Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC75F/421F0F1CC3F511E5A293907CC4F9AE02/CH1dxie2Pja_nC99Bn6uMbSMeHg.mft
File:                     CH1dxie2Pja_nC99Bn6uMbSMeHg.mft (raw, json)
Hash identifier:          uJtvFhEFJmumTxO8T3nQ0UPyoMOas8rXNSUgY5B46ZQ=
Subject key identifier:   E1:28:7F:02:8C:3E:3B:D9:AA:E6:C7:08:8A:57:B2:71:4D:E5:DC:87
Authority key identifier: 08:7D:5D:C6:27:B6:3E:36:BF:9C:2F:7D:06:7E:AE:31:B4:8C:78:78
Certificate issuer:       /CN=A91AC75F/serialNumber=087D5DC627B63E36BF9C2F7D067EAE31B48C7878
Certificate serial:       2126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CH1dxie2Pja_nC99Bn6uMbSMeHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC75F/421F0F1CC3F511E5A293907CC4F9AE02/CH1dxie2Pja_nC99Bn6uMbSMeHg.mft
Manifest number:          211B
Signing time:             Tue 26 Mar 2024 16:13:05 +0000
Manifest this update:     Tue 26 Mar 2024 16:13:05 +0000
Manifest next update:     Tue 02 Apr 2024 16:13:05 +0000
Files and hashes:         1: CH1dxie2Pja_nC99Bn6uMbSMeHg.crl (hash: NsndPjh0XWP63m1CHuRfm4tbzlYzwAtBrkCemrgz7SU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8486 (0x2126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC75F/serialNumber=087D5DC627B63E36BF9C2F7D067EAE31B48C7878
        Validity
            Not Before: Mar 26 16:13:05 2024 GMT
            Not After : Apr  2 16:13:05 2024 GMT
        Subject: CN=6602f411-ad00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:8a:7c:a4:dc:cf:5e:36:69:7e:89:bf:8a:
                    e3:9f:3f:68:e9:cf:c1:88:9b:08:8a:f5:5c:62:b0:
                    9c:7c:c1:25:da:31:7c:e5:d9:96:01:07:4a:3a:cf:
                    4b:25:ad:30:6d:b3:21:3e:0e:f3:fd:cf:01:bd:2c:
                    be:e3:7b:21:aa:70:4b:f7:90:59:61:23:e5:43:15:
                    7a:51:64:c1:00:65:3e:97:e9:f9:85:15:48:2e:67:
                    03:e6:e9:ac:ab:78:cf:4d:3b:6c:f4:1f:56:84:b2:
                    3a:47:82:42:12:5f:8f:e2:f5:a7:86:47:93:c0:12:
                    84:a3:6b:38:3e:dd:77:c5:de:d6:de:99:c9:c1:c8:
                    80:be:bc:7d:26:90:70:1e:25:8c:6e:2d:5b:ec:b3:
                    1c:ea:27:d3:c4:59:d4:eb:e8:91:ae:da:74:8e:dc:
                    df:98:f9:cf:93:cb:e7:9b:b2:82:37:ce:53:71:d9:
                    b2:cc:21:c8:17:a1:3e:b9:ed:44:14:e8:70:34:fa:
                    35:f8:69:f4:23:70:1e:1b:66:ff:02:a9:a5:31:6d:
                    67:1a:76:10:b3:95:63:73:20:26:0d:6f:85:6b:5f:
                    50:47:21:19:d2:1a:4f:d8:8c:5f:09:33:bc:b6:a2:
                    eb:75:ac:af:40:dd:87:25:5f:f0:e6:25:6f:90:31:
                    ff:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:28:7F:02:8C:3E:3B:D9:AA:E6:C7:08:8A:57:B2:71:4D:E5:DC:87
            X509v3 Authority Key Identifier:
                keyid:08:7D:5D:C6:27:B6:3E:36:BF:9C:2F:7D:06:7E:AE:31:B4:8C:78:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC75F/421F0F1CC3F511E5A293907CC4F9AE02/CH1dxie2Pja_nC99Bn6uMbSMeHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CH1dxie2Pja_nC99Bn6uMbSMeHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC75F/421F0F1CC3F511E5A293907CC4F9AE02/CH1dxie2Pja_nC99Bn6uMbSMeHg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:27:b2:b9:6c:c1:94:4b:ce:46:a0:e9:0c:a5:5e:77:cb:3d:
         65:14:18:5c:22:fc:5c:27:05:d5:9d:42:fc:ab:b7:b7:de:1b:
         7c:53:4c:39:64:17:98:d2:dc:72:08:3c:cf:74:c1:55:ec:7e:
         00:87:ed:88:a6:68:2e:56:23:da:30:da:0e:d6:3f:37:d9:b2:
         6b:14:61:2a:b0:c5:e0:f4:44:90:b4:44:29:cb:01:73:e0:e8:
         8d:f8:53:f3:ea:14:f8:43:4f:7f:bb:04:4d:1f:49:e4:32:1c:
         0b:89:db:d5:fb:90:be:54:a5:2f:f8:53:7a:04:c1:57:84:bf:
         ff:e2:df:1f:4f:f3:dd:22:4a:f2:58:bb:36:24:fe:0a:f2:1e:
         92:11:ff:3c:f6:01:00:ff:ca:5d:c3:ea:7c:b4:31:65:90:fc:
         28:82:b3:28:27:1f:ca:c3:ff:60:1e:cb:4c:d6:54:e9:35:bb:
         99:b6:e5:04:bc:e2:1c:7c:ad:86:79:39:63:75:13:8a:f1:43:
         ca:45:78:ec:75:73:05:fb:4e:29:90:99:31:a7:c8:54:56:32:
         01:90:0c:73:c3:9e:a6:a6:0f:69:28:e6:29:5e:67:5d:51:83:
         1d:2b:b1:84:90:67:f9:a3:00:cc:a0:60:7d:08:2f:c0:93:51:
         ab:aa:30:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----