Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.mft
File:                     nAvVP5xLfI48HAx_K9P9F84sL-I.mft (raw, json)
Hash identifier:          msOamGn4UxECU4sJxyQK8NM0SPAIhSz8QkSkxL5MYwQ=
Subject key identifier:   77:B4:8E:57:76:6C:09:48:D1:23:91:06:50:2E:C2:EB:C6:43:A9:5E
Authority key identifier: 9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2
Certificate issuer:       /CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
Certificate serial:       3433
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.mft
Manifest number:          3393
Signing time:             Fri 14 Jul 2023 14:30:34 +0000
Manifest this update:     Fri 14 Jul 2023 14:30:33 +0000
Manifest next update:     Fri 21 Jul 2023 14:30:33 +0000
Files and hashes:         1: nAvVP5xLfI48HAx_K9P9F84sL-I.crl (hash: NL9A/PQ5rE7yQ78g8cIq+TOxf8rRy5dYiYux6xx+twc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13363 (0x3433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDE77/serialNumber=9C0BD53F9C4B7C8E3C1C0C7F2BD3FD17CE2C2FE2
        Validity
            Not Before: Jul 14 14:30:33 2023 GMT
            Not After : Jul 21 14:30:33 2023 GMT
        Subject: CN=64b15c0a-782b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:fb:51:08:86:fe:18:86:bd:79:fc:bd:d0:
                    1a:1e:43:48:e8:46:6a:7d:32:51:28:ce:5e:fa:74:
                    b6:99:b0:04:07:a8:f6:ef:f9:7e:ff:7b:fc:4c:ff:
                    78:d1:63:7d:f5:21:86:c3:dd:eb:5e:c0:95:85:4b:
                    a4:16:4e:e7:98:a2:8f:3d:c1:05:be:54:da:9a:c9:
                    0f:66:f6:6b:bf:a5:78:36:45:a8:3d:90:7b:1c:d6:
                    9e:82:e4:39:bd:2e:81:6a:6a:70:df:94:dd:cc:3c:
                    8f:56:9b:28:14:c0:a4:9d:db:5f:c9:8a:b3:49:90:
                    4b:c0:1d:77:a8:2b:a4:06:5c:2a:1f:ff:cc:d7:d6:
                    1e:ad:e6:e9:75:58:8b:f6:e2:04:ae:d7:b4:85:30:
                    3c:75:f0:47:8e:24:0f:fc:6e:25:99:25:1f:d6:47:
                    7a:5c:18:b9:b3:e3:7d:b6:ea:1c:b0:c8:0a:78:15:
                    cf:64:5b:a6:d3:a8:1f:09:14:f3:8f:fa:8d:5b:c9:
                    f5:f4:78:fb:da:bc:d8:1b:7f:30:4d:99:49:12:ab:
                    29:4f:ab:89:cb:0d:66:df:bb:21:6f:2f:b7:85:f0:
                    ba:2a:36:71:f1:ca:4f:21:03:ef:9a:a7:0c:26:14:
                    80:2a:3a:36:aa:e8:25:23:ad:29:9a:b3:e0:fe:a2:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B4:8E:57:76:6C:09:48:D1:23:91:06:50:2E:C2:EB:C6:43:A9:5E
            X509v3 Authority Key Identifier:
                keyid:9C:0B:D5:3F:9C:4B:7C:8E:3C:1C:0C:7F:2B:D3:FD:17:CE:2C:2F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAvVP5xLfI48HAx_K9P9F84sL-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE77/3A66965C1D8411E291A515DA08B02CD2/nAvVP5xLfI48HAx_K9P9F84sL-I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:73:ab:b0:ab:8c:ec:b0:db:21:60:aa:d9:7c:a9:15:41:cf:
         e2:14:97:e2:22:c6:c5:6d:a7:8e:a2:17:d1:ac:fb:a7:a5:b1:
         cc:c3:57:31:cf:cf:5c:55:de:b3:02:20:a5:ff:46:6b:4d:aa:
         76:92:f8:cb:44:a3:0f:0a:83:ec:d6:7a:fb:41:78:ca:0e:96:
         e3:42:63:a1:b5:d4:36:b5:fd:27:88:50:75:a1:5e:79:4b:3e:
         cd:6f:bd:46:18:a0:06:a5:29:1b:3c:11:db:7e:df:a3:a6:e4:
         ea:9d:21:13:80:c2:c6:66:69:be:37:d6:db:d7:38:a4:ea:da:
         da:b9:3b:e7:b2:40:52:09:dc:5f:3d:06:89:b3:77:37:a8:62:
         d3:a1:22:83:c4:f6:85:a6:02:a0:30:09:ca:7c:6e:14:aa:8e:
         be:b7:46:1b:99:26:9f:2e:39:21:e1:ad:55:b2:d2:57:92:63:
         16:e6:40:cc:d5:5d:b6:90:78:17:30:54:c4:21:e1:0b:2f:61:
         53:75:a4:f8:aa:a6:27:cf:99:fb:d1:19:fc:1d:69:e4:68:2c:
         21:84:14:a5:27:0f:b6:d6:51:bf:da:f4:45:f8:7a:ae:d9:c7:
         d2:9d:94:59:d9:c7:a6:80:e3:97:19:53:76:7c:21:a8:ce:96:
         85:e5:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----