Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/MgqkgQw8CaJaJnnaP64BUwYEXoQ.mft
File:                     MgqkgQw8CaJaJnnaP64BUwYEXoQ.mft (raw, json)
Hash identifier:          NiSaM9ahJaXdrk25RsX8ryduRT1RIUbk1xXVrT6WQsg=
Subject key identifier:   25:50:28:A6:D4:DB:E2:EE:7F:32:69:25:B5:90:28:7F:89:35:04:C6
Authority key identifier: 32:0A:A4:81:0C:3C:09:A2:5A:26:79:DA:3F:AE:01:53:06:04:5E:84
Certificate issuer:       /CN=A918EDB2/serialNumber=320AA4810C3C09A25A2679DA3FAE015306045E84
Certificate serial:       3219
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MgqkgQw8CaJaJnnaP64BUwYEXoQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/MgqkgQw8CaJaJnnaP64BUwYEXoQ.mft
Manifest number:          4A52
Signing time:             Sun 14 Jan 2024 15:33:25 +0000
Manifest this update:     Sun 14 Jan 2024 15:33:25 +0000
Manifest next update:     Sun 21 Jan 2024 15:33:25 +0000
Files and hashes:         1: MgqkgQw8CaJaJnnaP64BUwYEXoQ.crl (hash: ffHIpEfE6cHypLl+uG97L4+sXFnYCVfKlw1Dv6tJlt0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12825 (0x3219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=320AA4810C3C09A25A2679DA3FAE015306045E84
        Validity
            Not Before: Jan 14 15:33:25 2024 GMT
            Not After : Jan 21 15:33:25 2024 GMT
        Subject: CN=65a3fec5-fb1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:b5:b8:a5:8a:48:48:c0:2d:98:d5:50:42:
                    84:ec:d8:9e:3a:47:e7:16:3a:40:15:2a:36:42:83:
                    47:44:0c:d7:17:a6:ee:4e:ae:4d:e4:e4:4c:ad:c4:
                    b7:44:10:25:15:d0:b9:64:46:4b:b5:0a:9a:49:ae:
                    d1:62:4c:5f:1c:35:a0:7f:aa:ac:78:0b:b2:40:54:
                    af:23:2b:32:d4:d9:80:62:87:d2:60:4d:82:51:4b:
                    40:56:2c:fc:c5:23:82:ed:85:14:85:8e:9c:20:22:
                    ee:7a:d3:e5:81:77:33:e1:b7:52:b7:64:c0:02:95:
                    2a:eb:cd:71:b7:a3:57:aa:2b:c5:26:67:a3:73:65:
                    03:99:44:1b:64:09:0c:cc:52:a1:4f:73:26:eb:39:
                    d4:85:48:bb:9c:19:98:43:5e:7e:f6:a4:0a:5c:99:
                    2a:fc:a1:57:10:5e:80:97:f3:85:4f:b4:c1:01:bb:
                    75:f5:c6:a2:b4:72:de:e5:b6:a5:6d:d0:a2:a6:6b:
                    ba:66:ed:a5:7c:f9:22:cf:82:f7:84:d8:db:c0:e9:
                    97:6e:1e:df:56:3e:9e:02:55:ac:5a:da:0e:3e:d1:
                    2d:69:2b:f6:5f:73:b8:5f:ae:88:be:98:1c:a1:b1:
                    89:60:db:41:73:4e:eb:af:89:d2:93:81:e4:f0:f6:
                    3e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:50:28:A6:D4:DB:E2:EE:7F:32:69:25:B5:90:28:7F:89:35:04:C6
            X509v3 Authority Key Identifier:
                keyid:32:0A:A4:81:0C:3C:09:A2:5A:26:79:DA:3F:AE:01:53:06:04:5E:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/MgqkgQw8CaJaJnnaP64BUwYEXoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MgqkgQw8CaJaJnnaP64BUwYEXoQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/MgqkgQw8CaJaJnnaP64BUwYEXoQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:35:e0:42:6a:a7:56:72:ca:20:80:8b:3d:78:86:ba:d5:22:
         75:4e:ec:14:e4:f7:9e:ea:b2:bf:68:f3:bd:0e:18:49:7a:3a:
         62:35:4f:21:e3:b5:18:04:45:84:7d:22:19:49:0e:70:da:9f:
         9f:e9:9f:bb:19:77:e7:ad:60:0b:e2:8c:7a:82:a1:57:26:8d:
         2f:f2:b3:ac:eb:37:49:e7:07:9c:59:a8:33:27:76:7f:09:b4:
         aa:96:b1:2f:e4:ec:42:f0:30:ed:c8:cf:ef:66:0a:19:7b:d4:
         c4:df:2d:a0:2b:ac:27:45:66:0c:9b:bd:da:22:87:5c:16:d2:
         54:e7:a3:6f:1d:d2:f0:56:cd:c5:38:0e:c8:28:b1:6f:87:53:
         b1:eb:af:5c:bf:e2:ee:e3:d6:bf:aa:96:7b:ef:7e:a1:20:9e:
         c0:eb:a5:46:1b:85:ea:c6:13:a5:c9:01:88:44:7c:58:52:4e:
         17:14:8b:6c:a3:62:09:92:67:01:cc:86:5b:74:5d:d8:f0:0f:
         a6:b1:21:39:07:f2:06:34:51:77:56:ef:fd:c5:35:ca:58:23:
         17:34:19:58:b4:c3:09:63:ff:d4:b4:8c:76:05:57:84:6e:94:
         d2:b0:b7:ca:a9:eb:94:ce:65:1d:d3:ac:33:34:e3:30:7d:36:
         be:6d:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----