Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.mft
File:                     HUWbQ2csaQaJajtlEExG6zmBnb0.mft (raw, json)
Hash identifier:          umhE0mbT13UPTq1cnCpHHzA0B+Q/9bxoRQIL2Sf6dRQ=
Subject key identifier:   A7:53:C5:AD:10:BE:63:16:71:B4:12:97:0D:61:8E:44:FE:1D:2D:91
Authority key identifier: 1D:45:9B:43:67:2C:69:06:89:6A:3B:65:10:4C:46:EB:39:81:9D:BD
Certificate issuer:       /CN=A918FDDF/serialNumber=1D459B43672C6906896A3B65104C46EB39819DBD
Certificate serial:       12A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUWbQ2csaQaJajtlEExG6zmBnb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.mft
Manifest number:          12A7
Signing time:             Mon 30 Sep 2024 17:11:57 +0000
Manifest this update:     Mon 30 Sep 2024 17:11:57 +0000
Manifest next update:     Mon 07 Oct 2024 17:11:57 +0000
Files and hashes:         1: HUWbQ2csaQaJajtlEExG6zmBnb0.crl (hash: LZKAhXMhrTThm7xi3GUZdgJjEmlG9am6RE1Y6/qoTFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4776 (0x12a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FDDF/serialNumber=1D459B43672C6906896A3B65104C46EB39819DBD
        Validity
            Not Before: Sep 30 17:11:57 2024 GMT
            Not After : Oct  7 17:11:57 2024 GMT
        Subject: CN=66fadbdd-3241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:46:fa:0e:d3:19:94:60:24:18:54:d6:6d:40:
                    24:14:2b:47:be:d3:8c:26:7a:2b:83:4a:de:6e:07:
                    a8:4c:d4:12:22:17:aa:38:79:1c:08:03:31:d7:83:
                    33:ab:68:07:1b:be:15:24:19:64:0e:45:fb:cd:fb:
                    d2:eb:79:f4:dc:3e:e9:e8:70:f1:ad:64:a9:28:b2:
                    eb:96:d9:96:0f:98:7e:96:ee:94:4a:fc:e1:61:95:
                    90:17:37:ff:58:32:73:27:f7:dd:4b:16:72:88:1c:
                    61:c6:aa:26:5e:16:7c:10:84:fa:64:43:f3:98:3e:
                    17:c4:06:d3:9f:e6:b9:fb:72:58:f4:1a:ae:5b:e9:
                    ee:1a:b6:12:37:a6:11:ba:3c:92:33:8f:d6:be:4c:
                    4a:09:42:35:8a:a4:6e:50:00:30:b5:40:5b:cc:ca:
                    ae:90:04:0b:51:ef:59:87:15:88:56:1c:f8:a5:70:
                    58:d9:e1:2c:cd:53:49:37:ed:cd:c9:38:67:88:0d:
                    e6:3f:76:7a:98:9d:a6:6d:ff:e0:7a:2a:a3:76:ff:
                    dc:98:62:2e:ca:32:14:ca:46:6a:aa:76:35:0f:53:
                    49:8d:76:b3:72:f1:93:1c:f7:d1:ab:f9:d0:01:f2:
                    7f:49:a7:2c:c9:2a:8a:35:50:4e:60:ff:3e:36:d0:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:53:C5:AD:10:BE:63:16:71:B4:12:97:0D:61:8E:44:FE:1D:2D:91
            X509v3 Authority Key Identifier:
                keyid:1D:45:9B:43:67:2C:69:06:89:6A:3B:65:10:4C:46:EB:39:81:9D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUWbQ2csaQaJajtlEExG6zmBnb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDDF/DE1446A8AA0711E8B25AFF30C4F9AE02/HUWbQ2csaQaJajtlEExG6zmBnb0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:43:b6:83:ee:36:69:a0:30:3f:a2:59:3d:1c:ac:c5:74:
         e8:b4:e3:58:37:37:07:63:55:e0:6a:72:80:8c:13:41:18:af:
         24:ee:be:c9:60:72:71:9d:cc:31:b2:bf:eb:a4:55:59:cd:98:
         8f:dc:8d:fa:28:e4:09:9f:78:ba:6a:70:0d:a2:32:c8:de:bf:
         a8:89:7d:89:4d:43:d2:b5:21:38:91:26:6e:ca:ea:22:bd:82:
         11:1a:a1:1d:72:ed:2f:eb:18:30:86:11:33:4c:5c:51:23:4d:
         94:f6:4f:a0:ce:89:56:9c:d4:38:0e:ff:5f:38:4f:b7:60:55:
         96:31:de:94:a9:39:cf:20:86:10:c0:f4:79:fd:fc:4a:8b:ad:
         a6:b8:83:d7:b9:15:41:6c:d8:2e:bf:b3:6f:b0:c7:b8:6c:a2:
         b3:eb:12:98:c4:4b:6b:88:a1:69:58:c8:d3:64:24:b6:c0:22:
         14:7f:8a:84:e1:cf:df:49:7f:53:02:7d:86:9f:9d:4a:ba:08:
         91:ff:19:c4:40:a2:ef:b9:af:d1:0d:fb:6c:a0:be:22:38:6a:
         c5:eb:a4:fc:9d:47:62:25:52:9e:a9:06:44:7b:3d:73:24:12:
         e5:da:1d:35:7a:82:9f:41:82:99:1d:4c:1d:ac:3a:fe:b4:ea:
         0c:a6:5e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----