Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
File:                     se6IcQY6AQgzW9-qPjoT-cnHkN4.mft (raw, json)
Hash identifier:          PWUWdjtUiBHX22nOY3wSEGnDt4IcdjpK912z6FXGUHs=
Subject key identifier:   3D:AB:CB:AA:6A:E4:2F:B5:55:34:38:24:12:D2:AC:7B:95:15:88:08
Authority key identifier: B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE
Certificate issuer:       /CN=A919EC2D/serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
Manifest number:          FD
Signing time:             Mon 19 Feb 2024 13:05:31 +0000
Manifest this update:     Mon 19 Feb 2024 13:05:31 +0000
Manifest next update:     Mon 26 Feb 2024 13:05:31 +0000
Files and hashes:         1: se6IcQY6AQgzW9-qPjoT-cnHkN4.crl (hash: olqPL1Dg6+Re2J14nMeljk07I98lNjXEhHbG4VP8EgM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D/serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE
        Validity
            Not Before: Feb 19 13:05:31 2024 GMT
            Not After : Feb 26 13:05:31 2024 GMT
        Subject: CN=65d3521b-9e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4d:49:74:7a:9b:67:cf:32:2f:53:63:4e:51:
                    bb:a7:a8:63:4a:f0:c8:25:9a:49:95:e9:00:c1:58:
                    76:30:0b:73:f1:d0:7a:38:ab:7e:5d:be:69:8a:11:
                    db:28:58:6f:06:23:1c:ad:75:ed:cc:da:75:b9:4e:
                    20:a8:61:0f:f3:03:6e:5e:cd:40:c8:02:35:ae:d3:
                    0c:4a:fb:e0:ec:67:8c:12:57:52:bb:eb:7f:8b:26:
                    5c:f1:13:8b:1e:e2:15:41:43:b5:60:3e:47:0e:70:
                    fa:e2:be:16:23:7c:e1:d1:bd:dc:12:79:5f:25:d2:
                    f0:e4:46:aa:d5:19:f4:a7:bc:3e:e7:18:c2:12:a2:
                    c3:9c:bc:78:fb:9b:25:23:68:c9:64:14:60:1d:10:
                    95:af:0a:e6:5a:d7:8f:e8:ab:af:41:db:3d:06:9c:
                    e0:38:de:1d:3a:bb:09:41:88:85:b2:5d:90:5e:78:
                    7a:62:db:3a:34:15:32:4f:03:55:47:12:57:f0:1a:
                    ef:05:86:a2:09:2f:17:07:16:31:6f:50:15:79:44:
                    78:28:9b:77:e7:43:ff:50:d6:61:4d:af:ae:59:f3:
                    59:15:9b:23:b9:38:2b:b1:8d:b3:bb:3c:9b:fa:f2:
                    81:77:56:8c:89:97:5b:a4:72:47:42:e9:c6:9e:3c:
                    da:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AB:CB:AA:6A:E4:2F:B5:55:34:38:24:12:D2:AC:7B:95:15:88:08
            X509v3 Authority Key Identifier:
                keyid:B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:db:6f:0c:41:d6:3f:2f:4e:de:de:e4:fd:8a:bc:72:73:63:
         bb:88:47:67:8d:d5:92:6a:d0:ef:5e:ff:a8:08:81:aa:5b:8a:
         83:a6:3b:68:57:58:f4:7a:e4:6b:e8:c3:19:f2:91:eb:e9:2d:
         27:09:cc:b9:91:27:d6:eb:99:8e:59:62:76:41:e5:b4:f1:da:
         ca:b4:99:1e:4a:ab:7c:c0:ce:e2:b2:86:43:3a:51:fc:70:20:
         f3:6c:6e:1a:34:06:b5:5b:74:29:67:e6:0a:86:71:5e:31:fb:
         47:ff:34:bc:f2:2b:cf:c0:47:fb:a0:91:ce:a9:f0:2a:41:fa:
         aa:23:a5:74:26:db:6d:0c:c0:b2:e4:ec:ef:2e:5e:14:8e:f2:
         45:b3:9b:1a:3a:e2:ed:5d:91:9f:98:cf:6a:15:01:9b:3e:c2:
         91:eb:49:f4:11:cb:9b:90:9a:80:d5:0f:9f:38:85:f0:9d:14:
         b6:17:f4:d8:22:12:c8:e7:48:ea:82:92:4a:cc:83:f3:07:d9:
         f8:4c:ea:d4:eb:ce:74:87:8d:4f:07:d1:d9:d0:89:77:7b:06:
         d7:bd:0b:ef:f2:d9:a5:f6:c4:ba:55:6e:47:49:0b:24:dc:54:
         c5:d7:cd:26:7f:b2:a6:05:0f:b4:71:b5:a8:9d:ca:7c:16:a8:
         04:b7:91:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----