Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.mft
File:                     Efnbq5DK44NpHfn-wpeCo2cVXyc.mft (raw, json)
Hash identifier:          miLkZynpHZvhfkrMXrbAc0OJMem4gJeDRaI8OKtqsy0=
Subject key identifier:   51:18:46:65:F8:58:3D:BE:0D:90:5F:B5:6A:80:96:16:5F:00:F7:41
Authority key identifier: 11:F9:DB:AB:90:CA:E3:83:69:1D:F9:FE:C2:97:82:A3:67:15:5F:27
Certificate issuer:       /CN=A917D3A6/serialNumber=11F9DBAB90CAE383691DF9FEC29782A367155F27
Certificate serial:       03E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Efnbq5DK44NpHfn-wpeCo2cVXyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.mft
Manifest number:          03E3
Signing time:             Sun 10 Nov 2024 23:54:20 +0000
Manifest this update:     Sun 10 Nov 2024 23:54:20 +0000
Manifest next update:     Sun 17 Nov 2024 23:54:20 +0000
Files and hashes:         1: Efnbq5DK44NpHfn-wpeCo2cVXyc.crl (hash: VW4Qh45QiVGhxuY7p45BuBK5T7jF92uKNWc0Vho9RXU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 998 (0x3e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D3A6/serialNumber=11F9DBAB90CAE383691DF9FEC29782A367155F27
        Validity
            Not Before: Nov 10 23:54:20 2024 GMT
            Not After : Nov 17 23:54:20 2024 GMT
        Subject: CN=673147ac-ffb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:17:b7:51:6d:5d:56:07:01:01:fb:99:64:
                    3e:9b:f2:ce:65:66:60:3b:85:5d:57:d1:9e:23:08:
                    28:dc:a4:0e:38:e5:2f:25:ed:fa:7a:a1:95:23:8e:
                    2f:40:2e:67:01:9a:73:9c:b2:ef:d2:d7:f7:1c:23:
                    6b:cc:a5:24:4a:6e:fb:fb:71:4f:ea:87:7c:f5:4a:
                    d2:16:02:16:7d:e0:85:92:d5:47:91:f4:4c:cd:55:
                    e4:ef:dc:66:c5:f2:ab:4e:fd:96:24:9e:d4:fb:da:
                    24:fd:69:39:3a:5f:63:86:8b:c6:dd:6c:2d:ff:9d:
                    26:02:82:83:7c:c5:87:d4:40:ac:78:c0:74:cb:3e:
                    bb:8b:70:47:0e:1b:61:11:94:7e:4e:89:ac:68:ec:
                    5b:58:f9:dd:43:c1:39:79:1e:86:d9:a5:9f:07:6f:
                    9b:47:43:28:da:b4:c1:5c:13:e9:1d:c9:c4:b1:c8:
                    80:e5:e9:34:a8:d4:96:ec:04:0f:d1:36:3a:9c:89:
                    b6:55:bc:61:0b:52:c2:dc:25:b2:6d:35:10:2f:b9:
                    c0:5f:92:5d:06:51:c7:64:1c:01:81:a6:89:c2:46:
                    4b:1f:68:be:97:d0:7c:e4:af:08:8b:bd:d9:a0:dd:
                    b2:bd:e6:a0:f7:75:e6:bb:fe:9d:10:2a:54:f6:f3:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:18:46:65:F8:58:3D:BE:0D:90:5F:B5:6A:80:96:16:5F:00:F7:41
            X509v3 Authority Key Identifier:
                keyid:11:F9:DB:AB:90:CA:E3:83:69:1D:F9:FE:C2:97:82:A3:67:15:5F:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Efnbq5DK44NpHfn-wpeCo2cVXyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D3A6/1A651EA2570711ECB7BDF334C4F9AE02/Efnbq5DK44NpHfn-wpeCo2cVXyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:85:fc:d1:cd:dc:3f:05:a5:69:f5:05:d4:00:af:9a:f4:6f:
         72:f4:97:8f:f5:5e:d3:b3:6a:c7:fd:21:a5:3b:36:d2:8f:3a:
         4e:70:e0:12:3a:54:99:0b:10:a9:b9:f2:1c:ae:02:96:c3:af:
         65:d4:3e:4f:08:51:a9:07:dd:30:2e:fc:83:31:53:fe:a0:9a:
         59:e5:71:b7:bc:7b:a8:a3:92:e2:44:74:f0:a2:75:07:b4:76:
         de:a9:9c:c3:01:f9:8b:0d:4c:60:4c:7c:6d:e1:7a:97:28:77:
         1f:b1:77:9f:77:dc:d7:60:ff:6a:a1:1d:5a:e0:69:6c:db:68:
         e8:78:c6:bc:a8:91:dc:9d:2c:30:3f:33:54:f2:a4:ee:76:df:
         bd:12:c0:5d:2b:57:30:fd:04:43:4e:ac:09:f4:83:d4:9a:92:
         1e:1b:8d:4d:4a:91:aa:4c:26:8a:45:1d:3e:2f:85:db:20:74:
         cc:0b:79:ee:75:9e:d6:43:ed:93:2b:45:dc:b7:1b:8f:d8:39:
         6e:dd:d0:4c:fd:e2:cd:6b:d8:4a:ff:4c:12:13:aa:2f:c8:0e:
         c9:dd:a4:9d:a2:95:98:46:22:29:fb:cb:df:fc:6b:cf:49:89:
         f2:e4:24:ac:28:5d:b5:c9:37:40:b5:20:dc:cd:f3:a6:19:64:
         63:d8:6d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----