Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193E80/1C97E8188A2C11E8AA7B8B1BC4F9AE02/JJotbKs-ncO-hp4i2FjfYVYOQS8.mft
File:                     JJotbKs-ncO-hp4i2FjfYVYOQS8.mft (raw, json)
Hash identifier:          abGG8xF2895osdsJw2H8GePrp/DP2qVqpBqCJtY2TfU=
Subject key identifier:   7D:15:63:55:20:4C:1C:A1:89:63:D5:2A:8A:2B:24:74:C7:28:DE:7E
Authority key identifier: 24:9A:2D:6C:AB:3E:9D:C3:BE:86:9E:22:D8:58:DF:61:56:0E:41:2F
Certificate issuer:       /CN=A9193E80/serialNumber=249A2D6CAB3E9DC3BE869E22D858DF61560E412F
Certificate serial:       12BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJotbKs-ncO-hp4i2FjfYVYOQS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193E80/1C97E8188A2C11E8AA7B8B1BC4F9AE02/JJotbKs-ncO-hp4i2FjfYVYOQS8.mft
Manifest number:          12AE
Signing time:             Wed 04 Oct 2023 17:20:32 +0000
Manifest this update:     Wed 04 Oct 2023 17:20:31 +0000
Manifest next update:     Wed 11 Oct 2023 17:20:31 +0000
Files and hashes:         1: JJotbKs-ncO-hp4i2FjfYVYOQS8.crl (hash: DKSgrXmd85ndb10etsAZAjqbUN+X5fGQoj1KqzmJe/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4798 (0x12be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193E80/serialNumber=249A2D6CAB3E9DC3BE869E22D858DF61560E412F
        Validity
            Not Before: Oct  4 17:20:31 2023 GMT
            Not After : Oct 11 17:20:31 2023 GMT
        Subject: CN=651d9ee0-5b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:64:58:89:0b:9b:5b:99:09:a4:c6:7a:f3:
                    f9:66:bc:3a:05:cf:c2:37:11:8d:aa:fb:5f:5c:55:
                    47:80:92:e3:d3:ca:53:4b:2c:42:dd:11:1b:6c:b4:
                    d6:ab:7e:71:ef:1d:7d:a2:20:d2:ab:ac:df:4b:f7:
                    6d:7d:8a:42:32:a4:b3:4b:89:20:1b:6d:b3:b3:c7:
                    c7:00:af:1c:00:dc:1e:9f:8b:d1:a7:8f:ea:40:23:
                    10:69:71:bc:70:5f:62:84:ce:83:c8:d7:73:f3:38:
                    81:c2:4f:9f:a1:68:96:86:66:43:0b:60:8b:3e:cc:
                    22:39:d5:19:27:37:79:72:8b:51:c5:72:63:c7:a6:
                    d1:54:d3:9b:12:84:90:5c:5d:e7:e6:dd:64:71:af:
                    92:10:d7:bd:0e:25:b8:91:2c:7c:87:5e:63:94:a0:
                    67:a5:b8:5f:2b:06:a5:25:6a:f5:ad:d5:49:ee:4e:
                    c5:a8:dd:73:ac:ef:ba:74:8e:d1:3b:5f:47:ad:c7:
                    5a:69:cc:3d:fd:48:25:20:79:66:47:30:b7:c7:a2:
                    a4:aa:a1:81:e8:ab:a4:19:3f:00:b8:08:cb:98:38:
                    32:a3:f1:dc:3f:2c:58:c2:26:21:a0:90:76:29:20:
                    47:f5:48:6a:78:4b:d5:e2:4c:cb:64:a7:09:a4:6a:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:63:55:20:4C:1C:A1:89:63:D5:2A:8A:2B:24:74:C7:28:DE:7E
            X509v3 Authority Key Identifier:
                keyid:24:9A:2D:6C:AB:3E:9D:C3:BE:86:9E:22:D8:58:DF:61:56:0E:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193E80/1C97E8188A2C11E8AA7B8B1BC4F9AE02/JJotbKs-ncO-hp4i2FjfYVYOQS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JJotbKs-ncO-hp4i2FjfYVYOQS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193E80/1C97E8188A2C11E8AA7B8B1BC4F9AE02/JJotbKs-ncO-hp4i2FjfYVYOQS8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:11:c5:c3:d9:cb:eb:f1:c4:ac:48:c4:e1:e5:59:2e:fa:5d:
         2d:53:a8:59:7c:27:60:41:0a:7f:3a:21:e9:bf:cf:0d:c2:83:
         a5:f1:96:47:4a:bd:46:bb:3a:9e:f6:76:c6:1f:84:90:a1:14:
         f9:5e:39:01:de:75:51:e9:86:85:5f:99:11:8e:54:2c:da:60:
         b1:33:9c:05:87:ab:70:aa:bc:c9:d4:4b:83:08:11:b3:21:2d:
         59:cf:82:00:62:15:56:31:f8:3b:76:d3:08:b3:15:d2:b6:cb:
         30:f6:23:d8:5f:53:46:98:31:2d:f7:1c:78:e1:36:52:17:db:
         e9:a6:6c:8f:41:a0:74:b6:c2:bc:1a:5e:38:93:79:4a:3e:76:
         99:f0:64:3f:64:51:b9:89:94:a7:73:d4:a7:4c:d2:9e:40:b8:
         23:04:ae:db:25:1a:de:c0:14:8c:97:9c:b7:f1:47:e8:37:d5:
         c2:09:34:3b:57:77:c7:d2:db:96:c1:91:66:8e:16:c6:f0:96:
         6d:cc:80:f4:8e:a6:69:9c:e9:83:a2:63:a9:72:b2:54:3e:5f:
         53:bd:58:ce:22:34:b9:1d:57:98:13:84:20:75:4a:75:c3:f2:
         f7:40:9f:a3:0c:10:4f:ec:7d:41:77:fb:a8:a7:31:1a:c5:b1:
         b9:70:87:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----