Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A860C/F806E01C1D9E11E2BBD0358F08B02CD2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.mft
File:                     aQ0lRcuMCiKcHNP1DixqKyEoFwo.mft (raw, json)
Hash identifier:          X699JAvuFmka7osmJU86csNnS+KqXf/4XrNs+zYy0h8=
Subject key identifier:   31:7A:15:FA:6E:5F:58:FC:3C:7C:A9:F9:F8:C8:C7:8D:41:0A:01:D6
Authority key identifier: 69:0D:25:45:CB:8C:0A:22:9C:1C:D3:F5:0E:2C:6A:2B:21:28:17:0A
Certificate issuer:       /CN=A91A860C/serialNumber=690D2545CB8C0A229C1CD3F50E2C6A2B2128170A
Certificate serial:       340C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A860C/F806E01C1D9E11E2BBD0358F08B02CD2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.mft
Manifest number:          3402
Signing time:             Mon 15 Jul 2024 00:40:56 +0000
Manifest this update:     Mon 15 Jul 2024 00:40:56 +0000
Manifest next update:     Mon 22 Jul 2024 00:40:56 +0000
Files and hashes:         1: aQ0lRcuMCiKcHNP1DixqKyEoFwo.crl (hash: pGIccKLG6nhx8Eknq3rpn8yVGxAeOloypmQ70lFU21o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13324 (0x340c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A860C/serialNumber=690D2545CB8C0A229C1CD3F50E2C6A2B2128170A
        Validity
            Not Before: Jul 15 00:40:56 2024 GMT
            Not After : Jul 22 00:40:56 2024 GMT
        Subject: CN=66947018-8fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:52:ff:90:3d:0e:54:65:34:fb:0f:14:dc:
                    47:87:eb:55:b8:f5:c6:0c:de:55:24:30:5d:48:d7:
                    a6:17:a5:76:99:c2:25:46:59:17:2d:db:93:b1:08:
                    cf:20:08:1a:c1:5e:63:a7:05:1f:d3:0d:04:26:50:
                    ef:05:06:81:d1:9a:40:f0:25:32:2c:90:bb:91:61:
                    d7:c1:ff:53:6c:de:33:f2:54:58:7c:3a:4d:4a:a4:
                    71:1b:6c:66:49:a0:4d:4a:4a:2f:5b:cf:01:54:44:
                    c2:bd:f4:61:af:76:9a:75:88:d8:9f:72:d4:44:d7:
                    2a:b3:6d:c1:68:d5:36:3f:48:06:25:b5:f5:93:48:
                    4f:43:df:8a:c3:d6:80:1b:fb:67:3d:6e:d8:f7:d2:
                    ab:71:5c:6d:29:72:2b:88:a1:24:cc:93:e2:78:23:
                    1c:1b:c6:3d:f5:fe:04:7d:e0:c7:c1:64:55:22:10:
                    f4:5d:73:26:60:05:ea:85:43:f2:ed:6c:b8:62:a4:
                    4a:02:f3:0f:37:37:01:82:53:d6:77:89:fd:33:c3:
                    d6:bf:9c:05:5e:e3:f7:51:52:8f:00:ba:b3:89:75:
                    40:60:3d:f1:8c:db:0b:5d:a5:95:09:50:86:92:e0:
                    a6:68:b4:0b:1f:c9:c0:15:62:44:ae:5a:13:6c:e3:
                    44:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7A:15:FA:6E:5F:58:FC:3C:7C:A9:F9:F8:C8:C7:8D:41:0A:01:D6
            X509v3 Authority Key Identifier:
                keyid:69:0D:25:45:CB:8C:0A:22:9C:1C:D3:F5:0E:2C:6A:2B:21:28:17:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A860C/F806E01C1D9E11E2BBD0358F08B02CD2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A860C/F806E01C1D9E11E2BBD0358F08B02CD2/aQ0lRcuMCiKcHNP1DixqKyEoFwo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ce:b1:32:9b:01:f8:ff:7d:b4:b6:cb:90:0d:c4:0a:86:b6:
         b5:59:d5:e6:ef:52:f4:00:1c:54:97:db:c2:5c:bc:21:08:3e:
         b1:cd:8e:2b:fb:aa:e6:f7:5e:5a:8c:b6:3d:ee:56:07:c7:56:
         dd:ea:4d:7d:42:0a:a5:69:34:df:ca:7f:98:4d:09:0e:e4:48:
         a9:67:e1:e5:5b:7d:4e:03:b1:8e:cb:1b:5a:6d:26:24:18:3b:
         9d:77:f2:96:a5:91:57:10:c7:f4:17:89:a5:5d:58:3e:e9:18:
         76:09:86:36:2b:86:63:4e:bc:b4:7b:0f:58:47:81:1a:ab:1c:
         ac:c5:b4:a4:a2:7b:bc:5b:42:ee:14:93:8b:79:df:7c:0b:8d:
         f4:dc:55:af:d7:6b:7d:d1:34:a6:f5:b5:a0:90:6f:da:56:2c:
         ec:7c:53:f1:b8:5f:da:ed:4e:f8:f9:a2:2e:27:1c:89:8b:65:
         c2:d4:61:bf:ca:20:1f:1b:c2:b0:39:74:4c:26:2f:d8:d7:b9:
         b4:3b:78:e9:9b:c9:4e:6d:c0:37:73:93:2e:65:36:b4:e2:29:
         f2:38:fa:d0:d0:a9:66:3c:cf:f7:4b:7a:bb:c8:f2:6a:34:f5:
         b2:84:63:58:c1:01:b8:65:96:84:c9:ba:c4:4f:18:7a:bd:a8:
         2b:03:de:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----