Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/pVeQOZhitrqnfgugRGfoWfsEnBE.mft
File:                     pVeQOZhitrqnfgugRGfoWfsEnBE.mft (raw, json)
Hash identifier:          5ZuW3FSZYrMFffaVRVESVg3L5R90/iMpDiz2JX3Hdds=
Subject key identifier:   32:90:A1:93:73:27:E8:A8:60:73:EF:47:62:4C:99:7F:E0:B1:CE:3A
Authority key identifier: A5:57:90:39:98:62:B6:BA:A7:7E:0B:A0:44:67:E8:59:FB:04:9C:11
Certificate issuer:       /CN=A91C1DF8/serialNumber=A55790399862B6BAA77E0BA04467E859FB049C11
Certificate serial:       0BC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVeQOZhitrqnfgugRGfoWfsEnBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/pVeQOZhitrqnfgugRGfoWfsEnBE.mft
Manifest number:          1365
Signing time:             Tue 16 Jul 2024 18:56:29 +0000
Manifest this update:     Tue 16 Jul 2024 18:56:28 +0000
Manifest next update:     Tue 23 Jul 2024 18:56:28 +0000
Files and hashes:         1: pVeQOZhitrqnfgugRGfoWfsEnBE.crl (hash: U8LgYwzDD1LYnOBpB9pdA0LLiqzyNjbQlRdYhPfqfgg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3013 (0xbc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1DF8/serialNumber=A55790399862B6BAA77E0BA04467E859FB049C11
        Validity
            Not Before: Jul 16 18:56:28 2024 GMT
            Not After : Jul 23 18:56:28 2024 GMT
        Subject: CN=6696c25c-a935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:24:8b:46:e5:df:22:f1:4f:c6:96:34:5e:
                    ed:6b:74:4c:c9:14:c8:81:cd:e2:fc:9b:40:92:a0:
                    e2:60:68:a1:9f:07:51:4b:f7:d4:99:07:ad:eb:e1:
                    8f:dc:7c:16:e7:0f:0d:02:db:bd:62:c7:e7:84:ce:
                    7e:2e:8d:e4:58:db:ff:ea:c9:9c:94:dc:e2:f6:91:
                    b9:db:ce:40:44:7a:9e:78:7d:9a:95:16:84:d3:d0:
                    0e:ac:d1:4d:57:49:00:c6:1e:bf:3a:2f:c9:ed:f4:
                    27:90:83:31:bc:fe:7c:f9:72:d2:47:1a:80:2e:45:
                    1c:06:9b:f5:7c:f1:e0:43:a0:d6:4c:b0:32:8e:38:
                    28:c6:94:d7:81:01:17:4b:fc:17:3c:ed:ff:02:3f:
                    60:5f:06:ce:05:4f:6b:f4:50:bd:9b:c5:e6:e7:95:
                    79:78:75:25:3f:1d:32:a6:ec:37:88:03:77:a8:d5:
                    90:f6:ac:39:e3:62:6e:c7:1f:0b:91:4a:e3:f7:2f:
                    77:f4:87:26:4c:9e:42:2e:14:d5:ca:49:ac:29:06:
                    26:7e:df:39:74:51:43:f4:e6:ed:94:c9:0c:c9:67:
                    4e:9e:ae:87:7b:ce:58:27:f8:e6:7c:86:f0:fb:da:
                    74:8c:1a:be:51:c6:e0:46:7d:0c:ef:64:b3:5c:4c:
                    71:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:90:A1:93:73:27:E8:A8:60:73:EF:47:62:4C:99:7F:E0:B1:CE:3A
            X509v3 Authority Key Identifier:
                keyid:A5:57:90:39:98:62:B6:BA:A7:7E:0B:A0:44:67:E8:59:FB:04:9C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/pVeQOZhitrqnfgugRGfoWfsEnBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pVeQOZhitrqnfgugRGfoWfsEnBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DF8/EB831BD8013711EAB94D7D3CC4F9AE02/pVeQOZhitrqnfgugRGfoWfsEnBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:47:0f:5d:ab:b6:09:d9:8c:0c:ea:8e:59:0f:b1:7e:54:cc:
         fe:75:3e:d7:c9:2d:b2:17:07:89:83:42:6d:a0:bb:10:25:cc:
         08:d1:2b:aa:90:c3:b1:a4:6a:cf:65:81:63:dc:19:0c:c5:ec:
         52:6e:c0:06:7e:2a:cb:85:16:f0:5e:fc:89:46:c5:10:1c:e8:
         37:1b:27:40:ef:8d:b9:04:b9:c9:68:d2:9b:32:6f:bf:4f:c4:
         ef:30:c2:ca:c6:a3:bf:a2:ce:6a:f3:e0:14:96:04:a8:bd:a6:
         b6:c1:f4:69:e2:27:e8:dc:e8:9d:a7:8d:7a:63:c0:20:c8:b2:
         32:32:0a:36:7e:b4:3b:1b:10:70:fe:db:a1:35:c0:c0:0e:b1:
         6e:08:ac:0b:1d:94:85:ff:19:c8:9e:f8:6b:8c:06:5f:71:0c:
         88:d1:a9:d9:bc:f0:58:31:40:0a:06:78:96:ae:0c:e9:2f:49:
         f9:a5:22:6f:38:2e:d5:40:b8:a3:97:75:d3:22:a5:8c:59:4e:
         18:b9:a9:f8:06:25:9b:d5:83:dc:0f:14:21:dc:15:97:0c:3f:
         d8:f0:51:ef:02:c7:5a:e4:1d:a6:04:35:8e:10:76:fe:2b:9f:
         7f:79:03:07:8c:62:18:7d:43:84:4d:dc:41:94:65:ba:ac:ee:
         51:b7:99:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFERjgxMTAvBgNVBAUTKEE1NTc5MDM5OTg2MkI2QkFBNzdFMEJBMDQ0NjdFODU5
RkIwNDlDMTEwHhcNMjQwNzE2MTg1NjI4WhcNMjQwNzIzMTg1NjI4WjAYMRYwFAYD
VQQDEw02Njk2YzI1Yy1hOTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwCYki0bl3yLxT8aWNF7ta3RMyRTIgc3i/JtAkqDiYGihnwdRS/fUmQet6+GP
3HwW5w8NAtu9YsfnhM5+Lo3kWNv/6smclNzi9pG5285ARHqeeH2alRaE09AOrNFN
V0kAxh6/Oi/J7fQnkIMxvP58+XLSRxqALkUcBpv1fPHgQ6DWTLAyjjgoxpTXgQEX
S/wXPO3/Aj9gXwbOBU9r9FC9m8Xm55V5eHUlPx0ypuw3iAN3qNWQ9qw542Juxx8L
kUrj9y939IcmTJ5CLhTVykmsKQYmft85dFFD9ObtlMkMyWdOnq6He85YJ/jmfIbw
+9p0jBq+UcbgRn0M72SzXExxIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKQoZNz
J+ioYHPvR2JMmX/gsc46MB8GA1UdIwQYMBaAFKVXkDmYYra6p34LoERn6Fn7BJwR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURGOC9FQjgzMUJEODAx
MzcxMUVBQjk0RDdEM0NDNEY5QUUwMi9wVmVRT1poaXRycW5mZ3VnUkdmb1dmc0Vu
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BWZVFPWmhpdHJxbmZndWdSR2ZvV2ZzRW5CRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MURGOC9FQjgzMUJEODAxMzcxMUVBQjk0RDdEM0NDNEY5QUUwMi9wVmVRT1poaXRy
cW5mZ3VnUkdmb1dmc0VuQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNRw9dq7YJ2YwM6o5ZD7F+VMz+dT7XyS2yFweJg0JtoLsQJcwI0Suq
kMOxpGrPZYFj3BkMxexSbsAGfirLhRbwXvyJRsUQHOg3GydA7425BLnJaNKbMm+/
T8TvMMLKxqO/os5q8+AUlgSovaa2wfRp4ifo3Oidp416Y8AgyLIyMgo2frQ7GxBw
/tuhNcDADrFuCKwLHZSF/xnInvhrjAZfcQyI0anZvPBYMUAKBniWrgzpL0n5pSJv
OC7VQLijl3XTIqWMWU4Yuan4BiWb1YPcDxQh3BWXDD/Y8FHvAsda5B2mBDWOEHb+
K59/eQMHjGIYfUOETdxBlGW6rO5Rt5kc
-----END CERTIFICATE-----