Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91721E1/DE1D8F62DBD611EA9A95D537C4F9AE02/0-h4mesuuHjNcPpyRVDP8qlsI2I.mft
File:                     0-h4mesuuHjNcPpyRVDP8qlsI2I.mft (raw, json)
Hash identifier:          ai72pHSnXEyoTtURpQfbnDERnGGjP86OzuhUtZw/ivk=
Subject key identifier:   91:BD:D7:2B:76:85:3A:1E:A5:80:AE:9A:76:FE:44:FA:84:A8:BC:34
Authority key identifier: D3:E8:78:99:EB:2E:B8:78:CD:70:FA:72:45:50:CF:F2:A9:6C:23:62
Certificate issuer:       /CN=A91721E1/serialNumber=D3E87899EB2EB878CD70FA724550CFF2A96C2362
Certificate serial:       06D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-h4mesuuHjNcPpyRVDP8qlsI2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91721E1/DE1D8F62DBD611EA9A95D537C4F9AE02/0-h4mesuuHjNcPpyRVDP8qlsI2I.mft
Manifest number:          06CC
Signing time:             Wed 13 Sep 2023 00:16:12 +0000
Manifest this update:     Wed 13 Sep 2023 00:16:12 +0000
Manifest next update:     Wed 20 Sep 2023 00:16:12 +0000
Files and hashes:         1: 0-h4mesuuHjNcPpyRVDP8qlsI2I.crl (hash: tEswaI4Q+jBQPlk9MqtaT0n+//70DvXylQS6IzuLGxI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746 (0x6d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91721E1/serialNumber=D3E87899EB2EB878CD70FA724550CFF2A96C2362
        Validity
            Not Before: Sep 13 00:16:12 2023 GMT
            Not After : Sep 20 00:16:12 2023 GMT
        Subject: CN=6500ff4c-4139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:cb:f3:71:d5:50:12:e3:32:37:04:9d:59:
                    7e:7d:d1:15:de:5d:6f:1e:e4:56:62:59:a9:70:ee:
                    a7:95:55:65:38:e2:97:2b:2a:86:0d:68:7a:4b:74:
                    a6:0a:6b:52:3e:23:59:63:c3:8d:48:1b:2d:d8:bb:
                    64:e5:e9:83:ad:c8:0a:92:9f:26:ac:7c:e3:04:19:
                    77:ef:8c:29:38:97:45:09:3b:55:ef:88:c4:c0:3c:
                    b5:d7:c3:9c:c4:f7:2a:b3:fe:be:6b:bb:91:f3:f1:
                    71:a2:b1:d9:20:8b:78:2b:c9:5c:25:56:d3:16:d9:
                    f3:e0:a7:43:67:31:c4:79:11:d4:cd:62:13:71:d8:
                    aa:ab:25:66:e4:bd:7a:9e:52:53:45:93:e4:be:69:
                    19:ff:cc:02:57:7c:b7:b5:8a:ea:24:3c:26:b4:5a:
                    4e:b7:0c:ee:10:cf:c8:2a:2d:e3:a5:53:13:a3:a9:
                    50:d5:4f:73:17:a4:ed:a0:af:52:08:13:43:74:0d:
                    1e:15:fa:b0:dc:6c:64:57:b1:46:f1:3b:8c:3e:7c:
                    10:a8:91:3a:c5:c7:c4:69:4f:1b:f7:dd:f9:e4:83:
                    4f:ad:0d:e2:69:76:ef:12:8b:20:dc:84:73:58:ca:
                    3a:f1:94:25:1a:cc:2e:f0:bc:3c:b2:e7:bd:76:e4:
                    b5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BD:D7:2B:76:85:3A:1E:A5:80:AE:9A:76:FE:44:FA:84:A8:BC:34
            X509v3 Authority Key Identifier:
                keyid:D3:E8:78:99:EB:2E:B8:78:CD:70:FA:72:45:50:CF:F2:A9:6C:23:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91721E1/DE1D8F62DBD611EA9A95D537C4F9AE02/0-h4mesuuHjNcPpyRVDP8qlsI2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-h4mesuuHjNcPpyRVDP8qlsI2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91721E1/DE1D8F62DBD611EA9A95D537C4F9AE02/0-h4mesuuHjNcPpyRVDP8qlsI2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6b:8d:1d:df:bd:76:b6:fe:7f:34:f7:f6:42:39:df:44:06:
         91:b2:df:17:bb:e5:b0:54:1e:50:74:6c:90:9f:a2:bb:8a:2f:
         6e:e5:dd:6d:13:76:e4:ae:9c:c6:77:0b:82:4b:9b:8f:cb:fd:
         98:b3:6b:e3:75:84:fd:9a:b1:6c:6a:3e:18:cf:1c:0c:bc:9c:
         19:0e:6b:c3:1f:c3:37:6a:eb:5a:e9:ad:23:91:37:f7:15:99:
         c6:c8:96:f2:5c:c4:7c:5c:92:fa:ca:98:b8:66:b4:fd:3f:c3:
         cd:fc:5d:1a:3d:be:6d:49:e4:d2:6a:ad:f1:76:02:fa:84:2a:
         c3:b4:32:c8:2d:8f:49:7d:62:8c:c5:f6:ff:30:94:ff:5c:af:
         c2:ff:93:be:c0:63:84:96:7a:f1:33:07:74:85:19:58:05:c4:
         40:97:f0:b4:9a:df:95:f6:e6:aa:57:82:33:99:4d:99:25:ac:
         58:eb:37:46:8d:70:de:de:ca:bb:19:9d:49:2a:fe:42:14:de:
         21:ef:65:cb:c1:1e:77:a6:7b:09:66:1e:f4:b2:32:03:32:43:
         c0:dc:e4:e9:a3:43:6a:59:23:7e:98:93:4c:cd:bd:ba:53:54:
         d3:e5:dd:e0:99:2e:1c:50:32:63:09:1c:80:a5:f5:ba:91:9b:
         a7:6e:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----