Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/DBEED7983EDB11EFB685212DC4F9AE02/cOCKcSHNNs9zxMpCgOyt2Dc5JKg.mft
File:                     cOCKcSHNNs9zxMpCgOyt2Dc5JKg.mft (raw, json)
Hash identifier:          erroxDvQqSyy3CKeQhUC59/KwTDvvXQnDMBSqCi3bMc=
Subject key identifier:   13:88:37:79:7E:C2:3D:B7:2F:78:02:07:03:CA:5B:2A:10:51:13:9D
Authority key identifier: 70:E0:8A:71:21:CD:36:CF:73:C4:CA:42:80:EC:AD:D8:37:39:24:A8
Certificate issuer:       /CN=A919EAF3/serialNumber=70E08A7121CD36CF73C4CA4280ECADD8373924A8
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cOCKcSHNNs9zxMpCgOyt2Dc5JKg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAF3/DBEED7983EDB11EFB685212DC4F9AE02/cOCKcSHNNs9zxMpCgOyt2Dc5JKg.mft
Manifest number:          34
Signing time:             Sat 12 Oct 2024 16:25:01 +0000
Manifest this update:     Sat 12 Oct 2024 16:25:01 +0000
Manifest next update:     Sat 19 Oct 2024 16:25:01 +0000
Files and hashes:         1: cOCKcSHNNs9zxMpCgOyt2Dc5JKg.crl (hash: OzPj2FtMAyd6/bUr0/YZRyyKrcm1yM1OR2V4ZH4pFMc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAF3/serialNumber=70E08A7121CD36CF73C4CA4280ECADD8373924A8
        Validity
            Not Before: Oct 12 16:25:01 2024 GMT
            Not After : Oct 19 16:25:01 2024 GMT
        Subject: CN=670aa2dd-fb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:01:df:ab:a8:33:99:64:01:57:53:ef:ef:
                    61:d9:0b:21:d7:f5:b5:d5:8f:36:7c:cf:cc:9c:bd:
                    0f:96:85:34:0b:d4:ff:86:d3:17:2f:b8:3b:f0:5c:
                    9b:b0:eb:8f:44:1e:1e:7f:d5:07:eb:f3:ae:65:af:
                    30:17:2e:93:57:57:6a:d6:4a:0b:ed:11:bf:24:5b:
                    82:83:0c:fd:b4:31:3f:5b:d2:6f:99:2c:a5:3b:90:
                    05:57:94:1a:60:f4:c1:6b:fe:e0:ab:c4:19:3f:6f:
                    77:0e:bf:3d:e3:1c:7c:a1:23:2c:d2:c0:79:98:5e:
                    de:61:ae:3c:37:f4:77:af:f9:0e:78:bd:b9:6a:4c:
                    f4:68:16:cf:f0:ac:30:e2:71:7e:64:43:40:99:74:
                    26:1c:0f:65:5b:56:fd:89:25:dc:e0:31:3b:c8:46:
                    0e:91:b1:9f:43:2f:d4:3d:34:91:16:76:3e:40:35:
                    ba:6d:8d:f3:26:a6:e2:28:0f:f1:78:82:03:99:2d:
                    01:c9:bb:c5:67:39:33:d2:67:00:36:7e:67:24:c6:
                    47:73:ca:05:76:78:5b:c5:00:19:5b:ce:d6:f3:6b:
                    dc:a5:eb:03:1d:a2:6a:bc:5c:bf:55:0b:15:1b:7a:
                    25:d7:c9:fe:93:bc:50:fd:ad:c8:35:65:fa:c7:0d:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:88:37:79:7E:C2:3D:B7:2F:78:02:07:03:CA:5B:2A:10:51:13:9D
            X509v3 Authority Key Identifier:
                keyid:70:E0:8A:71:21:CD:36:CF:73:C4:CA:42:80:EC:AD:D8:37:39:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAF3/DBEED7983EDB11EFB685212DC4F9AE02/cOCKcSHNNs9zxMpCgOyt2Dc5JKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cOCKcSHNNs9zxMpCgOyt2Dc5JKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/DBEED7983EDB11EFB685212DC4F9AE02/cOCKcSHNNs9zxMpCgOyt2Dc5JKg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:4a:21:67:3f:e1:4f:48:d3:a2:52:52:62:fd:b6:1a:21:f3:
         ce:1b:08:cb:e7:4b:76:c9:e8:61:6c:e2:f8:12:5d:7e:b5:2e:
         7d:b9:ab:59:8b:fc:d6:ac:52:b5:a8:5c:e3:11:b4:8d:02:20:
         e0:f4:5b:fd:eb:d8:e9:3f:dc:d3:34:49:97:7e:d7:6a:1a:c3:
         2a:1a:22:b0:1b:d5:2a:1e:7c:00:0c:e5:42:2a:ea:56:1a:ff:
         e8:62:ef:5a:30:b5:89:ea:10:d5:ed:60:ce:84:a7:75:1f:9a:
         8c:4d:37:da:ba:55:f3:90:4e:f8:77:b3:41:5d:3a:d5:df:a0:
         74:2a:fd:f2:70:33:c9:b3:d6:f6:d6:a7:e1:59:5e:4d:9d:e9:
         85:c7:05:9c:95:35:2b:6e:24:57:52:79:da:11:bd:d9:49:c2:
         4b:a4:00:54:38:d2:77:bf:e5:3f:79:2d:da:98:ed:d9:f9:cd:
         96:5b:34:f7:1f:49:c7:3b:4c:fe:6c:52:fe:c2:32:87:20:dc:
         3a:e2:80:60:2a:6d:be:0f:fe:50:65:c9:9a:f2:9e:7b:43:d3:
         e9:ab:fc:59:cb:49:fb:33:76:9c:be:4e:ab:c0:9f:4e:59:b3:
         ac:40:b0:47:6a:61:53:09:a8:8f:ed:21:0c:c0:cb:30:85:fc:
         0c:7e:6f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----