Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D77/FAEB98A858F511ECA901D422C4F9AE02/-D20N6nZmUNkYYOioN_sgaI9Ogk.mft
File:                     -D20N6nZmUNkYYOioN_sgaI9Ogk.mft (raw, json)
Hash identifier:          LVokImkgPJFa+G/xWQMDaKx3SVSk15doUc103AewEp4=
Subject key identifier:   FC:96:6E:B4:C3:13:17:F6:60:E2:1F:E5:D4:FC:75:F3:29:89:69:00
Authority key identifier: F8:3D:B4:37:A9:D9:99:43:64:61:83:A2:A0:DF:EC:81:A2:3D:3A:09
Certificate issuer:       /CN=A91A8D77/serialNumber=F83DB437A9D99943646183A2A0DFEC81A23D3A09
Certificate serial:       02B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D20N6nZmUNkYYOioN_sgaI9Ogk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8D77/FAEB98A858F511ECA901D422C4F9AE02/-D20N6nZmUNkYYOioN_sgaI9Ogk.mft
Manifest number:          02B0
Signing time:             Wed 15 Mar 2023 03:57:01 +0000
Manifest this update:     Wed 15 Mar 2023 03:57:00 +0000
Manifest next update:     Wed 22 Mar 2023 03:57:00 +0000
Files and hashes:         1: -D20N6nZmUNkYYOioN_sgaI9Ogk.crl (hash: 0sX531s+IrgQyPzUtyp0k95538xlJ/Z8iysj48R5Q08=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8D77/serialNumber=F83DB437A9D99943646183A2A0DFEC81A23D3A09
        Validity
            Not Before: Mar 15 03:57:00 2023 GMT
            Not After : Mar 22 03:57:00 2023 GMT
        Subject: CN=6411420c-8dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:96:31:42:4b:95:8d:2a:2c:a1:97:15:8a:ab:
                    32:06:6b:ae:0d:0c:8d:ac:41:9f:61:87:85:78:2a:
                    c4:c4:ea:70:a3:c4:66:e7:9b:1c:d9:8d:76:01:58:
                    43:25:82:b1:7b:5b:c7:c7:f7:11:cb:59:9d:49:76:
                    29:08:0a:35:ac:1b:2a:ae:b8:1d:0c:d2:a1:5f:e2:
                    07:44:4c:40:9e:3c:ab:dc:ca:fc:cf:56:5a:6f:14:
                    80:9f:0c:44:34:00:64:65:dc:a8:b9:63:56:b5:8f:
                    2a:61:1a:81:10:6b:fb:7b:05:36:17:8f:d2:c4:87:
                    a9:02:f9:12:ae:59:87:05:9f:36:45:41:59:6e:d6:
                    3d:d6:32:c4:4b:75:10:3d:25:7e:57:1e:73:c7:22:
                    75:32:12:88:26:d6:24:5c:71:51:a4:98:97:8f:41:
                    3d:35:5a:73:23:4d:a0:e0:66:85:0d:5e:6d:5a:a5:
                    54:71:d1:ab:60:2d:63:f6:cb:44:31:ac:d9:38:0d:
                    a3:35:6c:8d:d5:ef:49:ba:97:f9:3e:5a:67:a5:04:
                    cc:74:b8:5a:e5:28:97:34:cf:80:e8:75:1b:e3:19:
                    21:35:51:f1:af:72:c2:3e:6d:5e:2a:43:47:aa:2e:
                    1e:d8:73:37:7f:46:3b:bc:40:0c:21:ba:34:cd:4b:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:96:6E:B4:C3:13:17:F6:60:E2:1F:E5:D4:FC:75:F3:29:89:69:00
            X509v3 Authority Key Identifier:
                keyid:F8:3D:B4:37:A9:D9:99:43:64:61:83:A2:A0:DF:EC:81:A2:3D:3A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8D77/FAEB98A858F511ECA901D422C4F9AE02/-D20N6nZmUNkYYOioN_sgaI9Ogk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D20N6nZmUNkYYOioN_sgaI9Ogk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D77/FAEB98A858F511ECA901D422C4F9AE02/-D20N6nZmUNkYYOioN_sgaI9Ogk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:5c:02:06:dd:6d:7d:ae:97:da:6d:e2:61:f0:24:05:a0:62:
         a8:fc:f3:24:5f:fb:95:fb:e1:9a:56:c4:60:d3:17:ae:fa:57:
         25:80:23:d4:5f:11:8a:02:c2:1d:48:c2:bb:f3:54:f1:6f:f4:
         0e:9d:ab:7c:fc:ea:00:0e:4a:8b:e4:fc:d5:c3:78:68:cb:1e:
         7d:ed:35:59:8d:28:de:3d:d3:4d:c5:d4:bd:3b:c0:0e:a6:ec:
         5f:1b:17:dc:9d:f1:24:0d:5a:6a:ce:59:ec:56:cd:c3:78:2e:
         19:bb:bb:96:85:65:4c:07:e1:ff:90:f7:07:f1:47:51:12:a4:
         fc:e2:c1:fa:83:60:de:e1:fa:b2:3e:ff:3d:52:65:58:35:09:
         fa:54:fb:bc:10:0a:bc:87:73:55:e6:74:7a:44:93:b0:7a:d4:
         10:11:a0:49:0d:5c:76:1d:21:5e:be:7a:13:16:35:bd:06:6e:
         d4:12:06:af:ed:d9:68:68:f9:2a:c2:29:44:35:4f:5d:fb:0f:
         5f:a6:84:ec:f2:da:2a:10:25:6c:70:db:24:3a:e9:fc:ed:4a:
         9e:80:36:32:ad:49:f1:82:d3:77:6a:6c:48:05:3a:13:9f:eb:
         b1:de:81:d9:4e:0a:ef:ce:dd:35:24:67:86:d6:fe:bc:6f:88:
         9d:a1:7e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----