Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
File:                     SL_YCBmvF_vAh15iBvAoIqewTpg.mft (raw, json)
Hash identifier:          RUgpacwGuZS2BJG9nXHLJOSLFODQwjOjwUIq2Jl5lAE=
Subject key identifier:   78:13:F2:3D:84:C5:05:19:5E:38:DF:C4:52:81:FA:CD:0E:46:68:3F
Authority key identifier: 48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98
Certificate issuer:       /CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
Manifest number:          FF
Signing time:             Mon 19 Feb 2024 13:17:23 +0000
Manifest this update:     Mon 19 Feb 2024 13:17:22 +0000
Manifest next update:     Mon 26 Feb 2024 13:17:22 +0000
Files and hashes:         1: SL_YCBmvF_vAh15iBvAoIqewTpg.crl (hash: 0ZEfqTB6+eShrzIFmwaroSWXQut51vgZht6Pq2sYFIA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
        Validity
            Not Before: Feb 19 13:17:22 2024 GMT
            Not After : Feb 26 13:17:22 2024 GMT
        Subject: CN=65d354e3-45ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:62:1a:17:fb:46:d4:c5:0d:15:8e:d7:78:
                    60:6f:d7:6e:b2:ca:26:85:35:93:71:f6:51:71:f3:
                    f1:85:92:1d:31:6a:f8:22:ec:92:12:7b:6a:bd:bd:
                    0f:c7:28:2d:f5:55:18:4e:a9:8b:88:33:88:c2:51:
                    a4:74:17:ba:ff:12:40:92:9f:11:4d:38:75:b6:13:
                    0f:80:9c:58:fc:bf:3f:fd:d3:77:08:15:dd:16:48:
                    11:7e:b0:31:8a:90:54:69:2e:d5:d5:d2:90:f7:4b:
                    8c:95:6d:87:9b:1f:a2:73:d3:65:8c:00:3a:3c:6d:
                    b1:4c:db:a5:b0:64:23:c0:2a:7d:52:0e:39:ba:f4:
                    d8:07:6c:c4:3a:50:54:85:e4:61:01:5c:ac:34:31:
                    78:ef:6c:b1:a1:aa:98:9d:d6:8c:e6:1e:c4:51:df:
                    39:e0:85:30:76:70:a3:e6:94:5a:1d:88:b0:36:d9:
                    e1:fc:62:b7:72:84:85:07:b1:c9:3f:c2:30:49:d2:
                    cf:28:4d:e7:c0:49:52:6f:a5:f7:a9:ff:6f:cd:6a:
                    b0:f6:c8:ab:03:ce:d0:6c:df:00:91:08:b5:84:ea:
                    d0:67:82:f1:1a:09:02:7d:c3:3a:32:41:3d:27:eb:
                    51:0f:16:f6:98:2e:d5:25:54:9f:d6:fb:11:d4:58:
                    22:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:13:F2:3D:84:C5:05:19:5E:38:DF:C4:52:81:FA:CD:0E:46:68:3F
            X509v3 Authority Key Identifier:
                keyid:48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:be:9e:f6:71:90:f8:28:4f:b0:3d:7a:e7:a0:e7:23:76:d2:
         d2:19:d4:ea:49:62:51:10:86:08:95:9a:b4:77:05:18:23:6c:
         18:f9:2d:1c:38:f3:0c:9f:37:84:fd:13:b8:62:1a:2c:83:f9:
         06:13:80:d8:b0:f3:9c:01:01:a2:56:1f:f6:9a:ff:a5:4b:82:
         09:dc:97:20:d4:64:8f:00:bb:c4:df:df:c5:e8:1d:92:af:ae:
         15:67:3c:7d:7e:f1:48:16:80:5f:13:a0:44:cb:e3:a6:43:ab:
         30:80:88:86:ae:2d:73:2b:7a:14:92:89:f4:0f:43:75:7a:b0:
         44:08:85:cc:2e:ad:59:92:21:d2:cc:92:bd:ac:dc:1a:72:e1:
         e5:7c:66:f2:08:1e:02:f2:bd:f2:d0:66:eb:bd:f6:29:ef:89:
         3e:2d:62:26:c7:a3:e5:23:af:b8:30:04:fc:2c:0e:d6:cb:b5:
         79:15:72:83:a9:20:06:1c:a3:85:db:59:e4:69:bf:67:64:e2:
         ee:85:ac:41:3f:ea:ad:fe:d3:12:54:c9:1c:bf:5e:4f:f9:b6:
         b4:f1:04:c6:fe:e3:db:e5:b0:7d:fa:3d:5c:9c:98:6f:30:b1:
         ac:85:7a:04:b1:97:35:00:93:61:9d:46:5d:c3:b8:da:48:ff:
         61:dc:27:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 22:14:54 2024 by rpki-client on console-fra.rpki-client.org