Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.mft
File:                     VKPgwj06DM7GesLqh4PlREixngU.mft (raw, json)
Hash identifier:          vgNUlZTGw02xsR35ftRIhTAeU7N3SEJs6lQwEdlez64=
Subject key identifier:   BF:1A:BA:80:E8:02:10:0B:E7:91:71:B0:70:F7:2C:59:0F:E3:7A:9B
Authority key identifier: 54:A3:E0:C2:3D:3A:0C:CE:C6:7A:C2:EA:87:83:E5:44:48:B1:9E:05
Certificate issuer:       /CN=A916CAE6/serialNumber=54A3E0C23D3A0CCEC67AC2EA8783E54448B19E05
Certificate serial:       08D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKPgwj06DM7GesLqh4PlREixngU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.mft
Manifest number:          08CC
Signing time:             Tue 23 Jul 2024 23:08:55 +0000
Manifest this update:     Tue 23 Jul 2024 23:08:54 +0000
Manifest next update:     Tue 30 Jul 2024 23:08:54 +0000
Files and hashes:         1: VKPgwj06DM7GesLqh4PlREixngU.crl (hash: eng0FZvRyO2mMBSHwz3ezcjbxoFxdUd3v/dvqEwrigQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2260 (0x8d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CAE6/serialNumber=54A3E0C23D3A0CCEC67AC2EA8783E54448B19E05
        Validity
            Not Before: Jul 23 23:08:54 2024 GMT
            Not After : Jul 30 23:08:54 2024 GMT
        Subject: CN=66a03807-21ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:39:64:ea:eb:3d:7e:08:45:9a:e8:08:be:09:
                    fd:fd:3b:b0:17:5c:e2:1f:36:6e:11:67:ce:f6:cc:
                    8e:5e:5f:61:cf:7e:e9:1e:c0:c5:f1:c4:76:ae:d3:
                    8a:17:cb:36:38:4c:4b:84:34:2d:3e:df:65:04:b2:
                    98:fe:d3:52:7b:72:1e:e6:ba:4e:8b:2e:a6:76:c0:
                    5a:39:5d:f9:d0:43:37:65:ac:30:46:70:32:a5:f4:
                    a4:dd:72:39:3e:27:6e:48:10:20:db:79:49:48:e5:
                    dc:f2:69:21:2d:15:76:49:0e:f0:59:1f:c6:d7:60:
                    e5:d9:29:50:2a:74:b3:d6:da:ab:b8:fa:39:60:14:
                    99:88:13:5a:2d:13:98:40:41:f1:2c:ba:2d:f7:8e:
                    b8:cb:4e:50:10:e3:ff:01:8b:bd:be:b3:6d:33:55:
                    44:3a:7c:68:c0:38:d1:86:ed:1e:29:c8:8a:9d:fd:
                    12:fb:dd:43:7c:c4:5f:e5:06:82:40:53:5e:ed:8a:
                    77:fb:fe:f4:ff:2a:3a:4d:a6:7c:56:93:c4:00:e6:
                    3e:c2:75:45:5a:f3:ee:07:a3:0e:77:ff:5e:d1:69:
                    8e:66:ef:00:11:0a:e0:a5:2f:00:a9:e3:21:00:b4:
                    5d:a8:7b:ed:68:7b:ba:be:85:11:6b:e6:eb:38:05:
                    e5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1A:BA:80:E8:02:10:0B:E7:91:71:B0:70:F7:2C:59:0F:E3:7A:9B
            X509v3 Authority Key Identifier:
                keyid:54:A3:E0:C2:3D:3A:0C:CE:C6:7A:C2:EA:87:83:E5:44:48:B1:9E:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKPgwj06DM7GesLqh4PlREixngU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/VKPgwj06DM7GesLqh4PlREixngU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ba:8e:9d:7e:8d:4f:07:6c:a3:b3:ef:82:f8:29:55:b8:bf:
         4c:d8:36:c1:e6:f4:a1:17:dd:83:58:d1:e0:d5:bb:9c:2a:cd:
         51:28:27:f3:50:d6:a8:67:c6:91:45:26:92:4c:be:c6:54:06:
         4c:84:29:d5:a5:ed:8d:1e:d3:02:78:34:8e:64:08:10:62:bd:
         3a:71:15:e8:16:fe:dc:5f:12:ab:dd:98:d4:15:f7:50:41:e7:
         ca:34:57:26:a2:29:0d:3a:79:10:6c:6d:af:01:dd:34:58:0b:
         ac:66:31:0f:a3:29:a8:ee:e2:92:65:65:89:2e:f9:b2:bb:ca:
         3d:c0:04:91:f7:3c:56:d7:f7:8b:6d:4a:e2:78:d0:85:ca:8f:
         9b:15:5b:a8:7c:fc:ef:df:49:e8:b6:c6:17:51:8d:14:75:19:
         6b:a1:e2:c8:ba:d5:e1:77:28:9f:e3:26:ea:42:ee:34:54:1c:
         6f:ed:38:77:bf:4f:55:94:18:31:4e:45:40:12:4b:45:b8:4c:
         fa:47:fc:38:d7:23:9b:24:ee:17:91:d9:64:64:c6:78:41:4f:
         bd:d8:55:d7:06:69:57:7e:9f:ca:8c:21:44:bb:15:9d:ce:1a:
         da:72:fe:08:9f:f9:6b:94:a8:bf:72:18:d4:61:56:24:59:65:
         34:68:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----