Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.mft
File:                     2v_xEa69_HI1ltxVl1dsYqgD3XU.mft (raw, json)
Hash identifier:          TJwebXqf507NJw2e3t4V1WrASuR84sOqDHyQtTnJD6k=
Subject key identifier:   21:3A:0E:A7:EF:2F:1A:DD:9F:A4:04:81:A3:92:4B:1C:AB:A7:41:FF
Authority key identifier: DA:FF:F1:11:AE:BD:FC:72:35:96:DC:55:97:57:6C:62:A8:03:DD:75
Certificate issuer:       /CN=A91B3C87/serialNumber=DAFFF111AEBDFC723596DC5597576C62A803DD75
Certificate serial:       0F2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v_xEa69_HI1ltxVl1dsYqgD3XU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.mft
Manifest number:          15D9
Signing time:             Tue 10 Sep 2024 07:17:59 +0000
Manifest this update:     Tue 10 Sep 2024 07:17:58 +0000
Manifest next update:     Tue 17 Sep 2024 07:17:58 +0000
Files and hashes:         1: 2v_xEa69_HI1ltxVl1dsYqgD3XU.crl (hash: YId1ShbHHa978hz8Qc4Mhti4XySUo5CQZY0fG8bgGxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3884 (0xf2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3C87/serialNumber=DAFFF111AEBDFC723596DC5597576C62A803DD75
        Validity
            Not Before: Sep 10 07:17:58 2024 GMT
            Not After : Sep 17 07:17:58 2024 GMT
        Subject: CN=66dff2a6-7561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:59:2b:c5:3b:99:68:e8:12:23:ce:46:f5:b3:
                    77:5e:12:f3:49:6e:bf:51:b2:5e:26:c5:f1:a6:d6:
                    ce:d1:11:1e:0b:a4:8f:02:71:7b:d1:e0:05:52:f2:
                    02:e0:88:47:4c:76:6b:80:1b:a8:67:df:92:18:ac:
                    88:43:cd:32:e0:05:51:98:83:34:c8:29:f1:2d:38:
                    08:90:a0:06:e9:4c:02:c5:9d:6b:a1:da:6f:9d:d2:
                    c6:ea:fd:0e:99:9a:16:00:bd:3a:4d:6a:b8:34:d8:
                    6d:1e:50:e3:45:4f:d2:33:77:9e:3b:2b:3f:48:6a:
                    17:e2:97:0e:9c:6b:f8:d0:b3:54:94:5a:ed:fa:9d:
                    05:a6:0c:31:77:7c:fe:c3:d1:1d:40:52:c5:dc:14:
                    42:81:ca:e7:ba:ac:d8:50:16:d6:a0:a0:60:ef:ef:
                    53:1e:81:ce:e3:66:d9:2b:a5:a6:58:52:8b:72:d4:
                    de:5c:c9:1e:18:3e:78:18:1d:91:28:09:7f:90:ac:
                    d7:da:af:6b:91:75:a1:99:c1:05:06:06:28:7f:7e:
                    1d:1f:f8:83:1b:ce:41:95:f8:8e:11:d2:72:89:17:
                    e2:2b:0a:58:33:02:b1:55:45:08:33:41:32:08:d5:
                    e9:da:0a:72:5f:5d:af:05:a7:fe:b9:58:a7:aa:17:
                    bf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3A:0E:A7:EF:2F:1A:DD:9F:A4:04:81:A3:92:4B:1C:AB:A7:41:FF
            X509v3 Authority Key Identifier:
                keyid:DA:FF:F1:11:AE:BD:FC:72:35:96:DC:55:97:57:6C:62:A8:03:DD:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v_xEa69_HI1ltxVl1dsYqgD3XU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3C87/8B7C7E76575211E9808ECF1BC4F9AE02/2v_xEa69_HI1ltxVl1dsYqgD3XU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e5:b8:4c:8e:74:70:ac:2d:65:35:6e:ab:32:6a:33:ec:70:
         d2:07:96:30:50:b3:09:43:77:0b:af:b6:23:63:f7:e5:95:93:
         d2:01:f5:a4:f2:b9:b0:8b:cc:78:95:84:09:3f:67:e6:a8:e7:
         66:21:04:14:b2:fe:bb:08:27:52:10:02:14:96:27:78:73:47:
         9c:a7:80:ee:1f:df:70:dc:1c:84:7e:89:dd:ca:85:97:51:ee:
         e3:b2:39:c7:60:8e:68:70:2e:e4:8f:0d:1d:8d:71:ad:f6:ca:
         eb:1f:16:2e:a9:23:23:be:a4:99:68:7a:e5:5b:46:69:0f:6f:
         95:23:d3:58:81:31:98:d8:3e:0c:e2:75:1b:3f:3f:13:0f:83:
         70:79:46:64:81:2a:b8:3b:e3:f7:15:ac:b8:ad:ab:d3:75:08:
         2f:58:27:82:3d:37:8d:91:1f:3b:86:57:2b:a2:60:9f:d5:22:
         af:c3:f1:d5:62:09:65:88:8e:cb:30:71:5b:a5:88:c2:4b:6a:
         a4:00:7b:e4:81:7f:be:2d:3a:46:ea:68:12:e3:33:11:7e:61:
         c5:9b:73:f9:74:8e:ff:67:11:e6:df:a5:e8:b1:f4:29:e5:e0:
         e7:91:16:41:f5:fd:07:c8:a9:19:f0:50:dd:c8:20:c5:78:60:
         87:0d:3f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----