Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5695/D5F7C0C83B9311E790729372C4F9AE02/hznVVDeqNrJPyK1Twtbqi2SD7_E.mft
File:                     hznVVDeqNrJPyK1Twtbqi2SD7_E.mft (raw, json)
Hash identifier:          59ybKZ/SrH1ntzjjS7kBlQX7j/WemkukVtkCtdTbuDk=
Subject key identifier:   34:1B:37:14:B6:F1:0B:36:19:38:37:EF:D5:DE:04:6D:DE:AB:67:33
Authority key identifier: 87:39:D5:54:37:AA:36:B2:4F:C8:AD:53:C2:D6:EA:8B:64:83:EF:F1
Certificate issuer:       /CN=A91A5695/serialNumber=8739D55437AA36B24FC8AD53C2D6EA8B6483EFF1
Certificate serial:       195C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hznVVDeqNrJPyK1Twtbqi2SD7_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5695/D5F7C0C83B9311E790729372C4F9AE02/hznVVDeqNrJPyK1Twtbqi2SD7_E.mft
Manifest number:          1955
Signing time:             Wed 22 Nov 2023 16:44:22 +0000
Manifest this update:     Wed 22 Nov 2023 16:44:21 +0000
Manifest next update:     Wed 29 Nov 2023 16:44:21 +0000
Files and hashes:         1: hznVVDeqNrJPyK1Twtbqi2SD7_E.crl (hash: EYHShYIcl2Vdumaqnl+N3AsOKbV/oIfPM0Oddn0BHS4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6492 (0x195c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5695/serialNumber=8739D55437AA36B24FC8AD53C2D6EA8B6483EFF1
        Validity
            Not Before: Nov 22 16:44:21 2023 GMT
            Not After : Nov 29 16:44:21 2023 GMT
        Subject: CN=655e2fe6-f8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ec:db:a0:72:b6:cd:1f:88:01:00:fe:c7:8e:
                    64:7e:c8:60:41:fe:a5:86:85:cb:d2:24:d7:92:b7:
                    be:ca:af:77:73:f7:60:b0:13:b7:8e:ac:66:73:5f:
                    48:25:06:6e:6c:00:8e:a5:f6:e6:e9:0e:44:53:f3:
                    67:89:3b:59:e0:e1:bd:7b:6d:45:f4:17:31:e2:f3:
                    9e:26:4e:17:8d:d0:87:d0:68:d3:36:64:24:0e:46:
                    9d:e0:e4:0c:77:46:a0:f4:99:ab:d7:1f:a1:04:77:
                    6f:28:89:f1:15:f4:e7:9c:30:0a:04:b0:1b:a9:c0:
                    4b:a1:70:16:b8:08:f7:a6:51:39:c4:ed:18:2d:6e:
                    b2:5c:75:37:48:d7:db:10:4b:dc:5c:ec:8a:ee:b0:
                    81:d7:c2:51:2e:d8:f4:26:f0:59:85:0e:78:32:c4:
                    13:cb:8e:e1:f6:4b:07:f4:56:91:f0:4a:7b:01:ef:
                    57:42:27:8a:00:db:b3:13:64:1d:a1:23:03:dc:9b:
                    43:d5:99:6b:29:44:1d:99:75:bf:52:ef:67:38:75:
                    f6:f1:b8:d8:76:59:3b:df:e1:98:8b:74:06:5d:6e:
                    4b:cd:22:f5:d8:a3:6f:dc:48:eb:49:6b:ac:cd:9f:
                    5d:4d:8c:76:cf:e5:44:41:fa:0f:12:bf:c6:24:c9:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1B:37:14:B6:F1:0B:36:19:38:37:EF:D5:DE:04:6D:DE:AB:67:33
            X509v3 Authority Key Identifier:
                keyid:87:39:D5:54:37:AA:36:B2:4F:C8:AD:53:C2:D6:EA:8B:64:83:EF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5695/D5F7C0C83B9311E790729372C4F9AE02/hznVVDeqNrJPyK1Twtbqi2SD7_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hznVVDeqNrJPyK1Twtbqi2SD7_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5695/D5F7C0C83B9311E790729372C4F9AE02/hznVVDeqNrJPyK1Twtbqi2SD7_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c0:8d:4a:00:2f:3c:a4:ba:bd:45:8f:de:30:13:45:09:3c:
         7a:4c:32:cf:16:61:09:61:9d:8f:36:3f:32:e0:21:74:b2:e1:
         78:dc:1a:1e:3e:3b:06:cb:d7:c9:51:74:8d:f1:a5:1c:76:21:
         04:dd:9f:4e:4b:0a:04:f1:1d:0e:f2:42:f1:b9:5b:7a:98:eb:
         a2:de:07:e9:63:bf:dd:89:28:da:60:76:02:dc:3d:8d:6f:53:
         ec:5e:13:e7:39:ca:05:f5:26:01:37:9b:37:0f:bb:41:8e:3d:
         d9:ad:8d:da:68:c1:bd:81:f8:f1:00:93:4d:de:ee:aa:7c:4c:
         37:d0:59:74:14:38:a7:ff:ac:75:7b:f8:3e:ae:dd:80:bc:44:
         60:54:af:89:c9:5f:1c:f4:9b:5c:d0:14:a8:cd:a2:bc:92:8f:
         83:df:65:b1:aa:15:51:4e:d3:69:98:98:c4:35:fd:25:9e:e2:
         8f:a8:fc:e2:fa:24:2a:a0:87:52:8c:48:fa:fe:a7:9d:aa:88:
         67:12:07:fb:d9:79:d9:14:a5:3f:6b:5d:3c:02:62:8a:3c:f4:
         f9:b1:3d:21:62:b8:2a:2f:94:ad:35:fa:dc:06:bb:c9:52:d8:
         c5:0e:e2:1c:5f:4a:f6:23:81:85:68:87:24:a3:15:d3:50:7a:
         e0:f0:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----