Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB98A/DCD5BDD0DA3D11EB82E11D29C4F9AE02/nVooFltTps91tGAgDxSYXguuv0s.mft
File:                     nVooFltTps91tGAgDxSYXguuv0s.mft (raw, json)
Hash identifier:          rPfOoH7N6Qk0CJalRwhtN2rIRKaqaXWxqV7WRyZvoSM=
Subject key identifier:   D5:5E:AE:AE:AE:11:27:F1:A1:A2:C0:2B:14:A2:DC:C5:C3:59:32:7A
Authority key identifier: 9D:5A:28:16:5B:53:A6:CF:75:B4:60:20:0F:14:98:5E:0B:AE:BF:4B
Certificate issuer:       /CN=A91AB98A/serialNumber=9D5A28165B53A6CF75B460200F14985E0BAEBF4B
Certificate serial:       048A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nVooFltTps91tGAgDxSYXguuv0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB98A/DCD5BDD0DA3D11EB82E11D29C4F9AE02/nVooFltTps91tGAgDxSYXguuv0s.mft
Manifest number:          0487
Signing time:             Mon 22 Jan 2024 08:41:32 +0000
Manifest this update:     Mon 22 Jan 2024 08:41:31 +0000
Manifest next update:     Mon 29 Jan 2024 08:41:31 +0000
Files and hashes:         1: nVooFltTps91tGAgDxSYXguuv0s.crl (hash: n8hfHcxK1KXbxx1hxCdWaE5kdVf31Br01rSsFDTStIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB98A/serialNumber=9D5A28165B53A6CF75B460200F14985E0BAEBF4B
        Validity
            Not Before: Jan 22 08:41:31 2024 GMT
            Not After : Jan 29 08:41:31 2024 GMT
        Subject: CN=65ae2a3c-3a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9a:18:16:77:6b:89:56:fc:4f:8d:e4:06:49:
                    1b:5b:2a:b1:84:00:8e:8d:0a:17:ce:8d:ed:12:9e:
                    7b:b8:f1:ea:fe:72:19:6e:1b:df:ca:06:54:ba:31:
                    d7:ee:db:4d:bc:5b:80:2c:7c:75:d4:77:67:d5:7f:
                    b3:28:91:57:2d:a5:a5:ef:78:f0:ae:09:57:1f:02:
                    eb:7b:14:f4:2e:18:78:0a:78:16:57:78:49:48:98:
                    56:7b:d8:c9:a3:56:4a:71:db:a2:bf:0d:f5:da:b5:
                    2e:ec:4b:20:0c:b9:f0:05:e2:16:01:3e:75:bd:93:
                    50:7c:83:12:4d:d7:a7:b4:dc:80:a9:b7:8a:3d:76:
                    bd:67:ea:0c:96:d4:c9:e4:84:63:20:3d:1f:e1:8c:
                    3d:63:c0:86:0c:99:da:dc:d3:54:aa:bd:68:a7:8c:
                    9f:ef:25:1c:67:43:f5:92:11:79:80:41:ed:e9:e3:
                    f4:ec:92:db:e3:be:f2:65:95:a3:c7:16:b7:bc:54:
                    69:15:0c:83:cb:80:9d:75:d0:1e:ac:9a:9f:37:3b:
                    4e:b0:65:81:5f:08:82:06:5c:a6:96:ee:cf:a4:83:
                    d7:51:f1:30:da:44:f2:c2:06:b1:17:94:98:bb:59:
                    4c:f1:f1:04:f6:6b:31:f2:e0:f7:a3:fd:9d:5c:c9:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5E:AE:AE:AE:11:27:F1:A1:A2:C0:2B:14:A2:DC:C5:C3:59:32:7A
            X509v3 Authority Key Identifier:
                keyid:9D:5A:28:16:5B:53:A6:CF:75:B4:60:20:0F:14:98:5E:0B:AE:BF:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB98A/DCD5BDD0DA3D11EB82E11D29C4F9AE02/nVooFltTps91tGAgDxSYXguuv0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nVooFltTps91tGAgDxSYXguuv0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB98A/DCD5BDD0DA3D11EB82E11D29C4F9AE02/nVooFltTps91tGAgDxSYXguuv0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3a:89:ef:16:09:c4:f5:27:3b:f5:00:db:01:8b:a2:ea:34:
         ca:f0:1f:5a:6e:42:77:92:af:f5:39:b9:70:f8:73:7a:c8:72:
         e8:c9:1f:01:c9:a9:10:2c:d6:83:a1:d9:c9:a6:df:ce:54:55:
         fb:ec:38:0f:26:fc:65:13:b1:95:a5:24:a2:62:a0:32:73:2c:
         0e:79:f5:ee:47:57:0e:63:45:5f:d1:f4:07:f5:e1:c8:a8:16:
         f8:6e:87:4c:9d:20:61:aa:9e:b1:28:cc:72:5b:cf:de:dd:ae:
         62:f2:c0:99:3a:13:c9:75:2a:87:cb:77:e5:75:17:2a:3a:8b:
         e5:a3:7f:d5:92:87:b2:5c:af:ee:41:21:8f:d7:5f:8b:cb:01:
         55:ea:4b:35:0b:5d:f6:e8:b6:0e:f5:e1:f8:55:eb:e3:41:3b:
         95:af:b6:e2:97:1b:34:2e:b7:4c:ff:28:84:4d:7e:83:34:33:
         e7:92:13:41:44:04:95:b5:63:e9:c9:a2:5e:dd:00:9f:f1:e4:
         00:6c:2f:f6:3f:cb:71:05:1b:b1:28:1a:a7:95:e1:30:df:76:
         c9:3a:72:ef:61:16:a9:c4:fd:d2:24:dc:5a:eb:84:0b:f0:3d:
         cb:aa:90:9c:0d:d9:2d:92:5d:be:e3:34:be:5c:f8:16:47:db:
         62:a7:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----