Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91937DB/8E96701A532811EC9ED7C844C4F9AE02/DLSmBFJurSo0wdm6HTiNovZ50v4.mft
File:                     DLSmBFJurSo0wdm6HTiNovZ50v4.mft (raw, json)
Hash identifier:          2pdfLZPwIOtMTrRwFNsZo/1zpkc1nJ6+0yIU92+mpMQ=
Subject key identifier:   7F:D9:CB:17:92:CC:18:CF:BE:D2:E3:CD:60:67:0B:5B:A4:C5:B4:91
Authority key identifier: 0C:B4:A6:04:52:6E:AD:2A:34:C1:D9:BA:1D:38:8D:A2:F6:79:D2:FE
Certificate issuer:       /CN=A91937DB/serialNumber=0CB4A604526EAD2A34C1D9BA1D388DA2F679D2FE
Certificate serial:       0280
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DLSmBFJurSo0wdm6HTiNovZ50v4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91937DB/8E96701A532811EC9ED7C844C4F9AE02/DLSmBFJurSo0wdm6HTiNovZ50v4.mft
Manifest number:          0280
Signing time:             Mon 05 Dec 2022 03:56:41 +0000
Manifest this update:     Mon 05 Dec 2022 03:56:40 +0000
Manifest next update:     Mon 12 Dec 2022 03:56:40 +0000
Files and hashes:         1: DLSmBFJurSo0wdm6HTiNovZ50v4.crl (hash: 9e9snpRuhoMvhRnRXtuhtNixDqq7UzymzGOqacHgyus=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91937DB/serialNumber=0CB4A604526EAD2A34C1D9BA1D388DA2F679D2FE
        Validity
            Not Before: Dec  5 03:56:40 2022 GMT
            Not After : Dec 12 03:56:40 2022 GMT
        Subject: CN=638d6bf9-edb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:2a:38:7d:60:cf:45:c2:c3:1e:82:2a:22:
                    3c:80:08:8c:2b:27:8d:0d:06:a1:be:c6:54:1d:b9:
                    74:ff:88:26:ec:d6:a1:0f:8e:8c:22:07:40:67:5e:
                    65:5f:06:c0:f8:89:81:f7:2c:56:06:b5:75:96:9d:
                    83:69:c3:8a:bb:bc:0f:ea:4a:75:ff:1a:65:54:ab:
                    92:5d:06:36:ba:de:85:ea:9d:3b:23:30:a8:13:2c:
                    91:d0:c3:6a:f2:b9:23:47:ed:c1:18:76:a8:1f:6d:
                    a1:e9:a5:bc:82:96:ac:04:a0:a6:26:a3:8b:85:e6:
                    c4:8b:46:b1:41:42:b6:88:0c:f9:06:6f:e2:ef:60:
                    5f:5a:8c:74:44:3f:a8:64:78:1e:b8:fc:10:57:e3:
                    dd:b8:c0:f2:bc:a9:8e:27:99:88:81:a2:e7:63:0e:
                    55:98:58:34:62:6b:b2:fc:ed:b1:38:29:45:10:00:
                    93:e0:cc:2a:84:dc:d4:14:e8:f8:44:44:10:9a:a3:
                    e2:f4:cf:dc:4d:c9:b1:3c:3e:6f:7f:10:04:69:51:
                    b7:0b:11:c0:67:37:39:ef:b9:f5:67:b3:13:32:61:
                    c7:97:40:2c:f5:66:f7:e6:33:3d:17:b9:fc:f8:75:
                    2c:ab:57:e1:5b:a5:82:22:5f:4e:4b:37:a9:4e:50:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D9:CB:17:92:CC:18:CF:BE:D2:E3:CD:60:67:0B:5B:A4:C5:B4:91
            X509v3 Authority Key Identifier:
                keyid:0C:B4:A6:04:52:6E:AD:2A:34:C1:D9:BA:1D:38:8D:A2:F6:79:D2:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91937DB/8E96701A532811EC9ED7C844C4F9AE02/DLSmBFJurSo0wdm6HTiNovZ50v4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DLSmBFJurSo0wdm6HTiNovZ50v4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91937DB/8E96701A532811EC9ED7C844C4F9AE02/DLSmBFJurSo0wdm6HTiNovZ50v4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:52:24:4a:0d:50:2f:c4:24:05:e9:45:57:6d:4a:88:6e:20:
         30:43:b6:54:2d:3a:fb:92:c7:e0:00:34:af:45:0e:db:68:d8:
         81:2f:47:79:9d:76:00:16:41:48:76:a2:28:d9:8f:d9:58:99:
         da:34:18:11:60:5c:c3:7c:d3:b4:1d:76:c6:ea:87:e7:13:1e:
         09:3d:4e:40:55:cc:db:99:b9:e4:33:02:fa:f6:e6:01:54:8b:
         c0:6b:38:74:1a:76:3a:22:92:a3:10:38:b2:68:52:eb:d1:70:
         97:16:84:a5:fe:a6:6b:f7:e9:c9:16:01:8f:cf:92:60:0d:59:
         62:df:db:d9:d1:a4:37:4c:ac:45:22:57:98:73:32:ef:62:b5:
         55:ab:9b:57:27:25:f3:ab:59:b1:78:e0:21:36:15:f6:98:7f:
         31:01:29:98:ff:70:d0:40:0f:c4:30:75:64:7b:72:9d:5f:2b:
         ae:69:78:8a:77:3d:20:e1:64:45:9e:0c:1c:d6:6d:ef:74:69:
         cd:a4:0e:91:8e:10:1f:57:ad:16:88:84:04:d0:3f:e7:61:6d:
         ad:f8:d7:15:22:39:e2:f4:49:c9:d9:3d:aa:9c:51:32:43:1d:
         bc:f7:51:a9:29:72:75:9c:d0:01:a4:b7:12:c8:00:61:c8:c1:
         77:d6:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----