Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8d-F-c-zXLMQww1ZzWAGNprGkBE.mft
File:                     8d-F-c-zXLMQww1ZzWAGNprGkBE.mft (raw, json)
Hash identifier:          QbVTkMGwxbukIVza4UUz9NSmx8zqRU2ryhkRsLnLJeg=
Subject key identifier:   FC:CC:79:95:03:DE:C4:E3:37:67:CB:0A:91:43:44:7A:2B:DA:06:6F
Authority key identifier: F1:DF:85:F9:CF:B3:5C:B3:10:C3:0D:59:CD:60:06:36:9A:C6:90:11
Certificate issuer:       /CN=A91767B0/serialNumber=F1DF85F9CFB35CB310C30D59CD6006369AC69011
Certificate serial:       0B32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8d-F-c-zXLMQww1ZzWAGNprGkBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8d-F-c-zXLMQww1ZzWAGNprGkBE.mft
Manifest number:          0B2C
Signing time:             Thu 30 Nov 2023 19:38:10 +0000
Manifest this update:     Thu 30 Nov 2023 19:38:10 +0000
Manifest next update:     Thu 07 Dec 2023 19:38:10 +0000
Files and hashes:         1: 8d-F-c-zXLMQww1ZzWAGNprGkBE.crl (hash: NxYZamLubNJQ/5u5fEOsi5L8I6Lc1JqCAHT1/IBE4Rk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2866 (0xb32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91767B0/serialNumber=F1DF85F9CFB35CB310C30D59CD6006369AC69011
        Validity
            Not Before: Nov 30 19:38:10 2023 GMT
            Not After : Dec  7 19:38:10 2023 GMT
        Subject: CN=6568e4a2-3dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:27:66:75:58:d0:ea:65:9e:7b:3c:89:80:
                    c0:da:45:1f:6a:7e:94:f7:1d:d9:78:ba:76:01:44:
                    f7:7b:6f:3b:dc:a3:53:7c:6b:3f:28:d7:47:5e:fb:
                    30:a6:c9:8f:20:8a:4a:18:5d:a3:75:72:82:11:71:
                    cb:2c:94:34:39:be:e0:10:b3:80:54:1a:61:4a:e8:
                    b9:1a:77:61:11:66:23:14:48:10:b8:ea:17:4a:29:
                    60:4e:d8:ca:36:c3:fa:f4:df:69:e8:d6:98:d6:a3:
                    82:00:56:34:b8:c0:bb:1b:f0:b7:c9:32:73:ce:cb:
                    82:e3:6c:d3:e6:9d:75:03:55:50:a4:8e:0d:13:0f:
                    ba:dc:4e:e4:de:92:04:5f:7e:d1:67:65:b8:6a:5f:
                    a3:a6:13:24:80:9c:c5:04:cf:bb:8c:8c:69:d3:fe:
                    7b:72:5c:8a:f3:f1:e4:72:b9:f9:cd:e5:c3:4b:9e:
                    81:b4:2f:70:bf:61:43:6e:b7:89:e3:ea:ec:c5:bb:
                    88:84:52:59:bf:00:65:51:a1:af:c5:01:04:ec:68:
                    30:39:ef:02:d2:84:8e:7f:df:20:0c:7a:a6:2f:6a:
                    14:06:3e:ad:1b:9f:68:df:4f:35:ce:08:7c:dc:d3:
                    eb:0a:be:2f:d8:87:23:ae:0d:62:72:7e:67:44:1f:
                    42:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CC:79:95:03:DE:C4:E3:37:67:CB:0A:91:43:44:7A:2B:DA:06:6F
            X509v3 Authority Key Identifier:
                keyid:F1:DF:85:F9:CF:B3:5C:B3:10:C3:0D:59:CD:60:06:36:9A:C6:90:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8d-F-c-zXLMQww1ZzWAGNprGkBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8d-F-c-zXLMQww1ZzWAGNprGkBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B0/DAFF4CFA04FC11EA80506616C4F9AE02/8d-F-c-zXLMQww1ZzWAGNprGkBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:cf:16:8a:61:d3:51:5c:98:60:51:a5:1e:d0:8a:ed:06:37:
         29:fa:4d:f6:75:f5:80:07:c2:90:2b:43:72:9d:cc:90:7a:0e:
         9b:e7:b3:a3:3b:d7:1a:e0:47:95:8a:e3:10:89:9f:82:a7:72:
         ca:14:1f:c2:cc:4d:a8:1f:ac:4f:bd:7d:b0:d0:3b:51:66:87:
         3c:8f:61:ba:12:ba:68:ff:08:a4:f4:05:83:bf:9d:ba:13:48:
         1a:dd:b6:4f:58:07:01:c0:8d:25:7c:ab:27:63:90:f2:7c:4f:
         e4:95:3a:15:0c:a9:9b:85:d4:0f:fe:0f:67:63:74:c1:6b:c5:
         76:50:47:89:85:11:d5:1a:b4:d9:ae:a8:69:61:ad:6a:29:c7:
         5b:f1:47:dc:a3:be:39:62:e7:68:e6:86:1d:72:0e:54:80:9f:
         c7:59:de:e7:c7:5a:63:05:e1:a9:14:e9:99:dc:37:f8:dd:aa:
         68:14:a1:e3:d5:b8:a1:de:1f:c3:79:46:34:0e:ab:51:bf:00:
         10:a2:ec:01:57:94:0a:7d:52:7f:fc:19:90:54:f0:81:aa:eb:
         3a:8b:a8:09:ec:26:7c:c8:25:73:e1:da:36:07:30:2b:b0:6c:
         69:f7:06:ea:d1:7d:89:33:87:be:85:fc:fe:c9:99:e0:f6:bf:
         c0:8c:15:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----