Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.mft
File:                     JzleQrl9eM47L4WUayfnxogHVDI.mft (raw, json)
Hash identifier:          zglFckDOSPtDFekc5VtbeklFC9RcTod0a/Lh7uSbBpM=
Subject key identifier:   B0:EF:DF:25:11:69:01:76:B4:F9:AC:41:E0:56:D1:D7:B2:D5:99:84
Authority key identifier: 27:39:5E:42:B9:7D:78:CE:3B:2F:85:94:6B:27:E7:C6:88:07:54:32
Certificate issuer:       /CN=A9199560/serialNumber=27395E42B97D78CE3B2F85946B27E7C688075432
Certificate serial:       06E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzleQrl9eM47L4WUayfnxogHVDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.mft
Manifest number:          06DD
Signing time:             Mon 18 Nov 2024 23:39:16 +0000
Manifest this update:     Mon 18 Nov 2024 23:39:16 +0000
Manifest next update:     Mon 25 Nov 2024 23:39:16 +0000
Files and hashes:         1: JzleQrl9eM47L4WUayfnxogHVDI.crl (hash: 5kVcDQQcRhkKaLWcfNuKR2g2yUTtaixJHBqQuXafmk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769 (0x6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199560/serialNumber=27395E42B97D78CE3B2F85946B27E7C688075432
        Validity
            Not Before: Nov 18 23:39:16 2024 GMT
            Not After : Nov 25 23:39:16 2024 GMT
        Subject: CN=673bd024-6fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:70:89:0c:fe:df:96:70:6c:67:60:39:46:
                    42:7f:83:2f:4f:e8:33:c4:59:9a:75:b4:04:c3:07:
                    5c:12:8b:21:a4:66:e0:29:6f:b5:5f:c4:9a:54:41:
                    31:ee:9a:8d:e8:7c:de:0e:32:8a:e0:7a:4e:75:ea:
                    a2:6c:64:34:f2:fa:37:6f:8d:3c:9a:5e:a9:66:c4:
                    e1:23:10:1d:a6:b9:fb:7b:42:db:2d:06:b4:0e:8f:
                    df:b4:51:80:31:1f:a0:e3:1d:15:10:f7:b6:de:e5:
                    6e:ba:fb:6e:fa:10:bc:a5:37:31:ce:a4:52:40:6c:
                    6c:0a:29:a9:41:05:bc:a7:99:5d:56:3a:0a:5d:4c:
                    8d:34:63:05:02:83:77:e9:c6:64:70:ac:30:00:95:
                    52:4b:1d:82:fe:8d:4e:55:ac:7a:b8:11:d7:46:e1:
                    24:5f:eb:c8:60:f9:0d:de:d5:df:6a:d8:0e:d0:9d:
                    9d:f9:82:81:98:ba:7e:14:14:ef:40:7c:43:31:d2:
                    37:5c:67:b2:f5:1b:97:19:c5:f1:51:01:8f:48:c0:
                    f0:36:85:a1:4b:50:a8:94:28:fb:09:59:dd:52:ea:
                    a7:da:2a:57:51:7d:70:d7:66:82:ba:fe:c8:46:e3:
                    ee:34:24:67:43:e6:1f:cf:d1:a0:dc:1b:59:b0:bb:
                    8e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EF:DF:25:11:69:01:76:B4:F9:AC:41:E0:56:D1:D7:B2:D5:99:84
            X509v3 Authority Key Identifier:
                keyid:27:39:5E:42:B9:7D:78:CE:3B:2F:85:94:6B:27:E7:C6:88:07:54:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JzleQrl9eM47L4WUayfnxogHVDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199560/CE17025C2E7D11EB9EF74267C4F9AE02/JzleQrl9eM47L4WUayfnxogHVDI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:9f:1a:61:a3:eb:2c:22:4e:ed:cf:50:c9:ea:7f:2a:ab:36:
         ad:0c:14:a6:d0:8f:90:20:14:cd:96:f0:09:a5:23:21:23:38:
         47:d1:a4:69:dd:ba:d5:60:2b:a0:6c:0a:2e:e9:d4:94:2b:69:
         57:b6:e6:cb:1d:15:4b:24:98:7b:0a:37:c0:50:35:f4:bd:f1:
         30:ef:ed:5a:d1:c5:0d:ab:3c:e1:e5:74:f7:15:3d:55:25:38:
         37:f3:46:1d:e7:0f:50:d1:40:2c:d3:10:b2:7f:41:39:97:61:
         8c:21:c7:d4:08:8e:fe:04:e0:a1:da:ba:a1:1d:32:a1:ee:a8:
         51:f5:3d:30:ef:26:d7:a1:b1:8c:19:5e:15:2c:da:80:8f:42:
         10:72:30:36:6a:9d:1a:cb:e3:bf:f6:78:e0:0e:aa:6a:1f:c0:
         ab:dd:f3:b0:0b:51:ef:f1:9a:b7:70:8b:54:86:d5:fc:9f:38:
         92:18:70:4a:f4:f8:6d:36:15:5a:ce:84:bd:7b:3c:9d:de:30:
         bd:46:8e:08:58:2d:f1:00:a0:17:15:11:d9:aa:ad:29:42:24:
         0c:eb:b9:f5:b8:df:1c:66:ff:66:62:54:00:f3:d3:3a:6a:9d:
         a4:68:03:bd:b2:5d:1b:b7:27:13:af:9f:23:4e:2c:28:97:8a:
         44:4f:62:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk1NjAxMTAvBgNVBAUTKDI3Mzk1RTQyQjk3RDc4Q0UzQjJGODU5NDZCMjdFN0M2
ODgwNzU0MzIwHhcNMjQxMTE4MjMzOTE2WhcNMjQxMTI1MjMzOTE2WjAYMRYwFAYD
VQQDEw02NzNiZDAyNC02ZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYxwiQz+35ZwbGdgOUZCf4MvT+gzxFmadbQEwwdcEoshpGbgKW+1X8SaVEEx
7pqN6HzeDjKK4HpOdeqibGQ08vo3b408ml6pZsThIxAdprn7e0LbLQa0Do/ftFGA
MR+g4x0VEPe23uVuuvtu+hC8pTcxzqRSQGxsCimpQQW8p5ldVjoKXUyNNGMFAoN3
6cZkcKwwAJVSSx2C/o1OVax6uBHXRuEkX+vIYPkN3tXfatgO0J2d+YKBmLp+FBTv
QHxDMdI3XGey9RuXGcXxUQGPSMDwNoWhS1ColCj7CVndUuqn2ipXUX1w12aCuv7I
RuPuNCRnQ+Yfz9Gg3BtZsLuOKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDv3yUR
aQF2tPmsQeBW0dey1ZmEMB8GA1UdIwQYMBaAFCc5XkK5fXjOOy+FlGsn58aIB1Qy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTU2MC9DRTE3MDI1QzJF
N0QxMUVCOUVGNzQyNjdDNEY5QUUwMi9KemxlUXJsOWVNNDdMNFdVYXlmbnhvZ0hW
REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p6bGVRcmw5ZU00N0w0V1VheWZueG9nSFZESS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTU2MC9DRTE3MDI1QzJFN0QxMUVCOUVGNzQyNjdDNEY5QUUwMi9KemxlUXJsOWVN
NDdMNFdVYXlmbnhvZ0hWREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCenxpho+ssIk7tz1DJ6n8qqzatDBSm0I+QIBTNlvAJpSMhIzhH0aRp
3brVYCugbAou6dSUK2lXtubLHRVLJJh7CjfAUDX0vfEw7+1a0cUNqzzh5XT3FT1V
JTg380Yd5w9Q0UAs0xCyf0E5l2GMIcfUCI7+BOCh2rqhHTKh7qhR9T0w7ybXobGM
GV4VLNqAj0IQcjA2ap0ay+O/9njgDqpqH8Cr3fOwC1Hv8Zq3cItUhtX8nziSGHBK
9PhtNhVazoS9ezyd3jC9Ro4IWC3xAKAXFRHZqq0pQiQM67n1uN8cZv9mYlQA89M6
ap2kaAO9sl0btycTr58jTiwol4pET2LU
-----END CERTIFICATE-----