Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4778/B43CDB60141E11EABAE78E63C4F9AE02/BDp9FLYWj5Nkj0xaVzO_z1GacaI.mft
File:                     BDp9FLYWj5Nkj0xaVzO_z1GacaI.mft (raw, json)
Hash identifier:          AHg1/K36WwQF9NqYoOHW2eC50SbQWex0snYp5tE+q+g=
Subject key identifier:   2A:E9:61:BB:08:63:E8:89:47:D5:53:61:35:B6:6B:EA:D7:C8:68:6F
Authority key identifier: 04:3A:7D:14:B6:16:8F:93:64:8F:4C:5A:57:33:BF:CF:51:9A:71:A2
Certificate issuer:       /CN=A91B4778/serialNumber=043A7D14B6168F93648F4C5A5733BFCF519A71A2
Certificate serial:       09FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDp9FLYWj5Nkj0xaVzO_z1GacaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4778/B43CDB60141E11EABAE78E63C4F9AE02/BDp9FLYWj5Nkj0xaVzO_z1GacaI.mft
Manifest number:          09ED
Signing time:             Wed 14 Sep 2022 08:18:30 +0000
Manifest this update:     Wed 14 Sep 2022 08:18:29 +0000
Manifest next update:     Fri 16 Sep 2022 08:18:29 +0000
Files and hashes:         1: BDp9FLYWj5Nkj0xaVzO_z1GacaI.crl (hash: nyHm98VKLdm4LCyVzStxAbOM6iVwYws8EPm+q3foGic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2554 (0x9fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4778/serialNumber=043A7D14B6168F93648F4C5A5733BFCF519A71A2
        Validity
            Not Before: Sep 14 08:18:29 2022 GMT
            Not After : Sep 16 08:18:29 2022 GMT
        Subject: CN=63218e56-534a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:a9:73:5e:53:0a:06:fc:cd:bd:4d:bd:08:
                    5c:dc:7b:0b:97:c6:38:2e:f4:77:46:c3:28:8c:81:
                    4c:03:b5:06:4e:61:d8:5b:c7:58:a8:b5:6d:4b:fd:
                    11:77:d7:9f:79:e7:60:5c:75:8c:3d:a6:cb:22:56:
                    ec:c4:58:5e:01:60:f6:cd:f5:5c:67:78:24:1e:30:
                    85:76:73:ff:bc:3e:23:6d:03:ee:82:af:37:0d:6c:
                    0c:5d:7d:86:eb:11:81:cb:36:e2:42:f8:4d:52:dc:
                    0c:24:87:ff:5b:0c:2c:28:18:6b:2b:27:42:4b:a4:
                    16:8b:bd:48:ed:49:4f:a9:39:17:d4:3d:b3:0c:ea:
                    d5:56:35:8e:fa:3f:5c:10:2f:2b:e7:53:f5:83:ae:
                    ba:33:ff:44:64:0c:97:b1:5c:46:96:8d:32:0e:a7:
                    bb:d6:76:89:a3:1b:cd:66:00:cd:25:ff:ef:c8:b4:
                    01:2e:65:49:0c:b7:a2:46:b9:4a:aa:b5:77:24:a4:
                    72:68:83:9c:85:2c:89:95:1a:68:47:27:07:a1:96:
                    6b:df:49:e8:b1:a4:21:bf:51:04:e9:27:de:6f:01:
                    cb:ed:46:f3:d0:de:26:41:10:72:fa:68:fc:4b:0d:
                    ce:e4:59:e9:53:79:8a:02:02:13:d3:9e:b4:cf:c3:
                    4f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E9:61:BB:08:63:E8:89:47:D5:53:61:35:B6:6B:EA:D7:C8:68:6F
            X509v3 Authority Key Identifier:
                keyid:04:3A:7D:14:B6:16:8F:93:64:8F:4C:5A:57:33:BF:CF:51:9A:71:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4778/B43CDB60141E11EABAE78E63C4F9AE02/BDp9FLYWj5Nkj0xaVzO_z1GacaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDp9FLYWj5Nkj0xaVzO_z1GacaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4778/B43CDB60141E11EABAE78E63C4F9AE02/BDp9FLYWj5Nkj0xaVzO_z1GacaI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:90:2e:88:d0:79:5e:3f:ff:65:64:2b:23:51:5e:76:79:ba:
         75:a1:1a:1b:c2:7a:ea:3d:94:c6:19:fb:fb:40:ce:0b:57:d7:
         db:5b:6d:58:f0:52:8c:e0:8c:be:54:aa:52:26:03:8c:11:e0:
         2a:30:16:fe:ae:b3:e6:55:d5:93:b7:72:a5:3b:98:09:70:a6:
         fd:71:ee:31:e2:05:23:4b:91:e2:4e:7d:68:d1:58:14:9d:f0:
         4b:73:c1:1f:b8:20:67:74:22:07:0a:b4:08:26:f0:5e:66:48:
         b5:21:59:1f:d4:34:98:9b:8f:3a:eb:c5:9e:64:3e:08:b1:7d:
         ca:17:bf:7f:73:81:33:d3:7d:c6:bf:1c:fa:89:4f:50:c9:ef:
         fd:f2:9a:3a:03:cc:5f:b9:81:16:0e:37:74:fa:43:03:98:88:
         47:78:13:10:2d:4a:a0:d1:23:a8:73:29:3d:e2:a2:e0:2f:75:
         e9:7e:60:67:9e:58:69:d3:86:40:7f:8d:27:ac:f7:62:ef:78:
         36:5b:c6:5d:ae:ba:8c:ec:0a:93:39:1c:46:d1:67:f9:fe:69:
         74:9a:b9:e4:1d:34:f7:72:f2:c5:b4:0f:b1:ed:3d:bf:20:31:
         be:94:bb:da:f5:63:17:c2:c4:26:bb:dc:a2:65:7e:d9:30:a9:
         10:3c:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org