Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91917EF/2F8C6278421111ECB0C0A060C4F9AE02/S0rec85QWER4Xs7uCnUEbWwvtUw.mft
File:                     S0rec85QWER4Xs7uCnUEbWwvtUw.mft (raw, json)
Hash identifier:          iFZQtlXlmeJYIF0oEAe05JUPq2CkljsMEJqK9z1QGiE=
Subject key identifier:   32:9A:35:19:94:75:AB:68:D7:9D:96:76:21:B3:07:2B:36:E7:D7:16
Authority key identifier: 4B:4A:DE:73:CE:50:58:44:78:5E:CE:EE:0A:75:04:6D:6C:2F:B5:4C
Certificate issuer:       /CN=A91917EF/serialNumber=4B4ADE73CE505844785ECEEE0A75046D6C2FB54C
Certificate serial:       0407
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0rec85QWER4Xs7uCnUEbWwvtUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91917EF/2F8C6278421111ECB0C0A060C4F9AE02/S0rec85QWER4Xs7uCnUEbWwvtUw.mft
Manifest number:          03FA
Signing time:             Fri 09 Aug 2024 02:40:07 +0000
Manifest this update:     Fri 09 Aug 2024 02:40:07 +0000
Manifest next update:     Fri 16 Aug 2024 02:40:07 +0000
Files and hashes:         1: S0rec85QWER4Xs7uCnUEbWwvtUw.crl (hash: dybo3AB/1XlSHKGPsZedkCdIl3jaWfDXf87I1dZ3jn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031 (0x407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91917EF/serialNumber=4B4ADE73CE505844785ECEEE0A75046D6C2FB54C
        Validity
            Not Before: Aug  9 02:40:07 2024 GMT
            Not After : Aug 16 02:40:07 2024 GMT
        Subject: CN=66b58187-3292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:be:a2:30:d3:8e:c0:71:f4:5d:99:f2:a8:
                    a6:d2:8b:f0:85:c6:84:6a:50:62:a7:86:da:9e:09:
                    a4:f9:f7:5a:c3:7a:b1:ec:c4:13:5f:47:24:18:f3:
                    53:2f:8b:91:ca:90:e8:59:87:82:86:a9:cc:73:44:
                    a8:65:eb:37:80:34:36:53:6e:87:94:4c:5d:42:bd:
                    9f:ab:ad:2f:2f:c2:9b:36:73:c9:c5:5f:f2:b8:df:
                    78:c5:1c:09:52:44:e6:29:13:54:39:54:92:6e:01:
                    86:81:d7:ae:e1:96:8d:1e:8c:4d:82:02:f1:27:aa:
                    83:7a:07:68:7b:40:a5:2d:83:4b:9c:34:86:65:06:
                    0f:8b:e8:6a:38:cb:4f:47:29:b1:4a:d3:f7:7a:b5:
                    5a:43:5c:3b:a7:ab:f5:d6:1f:06:aa:29:48:22:c4:
                    a4:dd:68:4e:84:d4:3a:2a:a3:fa:3a:a9:8a:ab:e0:
                    a6:77:7d:a3:fc:b0:2f:86:53:4e:9f:0e:cf:4a:87:
                    cb:1e:68:6f:ed:2f:fc:13:b4:b5:8b:ba:21:f3:23:
                    3b:24:b2:fa:73:e5:5b:2d:0c:9f:e8:3e:c2:df:c5:
                    7c:dc:58:87:84:2e:b9:11:d4:4d:82:12:82:1a:00:
                    b7:8b:1e:12:33:ef:8f:d8:9d:66:3d:a3:31:26:ea:
                    ff:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9A:35:19:94:75:AB:68:D7:9D:96:76:21:B3:07:2B:36:E7:D7:16
            X509v3 Authority Key Identifier:
                keyid:4B:4A:DE:73:CE:50:58:44:78:5E:CE:EE:0A:75:04:6D:6C:2F:B5:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91917EF/2F8C6278421111ECB0C0A060C4F9AE02/S0rec85QWER4Xs7uCnUEbWwvtUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0rec85QWER4Xs7uCnUEbWwvtUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91917EF/2F8C6278421111ECB0C0A060C4F9AE02/S0rec85QWER4Xs7uCnUEbWwvtUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e8:f6:c6:d8:3f:b6:06:67:13:ae:60:3e:1a:ab:71:f3:58:
         05:d8:ab:a6:1a:59:1c:09:3f:56:35:82:91:a1:77:48:9a:e7:
         a9:ab:f6:82:be:06:55:79:83:c8:9d:7d:bd:68:42:44:7c:16:
         99:e2:22:86:e1:7f:0c:c5:e2:ff:5b:fd:0d:53:3f:fa:d9:9d:
         be:30:d7:27:25:58:e9:a5:ac:5b:cb:2e:9f:2d:34:50:87:3f:
         64:93:46:c9:d4:73:27:72:a9:e6:7a:b0:1a:bc:76:9c:a5:19:
         7b:a8:0f:f0:9b:e1:17:f6:1e:1e:c7:94:25:aa:b8:11:f3:31:
         a9:b6:39:c2:f9:f1:e5:1d:28:1d:21:89:3a:0d:c5:73:37:60:
         d3:7b:fc:67:33:0b:90:e9:f0:21:39:00:07:a0:ae:a2:7d:95:
         5f:80:2c:08:2f:75:9d:29:5f:5f:bd:2d:28:74:9e:89:b5:db:
         04:5c:5f:2f:18:05:d5:ce:a9:58:26:bc:43:11:aa:c1:c3:e7:
         76:22:82:36:cd:a2:02:2e:7d:59:e7:61:54:c2:9d:db:5c:42:
         69:bd:f6:35:01:8a:d7:92:c4:05:88:64:98:91:40:5c:85:b7:
         e9:a1:55:02:8a:f0:ba:bf:5b:7c:b4:81:85:d1:d1:ee:b1:9e:
         3f:04:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----