Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
File:                     j4ta_C0ziN3SUYrpoHOQj4-loKU.mft (raw, json)
Hash identifier:          mh28e+RxRvSYJXb88Pu1TJ3foNTvcn5nEcNR5oE/Hug=
Subject key identifier:   0E:74:53:5B:2F:D2:65:6F:1C:E2:36:6E:56:50:51:59:FE:A5:A5:BE
Authority key identifier: 8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5
Certificate issuer:       /CN=A91817E6/serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5
Certificate serial:       0872
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
Manifest number:          091F
Signing time:             Mon 18 Nov 2024 22:52:16 +0000
Manifest this update:     Mon 18 Nov 2024 22:52:16 +0000
Manifest next update:     Mon 25 Nov 2024 22:52:16 +0000
Files and hashes:         1: j4ta_C0ziN3SUYrpoHOQj4-loKU.crl (hash: 8awE3wRq+2JM4PHcttMAPhQvEsMrMOsKuwIe/UVWFa8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6/serialNumber=8F8B5AFC2D3388DDD2518AE9A073908F8FA5A0A5
        Validity
            Not Before: Nov 18 22:52:16 2024 GMT
            Not After : Nov 25 22:52:16 2024 GMT
        Subject: CN=673bc520-a9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:91:0e:6e:94:1f:de:4d:52:f6:e2:8d:13:
                    ad:e8:1d:9a:0e:6b:c0:60:d9:bc:0e:a2:1c:f1:f1:
                    2c:46:5a:a7:7b:b2:8a:6a:cd:36:ce:84:6e:20:c6:
                    d1:fb:f1:59:d3:b7:df:e3:6f:c8:e6:de:aa:66:81:
                    1b:79:8f:36:c5:99:70:71:63:85:2d:1e:f0:ca:09:
                    81:9a:f7:04:dc:9d:e5:a5:2f:33:88:0d:ed:cc:2f:
                    fd:8b:d6:ce:58:72:34:62:6d:9d:88:ce:96:d3:1c:
                    06:81:8c:57:91:49:6a:99:c9:20:58:d2:c3:42:7d:
                    53:3d:ff:5d:9f:7c:e8:c7:1e:c1:83:b4:52:57:5a:
                    ea:84:b0:44:f4:af:75:2b:24:e2:d1:bb:9d:20:fb:
                    76:27:cd:b3:85:95:fc:44:34:a3:71:ef:af:20:08:
                    df:d2:11:1f:8f:0a:5b:b0:33:e2:70:c6:5c:4e:dd:
                    95:3d:a6:83:72:3c:6a:d8:a7:ff:dc:97:fc:bb:c8:
                    0a:87:d7:56:f7:a3:25:9c:7e:fa:e1:9c:5e:a3:cc:
                    00:54:7e:cd:ba:ff:f7:47:31:27:42:c4:03:2e:a4:
                    d6:28:db:35:f4:62:6c:6b:f4:9e:01:f4:17:ab:bd:
                    d1:61:4a:f0:5c:73:95:42:63:9a:f5:7e:50:4d:4c:
                    7a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:74:53:5B:2F:D2:65:6F:1C:E2:36:6E:56:50:51:59:FE:A5:A5:BE
            X509v3 Authority Key Identifier:
                keyid:8F:8B:5A:FC:2D:33:88:DD:D2:51:8A:E9:A0:73:90:8F:8F:A5:A0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j4ta_C0ziN3SUYrpoHOQj4-loKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/j4ta_C0ziN3SUYrpoHOQj4-loKU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:5c:1b:6c:07:19:6f:2a:f9:e1:96:8d:5d:a3:6e:1f:7b:8f:
         e5:aa:d9:67:ba:48:e8:5d:b1:cb:85:bf:9d:0f:5c:82:6a:21:
         df:46:d2:14:0d:2c:7b:0e:c1:3f:24:f8:66:c5:c7:b1:89:44:
         6a:ce:74:2e:a2:b9:11:d9:43:3b:6b:62:a8:a1:f2:c9:1e:cc:
         a4:b7:42:2d:78:1a:4a:58:2f:b6:45:41:6d:8e:f1:ee:ff:ec:
         0d:88:59:29:09:e6:ca:dc:3f:5a:95:15:7e:9a:69:fd:35:f8:
         bc:0a:8f:9c:d7:35:c7:39:49:d1:36:29:b9:b5:62:a0:33:b6:
         3f:9c:04:7e:63:00:8a:34:65:d1:de:8e:16:92:cd:82:2a:67:
         4e:9e:e9:c4:5d:55:7c:12:a1:2f:d5:e5:3c:ed:92:b8:d9:67:
         4b:c8:44:d6:99:83:c7:12:d6:41:5e:71:d4:5b:de:37:00:16:
         b7:ea:d6:3a:1c:52:55:9a:71:84:db:99:bf:ba:0b:48:d0:50:
         b3:83:8d:a5:61:db:3e:ca:64:9b:19:c2:7b:45:e0:fa:9f:72:
         69:0c:5f:ab:e2:2d:37:0f:d6:fe:1a:51:2f:78:c9:6d:e1:7f:
         75:72:45:6e:df:5e:ba:37:ad:04:26:03:f0:37:b3:be:ca:c0:
         ee:33:7f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----