Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91976C9/0F9615B8E34D11E6B6B7021FC4F9AE02/3-RrPbIun4VThHCazKhJTv95MUY.mft
File:                     3-RrPbIun4VThHCazKhJTv95MUY.mft (raw, json)
Hash identifier:          GwZL+ICVX99tPVLQ31+AYf6CnzDqZpjkpce2Rqhvkxk=
Subject key identifier:   24:67:E4:4A:7F:86:38:7F:BD:A5:99:17:87:4D:14:41:58:E9:99:AD
Authority key identifier: DF:E4:6B:3D:B2:2E:9F:85:53:84:70:9A:CC:A8:49:4E:FF:79:31:46
Certificate issuer:       /CN=A91976C9/serialNumber=DFE46B3DB22E9F855384709ACCA8494EFF793146
Certificate serial:       1B67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-RrPbIun4VThHCazKhJTv95MUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91976C9/0F9615B8E34D11E6B6B7021FC4F9AE02/3-RrPbIun4VThHCazKhJTv95MUY.mft
Manifest number:          1B65
Signing time:             Fri 19 Apr 2024 04:51:31 +0000
Manifest this update:     Fri 19 Apr 2024 04:51:31 +0000
Manifest next update:     Fri 26 Apr 2024 04:51:31 +0000
Files and hashes:         1: 3-RrPbIun4VThHCazKhJTv95MUY.crl (hash: kHKA6QbWRIHFFN7885Wv2UGZlZV9KHyvJqHFa2E2hrw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7015 (0x1b67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91976C9/serialNumber=DFE46B3DB22E9F855384709ACCA8494EFF793146
        Validity
            Not Before: Apr 19 04:51:31 2024 GMT
            Not After : Apr 26 04:51:31 2024 GMT
        Subject: CN=6621f853-9be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8a:a5:e8:66:09:56:42:2d:2b:91:e6:4b:27:
                    2b:4f:6a:69:74:30:92:be:a0:34:c1:6f:59:93:04:
                    44:73:10:89:ce:27:03:27:2d:25:74:6f:ab:a9:d1:
                    e2:8d:50:26:fb:e1:7f:42:29:ba:ff:80:78:40:77:
                    e3:57:42:11:19:bb:2c:11:b4:ed:14:b2:19:91:c4:
                    71:c2:fb:8b:69:a0:7a:a0:63:01:d9:b7:44:bb:00:
                    0f:0a:40:34:64:dc:1e:e1:77:50:c7:87:a2:a6:31:
                    fe:d5:c1:82:25:4d:b8:51:27:00:a4:bc:87:eb:aa:
                    71:8f:40:47:2f:96:b4:ae:06:59:ac:48:34:d9:29:
                    0a:6e:f8:04:5c:9d:35:60:0d:a7:03:d6:58:7d:e7:
                    26:4e:f9:3b:cb:70:71:21:3e:e1:5d:7e:fa:c3:07:
                    2a:75:06:bf:f3:5b:86:dd:55:39:6c:f5:9a:27:af:
                    21:25:da:8a:8b:c7:71:f1:c2:23:16:f7:a5:e3:f0:
                    d9:69:f4:ef:b5:26:19:fe:76:ee:98:65:38:d3:56:
                    0b:bc:2c:e5:53:a0:66:e6:42:5a:42:5c:63:32:a8:
                    24:80:57:f0:e2:cf:7b:08:c6:7c:29:3a:a1:c4:f8:
                    77:2a:e2:ea:5d:77:9b:03:96:f5:59:89:e4:27:75:
                    c2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:67:E4:4A:7F:86:38:7F:BD:A5:99:17:87:4D:14:41:58:E9:99:AD
            X509v3 Authority Key Identifier:
                keyid:DF:E4:6B:3D:B2:2E:9F:85:53:84:70:9A:CC:A8:49:4E:FF:79:31:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91976C9/0F9615B8E34D11E6B6B7021FC4F9AE02/3-RrPbIun4VThHCazKhJTv95MUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3-RrPbIun4VThHCazKhJTv95MUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976C9/0F9615B8E34D11E6B6B7021FC4F9AE02/3-RrPbIun4VThHCazKhJTv95MUY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:bf:79:a9:40:4d:73:30:04:83:9f:0c:c7:ae:4e:24:24:2d:
         79:69:57:00:f2:e6:6f:b3:4b:95:8b:6d:bc:62:ea:46:69:71:
         ca:ef:0b:b6:db:05:73:15:56:09:f2:94:74:56:26:48:4f:27:
         52:df:d5:96:09:7e:f3:30:2c:0e:1f:c5:38:05:9a:a7:d7:fa:
         f4:b0:8a:aa:fc:fb:34:6e:97:0f:79:43:11:ca:a8:60:8f:14:
         08:7b:d2:75:0a:c3:4d:66:ea:50:2f:43:b2:72:a9:5a:f6:0f:
         08:04:f9:29:e5:d1:b2:1a:f6:68:75:1e:5f:c0:5f:f2:ba:26:
         bb:51:fd:31:33:05:9f:dc:22:25:5c:77:8d:7d:d2:66:e1:2b:
         47:58:82:4a:05:db:0e:5f:da:0f:58:24:f2:af:a9:57:d8:14:
         e3:8a:ca:80:26:ea:b8:5d:f8:e7:9c:0d:79:0d:b4:a4:be:97:
         65:9e:a9:b7:1f:0f:ff:f5:bb:28:dc:14:e0:f7:7e:87:6c:ce:
         45:ee:7e:c1:c1:ca:d0:64:92:75:b0:73:24:0f:b5:4f:12:77:
         29:97:e4:67:a2:ca:bc:ac:c2:41:36:5d:66:84:19:48:a2:b0:
         a5:84:46:d3:b9:e8:63:03:62:cc:7b:5e:db:9b:25:61:02:5f:
         b8:79:0c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----