Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195CA5/4F7757B0295211EB83D67643C4F9AE02/lD5m420rmZhrIjvyxSoAQRfl9sU.mft
File:                     lD5m420rmZhrIjvyxSoAQRfl9sU.mft (raw, json)
Hash identifier:          dBijxDbp+JjU35MSbirlvmys0UfT2yGORa7KiazkDPg=
Subject key identifier:   30:99:4B:D8:44:72:66:94:44:36:1A:B1:B3:76:B7:1A:20:63:53:8B
Authority key identifier: 94:3E:66:E3:6D:2B:99:98:6B:22:3B:F2:C5:2A:00:41:17:E5:F6:C5
Certificate issuer:       /CN=A9195CA5/serialNumber=943E66E36D2B99986B223BF2C52A004117E5F6C5
Certificate serial:       05BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lD5m420rmZhrIjvyxSoAQRfl9sU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195CA5/4F7757B0295211EB83D67643C4F9AE02/lD5m420rmZhrIjvyxSoAQRfl9sU.mft
Manifest number:          05B8
Signing time:             Wed 29 Mar 2023 00:15:48 +0000
Manifest this update:     Wed 29 Mar 2023 00:15:47 +0000
Manifest next update:     Wed 05 Apr 2023 00:15:47 +0000
Files and hashes:         1: lD5m420rmZhrIjvyxSoAQRfl9sU.crl (hash: 02dhSGlU26/e+qelPjiMpaV42qlYddk8WIQrT7vA3sg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1470 (0x5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195CA5/serialNumber=943E66E36D2B99986B223BF2C52A004117E5F6C5
        Validity
            Not Before: Mar 29 00:15:47 2023 GMT
            Not After : Apr  5 00:15:47 2023 GMT
        Subject: CN=64238333-c379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:c8:53:e7:7f:20:98:87:8c:14:20:56:13:
                    3b:2f:87:18:91:62:14:60:5c:3a:ce:c1:37:da:12:
                    81:d7:b6:35:8e:53:f2:5f:f8:88:03:ae:6f:34:fe:
                    e5:0d:79:7f:8a:33:2b:84:40:75:c1:1d:96:4d:12:
                    95:04:d4:29:8c:cc:fe:2c:bd:30:75:50:d9:7d:e6:
                    75:e2:57:1f:7e:a4:41:22:96:0c:48:45:da:fd:b9:
                    9b:43:e4:e8:29:53:6b:46:b4:4d:fa:d6:a9:0c:46:
                    de:3f:35:d0:b2:46:0b:2c:6a:c5:d1:cb:85:b9:af:
                    8c:49:1e:13:76:4f:8d:6c:d0:29:e0:42:84:a3:15:
                    34:52:19:32:d6:94:b4:a8:5e:30:2a:7b:7a:30:54:
                    e9:84:f7:e6:80:d3:cf:5d:af:29:63:56:30:e8:70:
                    3d:d7:aa:87:54:77:05:bb:a8:45:b1:fc:ab:31:74:
                    71:d5:af:51:29:e9:69:b0:63:16:dd:4c:01:4d:26:
                    16:2d:ec:31:8e:39:89:99:bc:94:6a:ea:50:14:36:
                    cd:79:12:bb:63:27:ca:7f:97:bf:ae:eb:f5:4f:97:
                    10:5d:74:a9:68:83:e5:83:ae:08:62:37:84:d8:2a:
                    ea:8a:b8:75:26:ec:f2:35:a9:88:5a:36:ae:7b:54:
                    1c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:99:4B:D8:44:72:66:94:44:36:1A:B1:B3:76:B7:1A:20:63:53:8B
            X509v3 Authority Key Identifier:
                keyid:94:3E:66:E3:6D:2B:99:98:6B:22:3B:F2:C5:2A:00:41:17:E5:F6:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195CA5/4F7757B0295211EB83D67643C4F9AE02/lD5m420rmZhrIjvyxSoAQRfl9sU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lD5m420rmZhrIjvyxSoAQRfl9sU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195CA5/4F7757B0295211EB83D67643C4F9AE02/lD5m420rmZhrIjvyxSoAQRfl9sU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:1d:94:2c:10:3f:c6:7e:35:bb:ef:96:98:ed:d3:73:f3:9e:
         1e:e9:63:ed:7b:d4:56:93:e6:ad:94:53:98:8b:60:6f:16:82:
         d1:f1:b5:c0:4b:6d:2d:38:c1:0c:0b:43:20:6e:3f:2d:d9:66:
         5c:91:8e:4a:06:0d:8b:df:6b:9c:45:88:54:4d:6c:13:97:1e:
         d2:8f:10:cd:c8:0b:cf:f1:13:78:73:78:c3:3e:68:6f:64:ed:
         3d:eb:90:80:7e:44:89:8a:b7:fd:e4:ad:e3:91:e1:4c:bc:45:
         03:d5:cb:0a:b9:12:38:48:bb:3b:dd:b6:33:b5:c0:09:c7:56:
         12:f5:83:b2:4f:2d:d9:fe:79:da:c2:74:41:e5:84:a5:39:d2:
         16:f0:90:b3:6d:d7:ae:17:98:05:00:85:e0:f3:32:bf:c4:41:
         a3:36:0e:38:fc:41:a3:bc:bf:80:a4:e6:f7:67:ae:a4:96:a1:
         98:7b:28:83:d8:ca:5d:fb:22:13:87:e7:ec:0f:da:ce:13:68:
         31:80:2f:44:32:07:48:42:a8:c9:d6:1a:b7:32:1a:3f:b4:da:
         96:9f:39:7f:05:9e:10:6a:90:4f:6c:7d:5d:5c:f0:46:8e:d3:
         a8:ee:2a:20:b2:23:6c:dc:d5:96:11:ef:51:0b:3d:14:ad:30:
         5c:7e:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----