Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/9lv88f3YSSS6iXQmzBvPX6hvnQM.mft
File:                     9lv88f3YSSS6iXQmzBvPX6hvnQM.mft (raw, json)
Hash identifier:          mcH3JQpRRLwL95F8UsJcpuNWvM5fyNz/XFUM9TEHWys=
Subject key identifier:   EB:EB:FA:5A:20:A7:06:51:99:29:C8:96:A2:63:37:B9:BF:D9:05:52
Authority key identifier: F6:5B:FC:F1:FD:D8:49:24:BA:89:74:26:CC:1B:CF:5F:A8:6F:9D:03
Certificate issuer:       /CN=A91B0BAB/serialNumber=F65BFCF1FDD84924BA897426CC1BCF5FA86F9D03
Certificate serial:       096A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lv88f3YSSS6iXQmzBvPX6hvnQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/9lv88f3YSSS6iXQmzBvPX6hvnQM.mft
Manifest number:          0FE8
Signing time:             Fri 04 Oct 2024 04:19:57 +0000
Manifest this update:     Fri 04 Oct 2024 04:19:57 +0000
Manifest next update:     Fri 11 Oct 2024 04:19:57 +0000
Files and hashes:         1: 9lv88f3YSSS6iXQmzBvPX6hvnQM.crl (hash: 61gXXvB24L5YjToVNn11zqZ1gKvR6tn7qwkWbyvhNCo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2410 (0x96a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0BAB/serialNumber=F65BFCF1FDD84924BA897426CC1BCF5FA86F9D03
        Validity
            Not Before: Oct  4 04:19:57 2024 GMT
            Not After : Oct 11 04:19:57 2024 GMT
        Subject: CN=66ff6ced-4a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:25:e5:42:73:f5:11:c1:e8:21:dd:28:61:
                    28:81:62:9f:0b:51:16:01:05:62:c2:1e:cb:36:56:
                    71:16:f4:78:54:24:81:ae:f4:5b:34:0f:0e:cf:e8:
                    bd:45:3c:31:94:e8:0f:3d:cd:d6:7a:74:d7:c7:eb:
                    d7:1e:d3:5e:5c:2a:37:03:55:c7:49:18:f8:b4:28:
                    4f:44:75:35:36:cf:57:e4:7e:97:90:44:91:17:8b:
                    7a:5d:73:72:fe:51:79:a9:3b:3c:aa:bd:b8:7b:9b:
                    a2:b3:bc:c6:19:a3:ee:71:9c:4e:1f:48:0e:67:39:
                    fd:75:e8:d1:4a:9e:be:6b:f0:2d:57:c9:ad:68:51:
                    7f:96:db:4a:60:87:61:86:43:38:66:19:69:dc:76:
                    79:81:b0:bd:08:07:a9:b4:5e:0f:e3:04:64:13:48:
                    d8:a9:16:2f:57:c0:5d:6f:43:bc:4b:a1:5c:24:b6:
                    02:05:34:63:2a:f6:06:64:88:ff:b9:a0:28:bd:fc:
                    0c:0d:4d:87:74:d4:5c:58:e9:84:d1:53:0b:33:99:
                    d1:52:15:62:83:6c:32:0f:9b:31:77:c2:94:e9:2d:
                    4e:53:89:bf:3b:a2:15:b5:86:81:db:95:2f:a1:7b:
                    2e:15:f4:d3:e3:ab:cf:0b:cf:35:74:67:d1:5b:c4:
                    f5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EB:FA:5A:20:A7:06:51:99:29:C8:96:A2:63:37:B9:BF:D9:05:52
            X509v3 Authority Key Identifier:
                keyid:F6:5B:FC:F1:FD:D8:49:24:BA:89:74:26:CC:1B:CF:5F:A8:6F:9D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/9lv88f3YSSS6iXQmzBvPX6hvnQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lv88f3YSSS6iXQmzBvPX6hvnQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0BAB/602C66547B1511EAA5A4A869C4F9AE02/9lv88f3YSSS6iXQmzBvPX6hvnQM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:74:e7:d5:66:23:2e:47:3c:3a:22:a1:9b:b8:7a:84:de:0e:
         33:b6:de:3a:26:9b:f6:87:4c:c4:b5:e9:51:f0:81:00:58:36:
         3e:ad:ed:b5:b4:4d:8a:4d:91:49:6f:fe:e3:1d:c4:f5:e7:89:
         8e:b9:46:e3:20:65:ea:82:86:2f:e7:67:f4:01:3f:c5:31:59:
         26:23:b6:3f:6d:e3:4b:69:e2:c3:5a:3d:7a:53:4d:5f:9f:91:
         3c:f5:6f:11:8d:d1:ba:78:ad:c3:05:ca:a8:54:a2:f6:69:f5:
         57:84:54:c6:c6:cb:e4:ca:37:d8:d8:79:e9:f3:38:63:dc:4d:
         5b:db:58:9a:d6:46:f6:d3:d6:49:d5:41:76:3b:8d:69:78:fd:
         ac:da:e0:d2:53:4d:17:9c:8a:a5:f7:35:1e:41:cf:c7:da:14:
         80:e3:48:20:61:cb:0b:35:a5:ef:11:97:0d:22:bd:e5:63:27:
         de:6c:e7:75:61:57:28:81:e7:c5:34:83:2d:01:c7:6d:65:9b:
         6b:cb:f3:7a:b0:84:b9:20:1e:7b:d7:01:ef:82:1a:07:ba:2d:
         69:af:ae:52:4a:17:88:bf:d5:bf:ed:98:02:2b:3e:a0:3e:0a:
         76:c7:6b:92:1d:8c:f5:5a:25:02:0a:f7:55:1e:32:9b:70:00:
         e2:08:be:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----