Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9599/C4D1585CDB0F11EB8A986139C4F9AE02/gY-LINoeIclIiXgQorQlS4p807A.mft
File:                     gY-LINoeIclIiXgQorQlS4p807A.mft (raw, json)
Hash identifier:          gXyM938rLs6BEriZfxmQxuSQHLZBeDW+hSoY9OQ984M=
Subject key identifier:   CB:B0:EA:CD:70:68:9B:A5:27:AA:8A:36:3E:BB:A0:34:F3:F2:56:36
Authority key identifier: 81:8F:8B:20:DA:1E:21:C9:48:89:78:10:A2:B4:25:4B:8A:7C:D3:B0
Certificate issuer:       /CN=A91B9599/serialNumber=818F8B20DA1E21C948897810A2B4254B8A7CD3B0
Certificate serial:       04AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gY-LINoeIclIiXgQorQlS4p807A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9599/C4D1585CDB0F11EB8A986139C4F9AE02/gY-LINoeIclIiXgQorQlS4p807A.mft
Manifest number:          0499
Signing time:             Mon 19 Feb 2024 01:03:24 +0000
Manifest this update:     Mon 19 Feb 2024 01:03:24 +0000
Manifest next update:     Mon 26 Feb 2024 01:03:24 +0000
Files and hashes:         1: gY-LINoeIclIiXgQorQlS4p807A.crl (hash: pGsVbUBu3ALtFKxy0CdVqXRu5KUQh95ra4zkhkEnN3Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194 (0x4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9599/serialNumber=818F8B20DA1E21C948897810A2B4254B8A7CD3B0
        Validity
            Not Before: Feb 19 01:03:24 2024 GMT
            Not After : Feb 26 01:03:24 2024 GMT
        Subject: CN=65d2a8dc-7262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ee:e8:f3:da:75:9d:de:d2:84:da:a3:58:32:
                    27:b1:b5:f5:09:fc:b2:56:16:b6:15:24:b4:c3:f4:
                    02:21:ba:e9:62:b1:9d:30:aa:34:12:93:27:3b:c3:
                    f1:e3:9d:bb:b0:32:1e:ad:89:16:0e:a6:2b:93:29:
                    65:02:03:4d:9f:2b:f5:ef:b7:85:c2:cf:61:44:b4:
                    3c:4e:f9:16:54:58:69:e8:d5:f4:62:cf:a9:93:a4:
                    99:64:0f:d3:1e:03:e1:1d:75:f2:3a:c3:06:cf:92:
                    d7:10:b4:93:a7:c3:40:fb:89:18:b3:97:21:d9:f1:
                    35:6e:62:f9:91:c4:f4:bf:5e:5e:07:b3:f5:15:5d:
                    2e:6a:d1:62:cd:28:3a:90:33:46:9d:3e:c0:27:82:
                    0a:46:a8:b6:f4:d7:cd:42:6b:8c:51:12:e2:6f:13:
                    16:23:2c:22:50:64:92:ba:2d:27:3d:07:0e:60:88:
                    41:ea:f0:3b:a4:9a:d3:bb:b1:a2:2c:36:01:4e:f0:
                    ac:7d:fa:5e:64:77:07:0a:9c:02:bf:93:ae:de:88:
                    96:e4:df:3f:a1:a7:33:07:d7:0a:ab:61:b0:c1:e1:
                    8b:8c:57:22:f8:e7:17:42:e1:7f:48:4d:c7:81:e7:
                    c1:68:d5:82:22:77:8f:fc:26:a6:71:11:82:ba:65:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B0:EA:CD:70:68:9B:A5:27:AA:8A:36:3E:BB:A0:34:F3:F2:56:36
            X509v3 Authority Key Identifier:
                keyid:81:8F:8B:20:DA:1E:21:C9:48:89:78:10:A2:B4:25:4B:8A:7C:D3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9599/C4D1585CDB0F11EB8A986139C4F9AE02/gY-LINoeIclIiXgQorQlS4p807A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gY-LINoeIclIiXgQorQlS4p807A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9599/C4D1585CDB0F11EB8A986139C4F9AE02/gY-LINoeIclIiXgQorQlS4p807A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b0:b2:e0:7a:88:53:ee:36:fd:89:25:fa:fe:1c:a6:43:99:
         44:e4:4c:15:95:88:d1:11:6b:a2:31:5f:44:a8:b7:c2:dd:46:
         4e:91:70:41:3d:56:4b:28:7b:21:e1:71:65:e4:77:48:11:f6:
         53:28:7c:aa:00:50:8c:78:05:9e:f3:e2:cb:4a:8b:9e:c6:55:
         c8:55:7f:95:51:a3:97:33:9b:c1:ba:26:a2:e2:de:ce:4b:e9:
         0b:7b:53:41:e1:9b:0b:9a:43:f4:5e:1e:67:01:f1:6f:e2:d2:
         1f:8b:a9:55:d4:dd:31:14:61:7d:7a:23:d4:fb:89:d4:cd:d0:
         c2:ad:51:f3:87:fd:7a:87:58:72:09:4d:d8:b5:fe:4b:d6:85:
         32:00:c7:cd:af:10:fe:2d:72:cb:69:7c:58:23:db:eb:a8:79:
         05:69:1d:73:fe:d7:6c:d9:c5:30:c7:ce:65:5a:0a:5d:db:a9:
         6d:7e:88:35:98:21:c4:03:2a:03:04:5b:e1:1b:92:ab:38:0e:
         d6:73:9a:75:1f:61:15:45:aa:62:af:5e:96:bf:e7:76:07:22:
         39:c6:e0:37:44:bf:43:bd:e8:27:ae:08:94:b7:50:a4:a0:ab:
         ef:49:01:9f:f8:67:e0:38:ce:96:77:e2:2b:62:f1:4b:bd:b1:
         83:22:8c:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjk1OTkxMTAvBgNVBAUTKDgxOEY4QjIwREExRTIxQzk0ODg5NzgxMEEyQjQyNTRC
OEE3Q0QzQjAwHhcNMjQwMjE5MDEwMzI0WhcNMjQwMjI2MDEwMzI0WjAYMRYwFAYD
VQQDEw02NWQyYThkYy03MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5e7o89p1nd7ShNqjWDInsbX1CfyyVha2FSS0w/QCIbrpYrGdMKo0EpMnO8Px
4527sDIerYkWDqYrkyllAgNNnyv177eFws9hRLQ8TvkWVFhp6NX0Ys+pk6SZZA/T
HgPhHXXyOsMGz5LXELSTp8NA+4kYs5ch2fE1bmL5kcT0v15eB7P1FV0uatFizSg6
kDNGnT7AJ4IKRqi29NfNQmuMURLibxMWIywiUGSSui0nPQcOYIhB6vA7pJrTu7Gi
LDYBTvCsffpeZHcHCpwCv5Ou3oiW5N8/oaczB9cKq2GwweGLjFci+OcXQuF/SE3H
gefBaNWCIneP/CamcRGCumUnZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuw6s1w
aJulJ6qKNj67oDTz8lY2MB8GA1UdIwQYMBaAFIGPiyDaHiHJSIl4EKK0JUuKfNOw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTU5OS9DNEQxNTg1Q0RC
MEYxMUVCOEE5ODYxMzlDNEY5QUUwMi9nWS1MSU5vZUljbElpWGdRb3JRbFM0cDgw
N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dZLUxJTm9lSWNsSWlYZ1FvclFsUzRwODA3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTU5OS9DNEQxNTg1Q0RCMEYxMUVCOEE5ODYxMzlDNEY5QUUwMi9nWS1MSU5vZUlj
bElpWGdRb3JRbFM0cDgwN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtsLLgeohT7jb9iSX6/hymQ5lE5EwVlYjREWuiMV9EqLfC3UZOkXBB
PVZLKHsh4XFl5HdIEfZTKHyqAFCMeAWe8+LLSouexlXIVX+VUaOXM5vBuiai4t7O
S+kLe1NB4ZsLmkP0Xh5nAfFv4tIfi6lV1N0xFGF9eiPU+4nUzdDCrVHzh/16h1hy
CU3Ytf5L1oUyAMfNrxD+LXLLaXxYI9vrqHkFaR1z/tds2cUwx85lWgpd26ltfog1
mCHEAyoDBFvhG5KrOA7Wc5p1H2EVRapir16Wv+d2ByI5xuA3RL9DvegnrgiUt1Ck
oKvvSQGf+GfgOM6Wd+IrYvFLvbGDIozo
-----END CERTIFICATE-----