Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199C8E/BEA98DE4523B11E6BA773D53C4F9AE02/RXoHNiNbBnBk9g4lkcVQrEmsKCI.mft
File:                     RXoHNiNbBnBk9g4lkcVQrEmsKCI.mft (raw, json)
Hash identifier:          tiNVLZs2ShL64S0mJ/HxxRgTMGKBZxqzispYBcYLVlg=
Subject key identifier:   36:05:52:55:5F:49:9E:6E:FA:AF:99:C0:CC:5A:11:3E:F9:44:AC:1F
Authority key identifier: 45:7A:07:36:23:5B:06:70:64:F6:0E:25:91:C5:50:AC:49:AC:28:22
Certificate issuer:       /CN=A9199C8E/serialNumber=457A0736235B067064F60E2591C550AC49AC2822
Certificate serial:       1D34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXoHNiNbBnBk9g4lkcVQrEmsKCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199C8E/BEA98DE4523B11E6BA773D53C4F9AE02/RXoHNiNbBnBk9g4lkcVQrEmsKCI.mft
Manifest number:          1D2D
Signing time:             Tue 18 Oct 2022 16:35:12 +0000
Manifest this update:     Tue 18 Oct 2022 16:35:12 +0000
Manifest next update:     Tue 25 Oct 2022 16:35:12 +0000
Files and hashes:         1: RXoHNiNbBnBk9g4lkcVQrEmsKCI.crl (hash: Wx9cG9IIcj4LPZIqPVXNb3ls6U2mlNKzPe7E05YUvuU=)
                          2: 8A09EE84523C11E6B1857456C4F9AE02.roa (hash: 439HtKcJ/wOqpr8fhX/RuA1qQRYioUdPEhAbSkqXmJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7476 (0x1d34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199C8E/serialNumber=457A0736235B067064F60E2591C550AC49AC2822
        Validity
            Not Before: Oct 18 16:35:12 2022 GMT
            Not After : Oct 25 16:35:12 2022 GMT
        Subject: CN=634ed5c0-9d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0e:42:7f:d3:44:1f:6e:17:39:1b:35:20:ad:
                    04:b1:9b:b7:fb:2d:39:71:b9:ad:ab:6c:aa:66:32:
                    e8:bb:50:e5:42:29:78:00:3a:44:16:73:cd:79:cb:
                    e6:e3:39:2b:8e:06:1f:91:8b:31:94:d6:4f:77:2d:
                    85:3c:af:62:54:4c:3e:65:c2:c1:28:f2:5c:33:bc:
                    44:4e:9a:75:e8:ab:45:da:fa:da:db:50:97:20:5f:
                    2a:80:27:5f:6d:4e:bb:41:f4:2c:42:28:27:e5:90:
                    79:5d:80:47:87:d9:08:50:57:4d:d2:ea:34:c9:31:
                    c5:a9:fb:04:a3:7d:bb:47:15:e6:ae:df:6a:4e:e2:
                    83:30:8c:75:12:d0:00:3f:f0:22:1e:ad:1f:5d:8e:
                    57:5e:eb:fb:8b:31:d2:72:0e:f0:62:01:44:91:a2:
                    ba:d2:ed:5e:b3:a4:86:8b:b2:4d:36:38:ac:ca:a6:
                    b1:fa:f7:99:25:c2:7a:14:77:f2:fa:eb:bf:ff:78:
                    c7:ff:b7:d8:50:b9:c8:8e:e3:43:40:ac:e7:0c:ba:
                    c7:78:f3:31:1b:6a:cb:32:f8:3e:e4:a3:91:ea:7c:
                    5a:3d:fc:05:cc:1d:e3:9d:88:7f:7b:ca:26:8b:cc:
                    32:29:5e:65:fc:33:1c:91:26:94:1a:19:3b:55:a0:
                    f2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:05:52:55:5F:49:9E:6E:FA:AF:99:C0:CC:5A:11:3E:F9:44:AC:1F
            X509v3 Authority Key Identifier:
                keyid:45:7A:07:36:23:5B:06:70:64:F6:0E:25:91:C5:50:AC:49:AC:28:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199C8E/BEA98DE4523B11E6BA773D53C4F9AE02/RXoHNiNbBnBk9g4lkcVQrEmsKCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RXoHNiNbBnBk9g4lkcVQrEmsKCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199C8E/BEA98DE4523B11E6BA773D53C4F9AE02/RXoHNiNbBnBk9g4lkcVQrEmsKCI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:26:e1:88:e9:4b:c5:c9:06:79:2a:ec:32:19:1e:be:c6:25:
         1e:7f:5a:38:3b:dd:b9:00:a9:ad:26:26:20:be:5b:6c:2c:fd:
         36:66:e0:95:e8:b2:9b:28:43:39:49:ee:eb:ec:05:51:77:d6:
         93:df:95:5a:7e:df:b2:89:b7:39:96:14:85:72:b1:49:ba:15:
         de:50:e5:b3:60:a2:06:42:bd:81:b2:55:f4:8d:55:5c:03:e9:
         3c:c6:61:d3:04:ea:a7:02:9d:b2:67:20:77:b6:78:b3:db:a9:
         45:a9:1a:fb:0d:3a:31:e2:7b:06:25:98:0d:5b:78:58:d9:e3:
         77:83:7d:e7:f2:43:f0:f5:16:5c:21:86:ac:1b:5c:55:c7:db:
         25:e8:7a:13:74:5b:77:be:2f:45:c7:45:12:88:18:49:93:5a:
         3f:c5:82:07:2e:31:92:f9:6f:97:ff:35:b2:f7:27:65:35:30:
         b7:d3:52:40:00:b7:d2:85:b1:9e:32:c3:78:a2:4c:a8:86:30:
         33:d0:b0:08:94:fb:3d:29:5a:e1:e5:83:24:99:9f:42:17:8d:
         ee:06:87:61:f7:13:95:d8:f2:b4:02:2c:ed:4a:90:f2:9b:20:
         a8:c8:3a:67:38:6d:44:0b:c9:9e:72:f3:31:8f:e0:07:9c:3c:
         aa:94:95:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----