Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA0F/30C46C32FCB511EA82B5EC0BC4F9AE02/tqB6Ut3aLhOdHRsmVobWzrG2XU4.mft
File:                     tqB6Ut3aLhOdHRsmVobWzrG2XU4.mft (raw, json)
Hash identifier:          9mUn/kF2Yajzcoth0gad0fRCfxTHzNNgcONGPqXhl8E=
Subject key identifier:   60:92:ED:5C:0F:7D:10:F2:3B:F8:17:2E:6C:A0:65:5B:D2:49:E0:DB
Authority key identifier: B6:A0:7A:52:DD:DA:2E:13:9D:1D:1B:26:56:86:D6:CE:B1:B6:5D:4E
Certificate issuer:       /CN=A917EA0F/serialNumber=B6A07A52DDDA2E139D1D1B265686D6CEB1B65D4E
Certificate serial:       06BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqB6Ut3aLhOdHRsmVobWzrG2XU4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EA0F/30C46C32FCB511EA82B5EC0BC4F9AE02/tqB6Ut3aLhOdHRsmVobWzrG2XU4.mft
Manifest number:          06B7
Signing time:             Wed 10 Jan 2024 22:26:17 +0000
Manifest this update:     Wed 10 Jan 2024 22:26:16 +0000
Manifest next update:     Wed 17 Jan 2024 22:26:16 +0000
Files and hashes:         1: tqB6Ut3aLhOdHRsmVobWzrG2XU4.crl (hash: VhT6VIHyW8KCsMCpRC+WjnZHG6CMYtj34lHJcyfw6ns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1725 (0x6bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EA0F/serialNumber=B6A07A52DDDA2E139D1D1B265686D6CEB1B65D4E
        Validity
            Not Before: Jan 10 22:26:16 2024 GMT
            Not After : Jan 17 22:26:16 2024 GMT
        Subject: CN=659f1989-1788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3d:63:92:37:a5:b0:70:7d:56:92:e4:26:b1:
                    0c:ac:1b:ff:8c:3e:60:55:0f:24:f3:20:68:76:27:
                    15:2c:22:85:10:2a:46:92:67:56:8d:4d:9e:f7:94:
                    2e:f0:21:df:2e:c5:e1:52:3f:f8:9a:dd:fc:0d:17:
                    aa:03:7e:fd:67:51:e7:9c:2c:67:a9:c2:03:3c:88:
                    fa:d6:28:4a:c2:e2:c0:10:d7:72:6f:13:68:c3:3a:
                    54:f7:8b:8b:7a:1a:9c:06:57:1f:7a:dc:d6:ea:0c:
                    85:ec:1e:26:9d:ab:5f:ca:03:1c:48:7f:e9:4f:05:
                    1e:b1:32:26:20:a3:bd:3b:57:70:89:7d:55:66:ea:
                    f9:84:ec:7f:8b:f6:79:db:48:5d:67:35:b4:f2:2c:
                    63:54:08:2a:2c:3c:7b:c7:e0:3b:84:3a:c4:98:4c:
                    bc:59:eb:03:58:24:e3:38:f9:7d:65:ae:78:10:86:
                    44:dd:89:1b:18:76:49:1a:9d:7c:a8:65:ec:e9:3d:
                    8a:f9:35:f2:3b:5a:d0:bf:6d:9d:42:f2:e5:65:55:
                    51:27:cb:4c:62:81:dd:5c:6a:2b:93:76:57:42:13:
                    16:f0:4f:c3:06:98:53:74:5f:c4:ce:28:32:d3:26:
                    83:de:e9:58:35:49:fc:d7:b2:4f:8e:4d:ab:4b:66:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:92:ED:5C:0F:7D:10:F2:3B:F8:17:2E:6C:A0:65:5B:D2:49:E0:DB
            X509v3 Authority Key Identifier:
                keyid:B6:A0:7A:52:DD:DA:2E:13:9D:1D:1B:26:56:86:D6:CE:B1:B6:5D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EA0F/30C46C32FCB511EA82B5EC0BC4F9AE02/tqB6Ut3aLhOdHRsmVobWzrG2XU4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tqB6Ut3aLhOdHRsmVobWzrG2XU4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA0F/30C46C32FCB511EA82B5EC0BC4F9AE02/tqB6Ut3aLhOdHRsmVobWzrG2XU4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:51:65:c5:37:66:ba:c0:e9:0d:f8:51:f0:f1:12:40:b1:
         a7:57:40:90:94:50:32:e3:b0:a0:20:e8:fd:2a:d4:85:2b:88:
         fe:ea:6e:b3:09:20:8a:8c:04:c3:db:a1:dd:c9:eb:98:9f:b1:
         56:a6:5a:0b:16:1c:b0:ff:af:f5:be:66:5c:88:56:df:07:79:
         72:75:d3:d1:23:7c:74:3e:a6:27:d3:b5:60:13:94:82:e6:24:
         6a:a0:da:70:a9:08:bd:bc:96:1b:01:46:af:af:7c:51:94:5a:
         b0:83:06:31:73:5e:73:fc:6f:bb:85:b9:eb:3f:7d:28:c2:12:
         b4:bd:21:d6:eb:df:1a:31:65:85:34:63:ca:42:60:97:83:55:
         c5:bc:05:bf:9b:7a:39:9f:02:36:d1:8c:ec:2f:05:49:a1:85:
         55:ef:94:fb:a3:50:ea:3d:bf:e0:7c:43:27:33:d9:24:b9:29:
         64:52:88:5b:55:c6:12:e4:bf:2e:04:35:46:d0:f2:d6:71:ee:
         a8:68:f5:e4:31:57:b9:01:3d:1b:e6:59:2d:36:6a:23:25:40:
         0d:58:50:f7:1d:4f:f4:c1:af:fc:3e:a5:c2:45:3a:93:57:dc:
         82:67:80:89:00:6c:61:db:2c:af:a9:09:a9:7a:6e:55:80:38:
         07:c1:f6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----