Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3BC/CEBF77F85FC311EBBA03D064C4F9AE02/9-EWtpETsCfBPx1yEsX5hVD6KG0.mft
File:                     9-EWtpETsCfBPx1yEsX5hVD6KG0.mft (raw, json)
Hash identifier:          sBnoJN/wxycOfY9aDsWJLfGklKT3rX3u9ijpM8uSO2Q=
Subject key identifier:   B2:F8:8A:D6:D4:16:28:33:5D:03:BE:08:25:A8:1D:48:74:EF:B9:16
Authority key identifier: F7:E1:16:B6:91:13:B0:27:C1:3F:1D:72:12:C5:F9:85:50:FA:28:6D
Certificate issuer:       /CN=A91AE3BC/serialNumber=F7E116B69113B027C13F1D7212C5F98550FA286D
Certificate serial:       055A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-EWtpETsCfBPx1yEsX5hVD6KG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE3BC/CEBF77F85FC311EBBA03D064C4F9AE02/9-EWtpETsCfBPx1yEsX5hVD6KG0.mft
Manifest number:          0558
Signing time:             Mon 17 Jul 2023 00:29:26 +0000
Manifest this update:     Mon 17 Jul 2023 00:29:25 +0000
Manifest next update:     Mon 24 Jul 2023 00:29:25 +0000
Files and hashes:         1: 9-EWtpETsCfBPx1yEsX5hVD6KG0.crl (hash: 3R54U+OkuDcAdRoaVo6OK0soHwuiqxyDGZFi2qlya1g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1370 (0x55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE3BC/serialNumber=F7E116B69113B027C13F1D7212C5F98550FA286D
        Validity
            Not Before: Jul 17 00:29:25 2023 GMT
            Not After : Jul 24 00:29:25 2023 GMT
        Subject: CN=64b48b65-bd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:4f:54:6b:3f:60:b3:b0:c5:57:ff:b9:25:
                    34:2c:44:a6:0f:8d:1d:5b:39:a0:68:c4:a7:e2:d4:
                    98:38:92:e2:f4:be:1f:ae:61:6d:b4:00:c4:b7:9e:
                    4b:ea:7e:78:45:df:1b:f2:64:80:d8:b3:ac:40:af:
                    5c:7b:cf:48:a1:ca:9c:1e:80:24:94:e4:cd:82:11:
                    89:73:b6:c9:f1:95:79:85:cd:be:68:6e:bc:87:26:
                    e8:1e:c5:02:92:13:15:55:af:8b:c3:fe:17:f3:2c:
                    14:bf:50:d5:d1:c4:45:f3:c6:a1:e4:a2:fb:a1:28:
                    79:91:a3:e3:53:9d:40:fb:82:b7:5c:b8:5c:87:e0:
                    04:eb:71:be:36:dd:0c:cd:38:f8:18:49:c2:9a:ce:
                    c1:94:5a:c3:6f:d8:80:09:3a:f3:22:5f:85:41:4e:
                    5f:39:96:91:5c:47:16:03:e5:5e:4b:5a:27:9c:75:
                    a3:11:89:7c:73:e0:24:13:b0:a0:f1:02:97:1e:3f:
                    13:82:22:99:2f:65:ad:67:5e:39:15:64:e0:dd:46:
                    b2:2c:f1:1c:04:1e:40:c2:b2:17:d3:9e:08:39:13:
                    df:be:5f:5d:c3:f9:7d:45:f0:d3:78:52:64:65:84:
                    36:cd:7a:a6:5b:ce:7a:61:0e:7f:fb:67:15:c2:3c:
                    12:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F8:8A:D6:D4:16:28:33:5D:03:BE:08:25:A8:1D:48:74:EF:B9:16
            X509v3 Authority Key Identifier:
                keyid:F7:E1:16:B6:91:13:B0:27:C1:3F:1D:72:12:C5:F9:85:50:FA:28:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE3BC/CEBF77F85FC311EBBA03D064C4F9AE02/9-EWtpETsCfBPx1yEsX5hVD6KG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-EWtpETsCfBPx1yEsX5hVD6KG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3BC/CEBF77F85FC311EBBA03D064C4F9AE02/9-EWtpETsCfBPx1yEsX5hVD6KG0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:09:3a:61:c7:95:91:a3:03:83:e4:b2:95:d6:af:98:b1:dd:
         03:a2:5c:3c:2f:14:b1:d6:de:3b:be:10:a9:9f:26:aa:41:45:
         52:ea:25:7b:4c:ef:7e:4e:14:57:3b:dc:3c:73:fe:15:6f:f9:
         a6:a4:89:c1:22:b3:f8:f6:8e:af:01:6b:75:d5:eb:6e:ed:93:
         72:bb:e1:ed:91:1a:ad:27:0f:53:ae:70:82:ae:5c:5e:af:6b:
         fb:55:3b:39:6e:d3:6f:b9:2d:a4:29:55:95:0c:7b:55:89:4d:
         ca:c6:da:60:48:35:08:1d:64:d9:8c:4d:41:4b:ca:5e:a0:82:
         dc:a4:d7:78:d6:9a:29:16:27:a2:21:96:27:8f:c9:18:86:31:
         44:36:2c:ad:57:32:44:05:5c:4d:a1:de:08:c7:b3:38:53:a1:
         de:5f:40:4e:7a:a2:6e:39:1d:a4:7b:f9:8a:2f:55:d4:23:da:
         92:91:e9:1e:6c:c7:5c:b1:9a:22:6b:86:ff:a6:8e:34:62:04:
         24:73:dd:59:6d:51:ac:70:a7:f9:30:9b:34:aa:31:40:9c:07:
         f9:ed:b6:91:22:c7:af:8e:19:ec:4c:94:3f:7a:c5:95:f4:93:
         66:59:3b:d2:09:95:33:10:4d:bb:dd:0b:2c:4f:90:ad:0d:a0:
         b9:d3:1b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----