Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B55D/A250912C0DC311EB9D943816C4F9AE02/IS3Jn_Wug53zc50Ny_Ikp7NGCr8.mft
File:                     IS3Jn_Wug53zc50Ny_Ikp7NGCr8.mft (raw, json)
Hash identifier:          22oGB3uSOfF9kl0VyJyLqoY0CwC/ZyRpM6RYjBH+Z4Y=
Subject key identifier:   CC:C9:61:A0:D1:16:FA:CB:74:E5:B8:1B:9B:0D:DD:A9:FC:16:0C:6F
Authority key identifier: 21:2D:C9:9F:F5:AE:83:9D:F3:73:9D:0D:CB:F2:24:A7:B3:46:0A:BF
Certificate issuer:       /CN=A917B55D/serialNumber=212DC99FF5AE839DF3739D0DCBF224A7B3460ABF
Certificate serial:       05B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IS3Jn_Wug53zc50Ny_Ikp7NGCr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B55D/A250912C0DC311EB9D943816C4F9AE02/IS3Jn_Wug53zc50Ny_Ikp7NGCr8.mft
Manifest number:          05AD
Signing time:             Thu 10 Nov 2022 10:34:55 +0000
Manifest this update:     Thu 10 Nov 2022 10:34:54 +0000
Manifest next update:     Thu 17 Nov 2022 10:34:54 +0000
Files and hashes:         1: IS3Jn_Wug53zc50Ny_Ikp7NGCr8.crl (hash: /hqP8MVV/w88wxnBowbPQXQduka26ks4ukMsrGD6Zew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1457 (0x5b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B55D/serialNumber=212DC99FF5AE839DF3739D0DCBF224A7B3460ABF
        Validity
            Not Before: Nov 10 10:34:54 2022 GMT
            Not After : Nov 17 10:34:54 2022 GMT
        Subject: CN=636cd3cf-41d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:f0:85:b0:a2:19:d4:42:c4:0a:ea:1b:bf:
                    dd:5f:45:bb:77:84:8d:f0:17:ab:b8:0d:d9:70:30:
                    24:1c:14:1f:79:2c:db:97:fd:e2:e9:70:d9:2e:dd:
                    26:37:72:b3:6e:77:f5:6e:2c:f1:f4:8b:7c:d4:e4:
                    80:ab:07:a0:e4:ac:8d:5a:d7:c0:f2:7e:33:95:34:
                    a0:d6:ec:57:a3:28:c5:8c:11:d8:b3:91:4d:00:e0:
                    06:5e:f6:f2:bd:22:57:45:46:ad:f9:18:22:41:e7:
                    bb:7c:3b:ab:5c:ce:ec:5d:b6:7e:9c:0d:2b:24:b9:
                    9b:2a:16:54:be:4d:24:1e:c1:80:a2:b3:08:d4:2b:
                    09:89:e6:83:61:64:61:05:83:f8:84:1b:ff:c9:5e:
                    fc:18:be:13:ef:84:26:3c:38:dc:fd:3a:01:2a:20:
                    30:7a:ee:8e:77:45:74:69:e8:32:d3:09:ae:c3:3b:
                    d4:c7:d1:07:5d:a2:3f:74:50:97:48:9b:a7:9f:31:
                    2b:c8:d8:c9:92:da:8b:7e:7a:ba:6c:16:e3:24:8d:
                    af:10:44:69:66:1d:df:61:17:3d:20:4a:30:2c:4c:
                    ca:e2:9a:c5:48:82:31:67:b6:3f:ef:4e:b9:03:c9:
                    8d:52:45:9e:7c:74:d3:a4:78:74:7c:46:12:93:46:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C9:61:A0:D1:16:FA:CB:74:E5:B8:1B:9B:0D:DD:A9:FC:16:0C:6F
            X509v3 Authority Key Identifier:
                keyid:21:2D:C9:9F:F5:AE:83:9D:F3:73:9D:0D:CB:F2:24:A7:B3:46:0A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B55D/A250912C0DC311EB9D943816C4F9AE02/IS3Jn_Wug53zc50Ny_Ikp7NGCr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IS3Jn_Wug53zc50Ny_Ikp7NGCr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B55D/A250912C0DC311EB9D943816C4F9AE02/IS3Jn_Wug53zc50Ny_Ikp7NGCr8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:6e:15:dd:98:3d:9d:2b:6a:a2:c2:f4:80:6b:49:df:7f:40:
         8a:43:64:ed:7b:0a:5a:61:30:eb:ea:15:98:fc:55:3b:0f:07:
         06:e8:54:7f:e2:02:44:2e:48:22:bf:aa:56:42:1e:81:eb:a3:
         49:0a:52:ab:55:32:25:78:ce:24:58:f2:e3:d8:05:ab:6e:1d:
         13:2b:af:d7:1c:46:03:d5:cc:27:80:c4:a8:9f:5e:53:28:d5:
         fb:e9:6c:0c:65:1d:33:0d:14:92:c9:98:ff:38:c6:89:1c:35:
         96:aa:4c:40:1d:5c:7c:c0:bf:d5:38:e3:bd:4e:c5:be:be:98:
         d0:6c:ec:de:10:53:4d:4f:c1:9c:57:d9:10:50:91:9a:75:a5:
         7c:69:0f:f8:33:68:59:75:e0:38:fe:aa:42:4f:79:69:9d:bf:
         ee:93:58:fd:58:e3:0d:8a:d9:97:fa:88:41:3b:8a:17:a5:a7:
         53:f4:ac:31:da:8d:9d:61:29:0f:74:0c:04:a9:ff:44:60:eb:
         fe:2d:ca:f2:05:c9:99:bd:37:71:9e:5f:10:cb:a1:36:bf:b1:
         e0:79:c1:ed:49:33:6d:53:38:ab:a3:91:64:3e:21:42:ad:d2:
         48:05:14:04:69:3c:58:6e:e4:d7:f6:70:28:f0:7b:b9:56:84:
         58:5c:82:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----