWaI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ed:23:5e:d7:64:41:13:15:23:99:dc:b9:e1:c3:c2:35:56:
         77:3f:21:bf:a4:9c:83:07:fc:19:b4:2e:c1:78:cf:59:0f:60:
         d2:78:23:36:73:ce:a1:08:27:80:44:e0:a9:d3:4c:25:e4:60:
         55:29:2c:cc:c0:30:7d:a7:a3:f2:b6:99:c1:3b:eb:a6:7b:bd:
         aa:85:ad:b9:3e:5f:68:e5:20:9b:ef:2a:ca:cd:be:6c:5c:03:
         61:f0:02:5c:4a:d1:67:c4:21:6a:f8:4f:0f:8d:af:ca:67:12:
         89:c9:a5:d7:94:36:95:87:20:05:82:d4:7a:3a:b2:50:a6:ab:
         51:6e:ec:37:3b:ea:d6:5b:56:e5:c7:cd:53:5a:2e:96:2c:62:
         59:c4:26:5b:5e:f2:17:a6:37:1d:84:89:d9:8d:08:bb:d0:88:
         e4:d7:77:0c:82:30:38:fe:dd:49:ee:07:14:71:42:db:e5:96:
         82:08:4b:8e:fc:af:ca:b0:15:2b:ae:2c:23:99:4f:d7:1c:43:
         56:81:ec:a9:f7:91:71:be:40:b9:eb:fd:dd:70:15:ff:3e:67:
         51:26:48:21:b8:41:6f:5d:80:8f:78:89:79:79:c7:27:75:5f:
         1a:ac:50:da:b5:98:59:30:b1:b3:3f:bd:75:dc:55:c5:cd:41:
         4a:18:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----