Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918067C/99FB609401D011ED9540BB35C4F9AE02/NtRvG-qXII_SIgxMa_x5BhDEXL4.mft
File:                     NtRvG-qXII_SIgxMa_x5BhDEXL4.mft (raw, json)
Hash identifier:          aJQjpB4qN/eeQeaRJbynHIutSh6vkQchKnkSzKTgiIo=
Subject key identifier:   BA:63:67:FD:44:DD:FD:39:98:2B:F2:0C:4A:AE:EC:63:7B:06:A6:A6
Authority key identifier: 36:D4:6F:1B:EA:97:20:8F:D2:22:0C:4C:6B:FC:79:06:10:C4:5C:BE
Certificate issuer:       /CN=A918067C/serialNumber=36D46F1BEA97208FD2220C4C6BFC790610C45CBE
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtRvG-qXII_SIgxMa_x5BhDEXL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918067C/99FB609401D011ED9540BB35C4F9AE02/NtRvG-qXII_SIgxMa_x5BhDEXL4.mft
Manifest number:          01C1
Signing time:             Wed 03 Apr 2024 04:36:37 +0000
Manifest this update:     Wed 03 Apr 2024 04:36:36 +0000
Manifest next update:     Wed 10 Apr 2024 04:36:36 +0000
Files and hashes:         1: NtRvG-qXII_SIgxMa_x5BhDEXL4.crl (hash: 24X7wssvkFHlukOe5lmvjsxrtl+Mcoy4AlpLC0dcntA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918067C/serialNumber=36D46F1BEA97208FD2220C4C6BFC790610C45CBE
        Validity
            Not Before: Apr  3 04:36:36 2024 GMT
            Not After : Apr 10 04:36:36 2024 GMT
        Subject: CN=660cdcd4-f335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:c2:fa:6a:aa:2a:bb:fb:c4:96:7a:ce:9d:
                    32:13:e3:a2:85:85:f3:03:0b:53:90:e8:e1:3e:74:
                    6b:0e:91:d8:9f:07:5b:2d:50:1b:28:3e:fc:9d:f0:
                    66:cd:13:47:4c:7b:4a:06:08:e9:26:6f:b0:1e:aa:
                    c4:0d:36:8e:89:27:86:de:35:57:c5:1f:8c:d1:1d:
                    6f:93:b1:e9:77:22:82:f4:dd:35:32:b9:d0:cf:0f:
                    e3:28:0f:8f:9c:a8:37:38:4c:d9:47:38:b0:f3:18:
                    9f:22:c9:1f:51:8a:c9:55:3a:e9:0f:6b:0f:11:6c:
                    46:d7:63:6a:bc:bc:0b:51:7a:e3:c4:28:58:5b:40:
                    00:57:d7:cc:f3:40:ab:ae:18:ca:7d:80:b1:6b:95:
                    67:18:02:99:67:14:fa:25:79:cc:6c:f4:a2:ce:09:
                    88:0f:1f:27:02:3b:7f:57:da:06:59:db:27:1e:46:
                    50:45:48:5a:d7:ab:8a:d4:36:81:92:e1:ff:be:e4:
                    55:8b:a6:3c:58:3f:21:64:6d:4c:b0:9f:8a:38:25:
                    fb:c0:9b:09:42:0a:d9:2f:ba:d5:2e:51:59:8e:9a:
                    f3:b9:16:18:77:62:09:66:4e:06:cb:df:73:eb:ff:
                    d8:27:4e:e8:89:27:1c:13:01:9c:4e:01:b9:dc:34:
                    c0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:63:67:FD:44:DD:FD:39:98:2B:F2:0C:4A:AE:EC:63:7B:06:A6:A6
            X509v3 Authority Key Identifier:
                keyid:36:D4:6F:1B:EA:97:20:8F:D2:22:0C:4C:6B:FC:79:06:10:C4:5C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918067C/99FB609401D011ED9540BB35C4F9AE02/NtRvG-qXII_SIgxMa_x5BhDEXL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NtRvG-qXII_SIgxMa_x5BhDEXL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918067C/99FB609401D011ED9540BB35C4F9AE02/NtRvG-qXII_SIgxMa_x5BhDEXL4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:01:78:1b:3c:94:81:53:a6:ab:9c:7f:89:cf:e0:e5:70:d1:
         99:ea:9f:d8:7f:8d:a4:02:66:4f:9a:ad:ef:5a:c6:cd:55:3b:
         46:17:76:2c:76:52:51:95:af:fc:51:d4:06:c3:49:74:27:83:
         9c:7c:37:56:e8:d3:cb:ca:90:38:1b:3a:b6:bd:f0:50:7e:36:
         67:6e:4d:fc:57:55:91:5c:4d:ec:30:15:32:0f:56:cb:3b:a2:
         19:ee:11:e4:cb:8d:68:f3:4e:23:e5:a7:65:16:5b:6b:24:a3:
         8d:18:a6:6c:99:c3:dd:9f:78:c1:8c:87:25:f2:e2:1c:f9:40:
         27:df:e2:7b:a9:7c:16:7b:24:d0:3f:86:0d:1d:57:41:bb:7f:
         2d:d4:f0:33:19:f7:bf:4a:5d:2c:cd:cd:59:64:36:13:db:2c:
         c1:44:1c:dd:ea:a3:d0:dd:db:fe:4f:de:d2:b1:e9:5a:b9:4a:
         7c:b6:3f:2a:aa:d3:2a:13:37:62:90:7e:0b:44:9d:64:07:e3:
         d5:9d:a7:81:44:d4:29:27:21:a5:cd:d2:5f:e2:43:84:5b:d2:
         01:39:ca:3a:13:ca:f3:36:e3:1b:a7:b5:8c:4d:a8:4a:b7:1c:
         7c:69:80:3c:6e:6a:d8:f0:d0:eb:b4:d3:e8:c9:fd:1c:dd:ad:
         e3:b8:4c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----